Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/B3lzECI8w3HbbNBrJuEUc9_EF5k.roa
File: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (raw, json)
Hash identifier: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=
Subject key identifier: 07:79:73:10:22:3C:C3:71:DB:6C:D0:6B:26:E1:14:73:DF:C4:17:99
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A05EA535F07D0CF4B0EB532E3739E04C46
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/B3lzECI8w3HbbNBrJuEUc9_EF5k.roa
Signing time: Tue 01 Sep 2026 20:24:40 +0000
ROA not before: Tue 01 Sep 2026 20:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 45.89.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:a5:35:f0:7d:0c:f4:b0:eb:53:2e:37:39:e0:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 1 20:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07797310223cc371db6cd06b26e11473dfc41799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:a2:bd:5b:62:4d:c1:31:80:c1:4a:60:c8:
0d:0e:cd:25:e4:ff:8c:1e:3e:c1:c9:38:b2:6b:b3:
76:a8:71:b1:7e:11:14:bb:0b:21:07:81:24:3c:6f:
83:b8:c7:13:6a:c9:a7:27:5a:44:82:ae:a2:a0:9d:
0e:88:4a:5b:f1:b1:59:66:b6:2f:89:f8:65:91:88:
21:2e:a5:fe:81:61:de:8b:2c:cc:56:13:83:c9:82:
b5:8f:1c:2c:f7:d9:ad:f1:91:95:d2:e8:71:73:68:
bc:f0:c3:34:65:54:87:e9:e2:2f:a3:42:ca:ef:b2:
36:f6:9a:10:33:a2:67:35:5b:4b:cc:dd:f1:d4:f6:
98:9f:3a:2e:6a:15:46:a1:58:16:d6:63:57:57:fa:
e3:6b:16:6c:88:c2:03:d8:7f:f4:eb:16:44:6e:07:
11:f9:e5:a8:e1:44:5b:fc:ab:2d:a7:95:d9:01:49:
8d:a8:43:23:0b:e2:d7:46:fb:86:1d:4e:17:95:37:
7d:ab:84:82:3d:0e:d5:af:21:60:64:77:a2:e7:7a:
dd:91:b3:69:db:d1:c8:85:10:58:28:0f:a3:db:7e:
9e:6a:c8:08:66:1b:85:ad:ec:e7:28:2f:2c:a2:4e:
56:b8:08:33:f6:1a:43:17:b7:35:c5:59:3a:05:94:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:79:73:10:22:3C:C3:71:DB:6C:D0:6B:26:E1:14:73:DF:C4:17:99
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/B3lzECI8w3HbbNBrJuEUc9_EF5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8f:21:6b:7a:db:05:72:05:c5:af:8a:31:ab:29:1d:fe:27:
53:7c:cc:e8:47:3d:e8:ce:b6:93:3d:24:0a:67:6d:2c:20:50:
e9:54:3e:96:f4:5b:e4:5b:c8:e4:bb:3c:21:a1:c7:6c:be:43:
b1:99:3e:a4:a7:d9:53:d4:c3:c3:63:b9:5a:9e:20:98:5e:44:
02:f3:34:4c:65:a6:49:93:77:98:b4:37:5c:c5:79:f4:45:c6:
ec:06:56:af:30:6d:60:80:80:87:0a:22:01:fb:ee:03:43:91:
e0:d3:5e:1d:ce:75:a6:91:bc:90:d6:c3:f4:ad:73:71:93:e4:
00:00:f7:39:19:31:87:43:20:28:1f:df:01:a6:10:60:d3:2f:
b5:6c:a1:15:11:0e:56:f1:b4:4d:97:74:cf:b3:95:ec:36:93:
d0:f6:91:50:31:fc:1a:f4:6f:f2:72:b6:9b:6d:e6:c8:f3:0a:
54:4c:62:90:9c:cd:31:ab:7a:99:b6:61:ff:08:af:c8:e6:28:
e2:d3:68:29:6c:98:c5:1c:d2:98:54:05:09:22:c0:9e:29:15:
87:45:79:d8:21:36:4b:c7:83:a1:7e:cd:5d:1b:38:b4:67:04:
f6:f2:3a:33:8f:07:c9:0e:5e:01:4b:8a:02:0a:37:44:41:b6:
77:89:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:17 2026 by rpki-client