Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eYbKT4Nm6_cOZncl1JYjF6MWZ4s.roa
File: eYbKT4Nm6_cOZncl1JYjF6MWZ4s.roa (raw, json)
Hash identifier: 1uXunyDlOpMVfItQaVYN4NZ62hW/I9kE+t33f+kmsqE=
Subject key identifier: 79:86:CA:4F:83:66:EB:F7:0E:66:77:25:D4:96:23:17:A3:16:67:8B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0582BAF0AEB61843BF37B292BE6C15960
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eYbKT4Nm6_cOZncl1JYjF6MWZ4s.roa
Signing time: Mon 31 Aug 2026 14:14:12 +0000
ROA not before: Mon 31 Aug 2026 14:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:2b:af:0a:eb:61:84:3b:f3:7b:29:2b:e6:c1:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 31 14:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7986ca4f8366ebf70e667725d4962317a316678b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:78:a3:6c:df:6a:96:8f:26:62:b6:15:6d:
88:69:60:cd:5d:09:fa:ac:d7:dd:bd:8b:30:e1:c2:
2b:19:20:e8:2e:8f:69:7d:d7:b3:77:c5:29:16:31:
91:aa:8f:0e:79:ff:ae:04:ee:31:de:f0:db:19:1f:
f0:2d:6d:64:00:c5:a1:c4:f4:1d:df:38:75:1d:e4:
67:cf:82:57:6e:47:38:08:72:eb:dd:77:55:6f:28:
93:ca:c9:8e:14:3d:2c:1b:c7:d9:f3:14:13:07:7b:
f8:1f:f0:50:fa:58:c8:57:93:3d:13:0c:35:eb:6b:
cc:a0:fe:dc:19:5e:7c:4f:f3:43:bc:d2:f0:6a:39:
d7:be:f8:18:bd:07:ef:8f:1c:74:4e:61:5f:6a:de:
73:5d:32:47:6a:c5:b3:c6:1a:a3:9d:7c:3d:72:3f:
ec:6c:a5:bb:0e:a4:8b:0b:2f:78:fc:5e:97:91:03:
f5:12:2a:9d:67:a4:f5:9a:56:4f:d1:ae:4d:92:3d:
28:08:66:eb:9f:cb:ad:2d:a9:1a:48:84:16:61:77:
62:85:b5:a4:75:60:16:4b:28:b9:1d:b0:e3:bd:c8:
68:5c:24:fa:ac:82:1f:b2:8e:25:1c:c2:45:d6:85:
d6:0b:5b:d6:20:91:e9:9d:f3:24:09:b8:89:2e:14:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:CA:4F:83:66:EB:F7:0E:66:77:25:D4:96:23:17:A3:16:67:8B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/eYbKT4Nm6_cOZncl1JYjF6MWZ4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
22:55:d7:72:a4:92:3a:b0:fb:ea:81:8f:dc:15:5f:25:86:1e:
c4:a1:00:5e:73:df:86:89:73:05:5c:55:83:db:af:23:2e:f5:
cf:c4:cc:b9:e2:b6:29:a0:89:8f:b5:74:bd:51:40:c3:b3:e0:
cb:46:dc:2f:1d:de:8c:0c:35:04:fe:7f:46:a6:bb:78:26:d3:
48:9b:7e:72:1c:c8:4d:13:1d:96:1b:2c:4f:ff:ae:02:0e:f1:
7e:22:79:7c:0d:11:dc:b1:74:fc:40:40:d5:aa:76:6a:50:db:
94:d6:ef:ff:9f:bf:1d:6c:cb:1c:07:95:3b:dd:80:24:9f:7b:
7c:f7:55:39:0e:32:84:e9:18:5a:6a:76:c4:4e:b7:c2:10:3f:
76:6e:ac:d6:f0:17:12:74:3d:96:3a:78:c9:0e:25:8d:6f:28:
ae:12:99:60:80:75:5d:9e:88:6c:52:4c:72:9e:46:50:91:e4:
cd:58:33:55:2b:d8:3d:f8:5e:ef:67:f2:83:4c:27:11:86:48:
37:6a:6a:c4:da:5b:0f:fd:49:5e:d1:8f:89:c4:4a:88:38:ef:
9d:a7:a1:cf:b8:c5:62:8c:c2:6e:a2:b1:e7:27:e2:10:c7:74:
2f:10:53:67:26:20:d3:dd:3f:91:b4:cf:61:2c:52:31:8e:5a:
72:e2:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:15 2026 by rpki-client