Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/0j-b0UIU9NNEJkpR1VPx73yU19g.roa
File: 0j-b0UIU9NNEJkpR1VPx73yU19g.roa (raw, json)
Hash identifier: TOuY3lYHB29I1rwod7JPPIhHmcaY8Z8/HbPhccan9Nw=
Subject key identifier: D2:3F:9B:D1:42:14:F4:D3:44:26:4A:51:D5:53:F1:EF:7C:94:D7:D8
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 01A0DE68A1EA3C72E694ED1530C58A141032
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/0j-b0UIU9NNEJkpR1VPx73yU19g.roa
Signing time: Sat 26 Sep 2026 15:49:54 +0000
ROA not before: Sat 26 Sep 2026 15:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208997
IP address blocks: 45.11.136.0/23 maxlen: 23
45.11.136.0/24 maxlen: 24
45.11.137.0/24 maxlen: 24
45.11.138.0/24 maxlen: 24
45.11.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:68:a1:ea:3c:72:e6:94:ed:15:30:c5:8a:14:10:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Sep 26 15:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d23f9bd14214f4d344264a51d553f1ef7c94d7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:03:17:81:a8:81:e4:e2:70:d2:9c:d7:09:
ee:24:14:fe:1b:31:61:6a:b9:2c:ce:96:25:49:bf:
8f:7f:24:5d:59:58:fb:4f:5c:a3:6c:09:99:fe:cd:
08:90:2f:00:59:4e:ca:ae:c4:db:60:24:8d:d7:e6:
f9:75:2e:03:4e:7a:b8:ef:e0:32:77:78:b0:39:8e:
42:1e:76:76:42:27:73:d8:40:40:1a:b0:2a:6f:52:
78:66:52:f1:a8:42:d9:f2:fa:0d:a9:96:a0:93:77:
95:cb:4f:dd:e2:0e:40:03:5a:60:d2:cf:c4:ac:cd:
9c:2e:09:db:91:1c:ed:bf:08:c5:87:65:d5:aa:16:
dd:99:59:e3:a6:c9:b8:3d:39:93:ba:89:a9:51:1a:
7b:26:71:47:32:26:0a:09:9b:07:d4:ec:eb:63:cb:
17:e3:59:d4:57:b5:f5:30:dd:6c:c0:1d:25:06:c8:
2b:bc:9b:26:4e:ed:f3:de:8d:00:ca:76:3a:89:8c:
08:b5:b6:e5:67:d0:df:1c:82:31:2b:4f:3c:aa:7d:
3e:c0:90:79:14:b5:31:63:31:81:56:97:c0:2a:06:
74:46:81:24:bd:e2:c4:99:09:fa:ae:44:ff:f1:c5:
13:85:be:74:61:60:4e:c4:7b:d0:28:df:da:21:86:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:9B:D1:42:14:F4:D3:44:26:4A:51:D5:53:F1:EF:7C:94:D7:D8
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/0j-b0UIU9NNEJkpR1VPx73yU19g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:22:08:37:a0:cc:37:1a:a5:5c:e6:22:f0:bb:2a:db:97:b6:
75:6e:92:dd:5f:35:32:00:96:a1:22:a7:bc:56:7b:23:a9:86:
08:60:da:58:c5:02:d4:60:16:e0:4c:ea:5b:06:b0:f1:8b:7a:
02:36:a6:63:55:3d:e4:08:b9:5a:be:cd:d9:92:0c:03:b9:11:
09:c7:6d:20:06:e8:2f:32:45:a4:54:59:ee:ef:87:68:d4:5f:
4f:39:25:93:84:14:45:e5:63:f0:47:90:76:6a:9b:7a:db:be:
49:f9:16:3e:1f:81:e8:2f:03:83:41:d1:8e:93:6c:6d:9f:13:
18:78:17:ad:1f:75:86:2f:ec:71:a1:8c:49:b3:f5:87:be:97:
92:7a:af:fd:88:16:02:94:73:63:79:4d:56:72:93:ef:31:a7:
04:14:6d:d1:76:93:53:eb:93:8d:ba:9e:ef:92:00:e3:6f:48:
b9:9f:4f:0f:76:68:06:65:6c:2e:4e:97:ab:3f:29:7e:8d:80:
db:66:5f:ac:ba:f1:8b:95:79:11:31:34:d1:54:b3:c8:b7:7f:
70:86:00:e0:fe:c8:2c:db:a4:c8:7c:b3:0d:08:3a:81:aa:8c:
64:36:b1:54:2d:f2:8b:4e:a3:b4:cd:20:74:5a:9b:df:5b:1a:
62:26:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:02:27 2026 by rpki-client