Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C4t8uD-1l6v2-L1moY5dn94kwTY.roa
File: C4t8uD-1l6v2-L1moY5dn94kwTY.roa (raw, json)
Hash identifier: zib44M6VzUYLgG5eXpBjODdbBkEaiX8tbBqBRJN5cjE=
Subject key identifier: 0B:8B:7C:B8:3F:B5:97:AB:F6:F8:BD:66:A1:8E:5D:9F:DE:24:C1:36
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01A00F44E24A83C5F8789B3EA9560E008D84
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C4t8uD-1l6v2-L1moY5dn94kwTY.roa
Signing time: Mon 17 Aug 2026 10:29:27 +0000
ROA not before: Mon 17 Aug 2026 10:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 932
IP address blocks: 45.83.236.0/24 maxlen: 24
45.150.198.0/23 maxlen: 24
91.208.73.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
91.208.245.0/24 maxlen: 24
91.208.246.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
2a12:ab80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:44:e2:4a:83:c5:f8:78:9b:3e:a9:56:0e:00:8d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 17 10:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b8b7cb83fb597abf6f8bd66a18e5d9fde24c136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:43:2d:96:84:1a:04:39:9a:10:d2:0b:65:
a8:a5:27:df:e4:87:ed:3f:34:d7:27:3f:76:d4:4a:
62:9d:24:86:ce:65:0c:66:5e:f1:16:54:33:06:6d:
f3:8c:c9:35:c9:68:16:12:5b:21:fd:31:7e:4d:17:
aa:47:2e:bc:4a:c9:74:8f:b6:49:db:29:c8:11:94:
72:44:07:0a:64:e5:c0:31:ac:ff:d4:e9:33:8d:b2:
27:12:d8:09:9b:b8:3d:9d:c2:ef:ff:8c:88:5e:01:
0d:3c:bf:95:54:6d:0f:1e:c8:9b:92:27:cf:ee:08:
2f:fd:e1:04:be:5f:20:d4:2a:05:e4:d8:88:e9:fe:
4d:06:0b:96:a5:1e:d1:51:69:74:8e:99:dc:ac:20:
fb:25:56:4e:fc:f8:7c:68:b8:3a:ce:54:ca:6e:d2:
bd:89:1c:bc:e3:18:8a:3c:6b:73:75:67:9b:3e:52:
f8:e2:7d:6b:be:93:48:db:29:09:a9:de:d2:7b:7c:
5c:eb:28:4a:c0:ba:96:b8:93:dc:de:18:97:77:1b:
93:d2:23:ca:0e:9e:65:09:1d:f2:7f:9b:5b:8f:da:
bd:7c:e5:fb:93:3c:a6:50:74:51:fe:83:c1:0b:9c:
d1:c0:df:ee:df:6d:a4:18:de:5a:7a:a8:c7:fd:dd:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:7C:B8:3F:B5:97:AB:F6:F8:BD:66:A1:8E:5D:9F:DE:24:C1:36
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/C4t8uD-1l6v2-L1moY5dn94kwTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.236.0/24
45.150.198.0/23
91.208.73.0/24
91.208.104.0/24
91.208.245.0-91.208.246.255
91.213.200.0/24
91.217.135.0/24
IPv6:
2a12:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:f3:6d:be:b1:9e:0b:a2:a3:14:af:53:9e:0f:88:83:de:00:
96:0a:3d:b8:91:0a:59:cd:a2:b3:a3:1f:db:0a:09:ba:97:8f:
07:81:82:42:e0:d2:1a:ea:57:db:66:73:96:24:44:20:4b:04:
e9:3a:69:c0:27:13:ce:07:2a:12:c5:f3:d6:2f:ce:8e:85:6a:
77:57:2f:b2:82:50:3c:e3:d1:e4:df:08:0a:d9:70:04:61:0d:
ae:b8:f4:99:29:47:04:9d:12:dd:fd:53:c3:6f:49:b1:1e:03:
d8:83:af:1c:6a:03:af:94:94:24:c9:68:5f:03:61:7d:2e:03:
a8:b1:04:dd:af:61:33:57:08:a9:4d:86:6a:f6:a4:1b:48:f8:
02:a3:a6:62:c7:78:a6:58:3a:43:e1:24:3a:4d:6d:9c:4e:9b:
3b:97:bb:3e:f8:86:69:e4:80:5d:7f:5d:76:50:97:da:27:fe:
9d:80:25:1f:5a:1c:b6:d2:ee:71:cc:53:bd:b9:3c:ee:8e:bb:
61:cb:9f:71:fb:4b:b4:1d:56:d5:f7:5f:57:be:70:7d:c5:c1:
e4:c0:10:88:df:b4:fe:9a:a8:e0:7a:b2:c1:28:eb:a5:43:c6:
e8:9a:30:93:24:bb:3f:6c:17:d0:0a:19:e0:64:c6:89:b6:85:
4d:82:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:00 2026 by rpki-client