Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Sd28n5DrQobKs9QgrHCwI1jEfu0.roa
File: Sd28n5DrQobKs9QgrHCwI1jEfu0.roa (raw, json)
Hash identifier: jA8Lm3BQJcKb73ah96i2aKZbD0o0WvynBWhWtqWH5PY=
Subject key identifier: 49:DD:BC:9F:90:EB:42:86:CA:B3:D4:20:AC:70:B0:23:58:C4:7E:ED
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019FFFAFEFA554F4FE1B5D35314C795B545C
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Sd28n5DrQobKs9QgrHCwI1jEfu0.roa
Signing time: Fri 14 Aug 2026 09:52:27 +0000
ROA not before: Fri 14 Aug 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 45.6.44.0/24 maxlen: 24
45.6.45.0/24 maxlen: 24
45.6.46.0/24 maxlen: 24
45.6.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:af:ef:a5:54:f4:fe:1b:5d:35:31:4c:79:5b:54:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Aug 14 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49ddbc9f90eb4286cab3d420ac70b02358c47eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:53:66:0d:34:fb:58:68:35:70:f0:a2:21:
1f:fc:b0:69:d9:59:9b:90:67:bd:28:2e:ea:da:52:
30:bb:08:0c:45:12:de:c5:50:17:14:99:6d:0e:85:
c1:9c:78:21:8f:1d:dc:52:52:89:5e:6a:98:f4:46:
49:ce:6a:d0:d5:27:6b:11:6c:ad:6f:ad:db:40:4c:
7e:ce:50:d6:d5:2f:99:1a:c6:c5:28:1f:56:75:2b:
b9:39:ab:5c:c8:b8:88:7a:d9:03:38:ad:ca:97:e6:
4f:fc:49:6a:b2:b7:14:a4:2c:5c:30:e3:74:b5:72:
30:13:1d:4f:7e:09:6c:fe:23:9c:6c:d2:6f:24:75:
ea:ed:25:28:38:12:6a:b1:94:e7:a1:86:4c:8b:f0:
7b:13:34:2d:43:28:74:f5:e0:c7:b3:e2:f8:f3:c1:
f5:87:1b:75:80:97:18:4d:98:13:a5:fe:9c:aa:bd:
bc:d3:f1:c3:1a:b2:54:11:8a:8d:be:e9:31:82:95:
e2:57:fd:3a:a5:7c:67:eb:46:f1:f8:1e:3e:4a:1b:
62:20:21:46:50:27:07:63:fc:04:eb:6b:16:81:e5:
30:18:ff:9c:1f:5a:cd:01:30:cb:57:c0:36:4d:4c:
06:f4:99:a5:dc:0a:03:48:78:25:d7:fe:52:51:65:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:BC:9F:90:EB:42:86:CA:B3:D4:20:AC:70:B0:23:58:C4:7E:ED
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/Sd28n5DrQobKs9QgrHCwI1jEfu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/22
Signature Algorithm: sha256WithRSAEncryption
40:6f:2e:22:eb:f3:6b:af:dd:13:ce:b2:ab:65:92:5e:5b:c8:
88:b3:be:a4:33:f7:af:f9:74:b8:55:c2:c9:1e:0b:40:3d:17:
d9:eb:56:dc:e5:83:ab:e7:7c:d6:68:6b:e2:cd:12:70:fb:ab:
36:09:2e:6a:c4:09:38:13:e9:bc:b3:bb:b2:97:ee:55:3c:18:
eb:b7:aa:e1:5e:15:d2:e8:45:77:25:05:1a:8f:07:a9:be:44:
41:9e:3c:a0:7c:dd:00:97:ef:48:d3:73:0e:2c:2f:08:75:28:
b3:59:f0:e8:bd:49:e2:45:0b:d0:89:9a:b8:23:18:ac:38:82:
83:ef:90:d4:d2:16:d1:2f:72:37:98:a8:eb:2c:10:48:ad:60:
91:11:e6:a5:69:98:9b:a2:73:90:92:13:76:1e:74:6e:93:51:
1f:87:40:80:38:c8:03:33:8d:c4:ef:9e:9d:8c:5a:b0:87:f2:
47:ef:a6:6a:45:91:83:57:71:17:cc:3c:ef:5c:2b:7c:1c:87:
2c:1e:ca:a2:aa:79:4a:cb:88:e2:3e:93:71:2a:59:37:6c:ba:
34:84:be:34:03:0c:ec:4b:7d:2f:9c:f0:e5:7c:50:9c:bc:4a:
31:e4:2e:d5:2c:31:1d:4e:3a:01:a4:5c:d3:21:3f:d0:9d:76:
08:02:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:56:50 2026 by rpki-client