Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa
File: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (raw, json)
Hash identifier: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=
Subject key identifier: 3D:2D:0F:B1:D9:D8:F8:76:5E:79:9D:59:E7:64:77:6E:42:B4:1D:FC
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A0141BD993484156BE6316D073A9CD6792
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa
Signing time: Tue 18 Aug 2026 09:02:44 +0000
ROA not before: Tue 18 Aug 2026 09:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 45.8.146.0/24 maxlen: 24
141.98.168.0/24 maxlen: 24
194.116.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:1b:d9:93:48:41:56:be:63:16:d0:73:a9:cd:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 18 09:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2d0fb1d9d8f8765e799d59e764776e42b41dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:6d:54:5a:5f:45:31:3e:c7:80:8c:31:ea:
88:b0:ab:2d:1d:f9:31:b4:0b:c5:62:19:2f:9b:2a:
b8:bb:20:1c:16:08:bc:a8:99:b1:db:8d:09:35:c6:
3e:88:9d:27:4b:d4:ac:2f:6d:e7:8d:cb:67:58:f4:
34:5a:97:11:4d:81:f4:4b:c2:0e:3d:8a:a9:2f:dd:
48:23:ba:0b:d1:db:b5:13:37:42:49:ba:6f:70:4f:
14:97:94:ca:61:ec:03:f9:8c:ad:18:34:54:5b:a3:
2b:49:37:ed:65:c3:b0:71:dd:ec:55:95:ad:92:0f:
d0:05:de:9a:b8:45:21:7c:85:2b:cd:91:0e:9c:35:
2c:bc:a5:31:07:09:74:91:cc:2a:3e:e7:dd:81:c6:
6f:2e:86:38:50:45:0e:19:4a:4c:66:93:bd:92:28:
f7:7c:4c:3a:5c:60:4e:9f:ab:7b:55:2d:61:77:e7:
e2:0d:97:f9:f9:1e:67:da:0f:70:64:d1:fb:6a:bd:
5a:03:ee:11:9e:11:1d:9b:24:5e:ff:7f:20:f7:35:
49:f0:50:c4:57:a8:83:d7:a0:3b:6a:79:c0:f5:67:
f1:b9:cd:7c:af:69:c6:7c:75:da:25:cd:8f:86:51:
ba:4e:b3:d4:b0:54:38:67:5e:93:0b:bb:5f:37:f1:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:0F:B1:D9:D8:F8:76:5E:79:9D:59:E7:64:77:6E:42:B4:1D:FC
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.146.0/24
141.98.168.0/24
194.116.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:95:f3:25:3a:94:a6:f8:86:2a:c9:32:e3:d6:9a:9a:bb:ae:
87:6c:2d:01:fc:b0:82:8c:9c:2e:69:10:cc:37:9b:c7:14:73:
3c:33:66:ba:9d:77:79:9e:5b:d4:24:cb:51:b8:d7:c5:ef:40:
dc:c6:c4:12:f6:c3:43:63:e6:8d:e0:2d:a7:08:6d:a9:ca:e9:
f7:d4:28:4c:bc:21:77:ef:e8:da:63:bd:8f:51:dc:66:58:ca:
14:88:49:42:00:9f:df:cf:f4:af:3d:05:a2:f7:7c:59:0e:e8:
a1:04:34:9e:b9:3c:fd:65:ad:95:4e:f0:c7:36:36:46:ba:c0:
a2:f1:33:0e:ee:85:17:54:c7:29:bc:05:1d:11:a3:2d:7a:33:
7e:38:26:bb:75:b7:4c:5f:71:54:69:6f:ca:9d:a4:bf:53:0b:
35:08:17:35:6d:62:50:49:06:21:4e:7d:81:ef:bf:ab:cc:47:
d9:05:a7:8b:38:b2:a0:88:c5:fa:a6:95:c6:b6:af:a4:04:60:
3d:d5:d5:14:ce:ec:23:a1:3e:ce:8f:9b:c0:a6:11:22:3b:09:
44:c4:ff:1b:c1:44:dd:a1:06:76:76:fd:51:26:26:3c:c7:7c:
52:b6:2d:c0:3a:d1:cc:22:91:57:58:88:0f:19:14:0d:d2:c9:
13:94:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:16 2026 by rpki-client