Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/Ru9KC4nvRUDF4bBAaW6tgqG-Wu8.roa
File: Ru9KC4nvRUDF4bBAaW6tgqG-Wu8.roa (raw, json)
Hash identifier: sRTsiBo1pOMtAFb9I92ULrCBl10f1Og0CuUrBuyqSS4=
Subject key identifier: 46:EF:4A:0B:89:EF:45:40:C5:E1:B0:40:69:6E:AD:82:A1:BE:5A:EF
Certificate issuer: /CN=df9da51ba72784a04e44120f9ded478567794c1b
Certificate serial: 019F023291BEB9B58312446CC3EA7D34ADCD
Authority key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/Ru9KC4nvRUDF4bBAaW6tgqG-Wu8.roa
Signing time: Fri 26 Jun 2026 04:31:36 +0000
ROA not before: Fri 26 Jun 2026 04:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208450
IP address blocks: 45.136.56.0/24 maxlen: 24
45.136.57.0/24 maxlen: 24
45.136.58.0/24 maxlen: 24
45.136.59.0/24 maxlen: 24
2a0e:9340::/48 maxlen: 48
2a0e:9340:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:32:91:be:b9:b5:83:12:44:6c:c3:ea:7d:34:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df9da51ba72784a04e44120f9ded478567794c1b
Validity
Not Before: Jun 26 04:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ef4a0b89ef4540c5e1b040696ead82a1be5aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:48:56:e2:b1:a8:b0:fc:a2:ab:d0:f6:85:
c0:a4:84:96:e4:50:f8:dc:93:df:1e:c5:19:b2:e8:
e7:19:91:cb:69:35:6f:ad:f1:7a:00:e9:73:16:ed:
e3:e3:e9:c5:07:78:83:59:dc:45:a6:5f:6d:b3:19:
ed:d1:50:f1:93:df:91:d4:29:2a:20:c0:0c:5e:97:
23:c4:a8:bb:a9:81:a8:d9:6c:ea:7e:ea:10:f8:c8:
74:b3:9d:11:60:78:06:b6:6e:99:1f:d5:76:9e:b8:
0b:a2:ce:7d:a2:e9:ea:57:e8:f8:d0:ff:e8:2e:ae:
91:8c:4f:c3:49:14:f1:18:9b:46:a2:3f:15:1e:00:
ad:5a:43:7b:2f:0a:92:7c:69:cb:db:8b:f8:7f:38:
b3:43:eb:e5:9b:62:0d:78:06:cf:40:9d:7f:96:d1:
2e:55:a2:5e:f2:bd:1a:f0:4f:13:0a:69:db:17:28:
20:ed:2c:7a:fc:4b:e8:96:43:47:73:46:05:db:ed:
79:d1:f0:a6:99:1b:48:f6:f5:d6:fd:ed:c9:ff:b0:
07:15:7b:80:b8:64:e2:c3:fc:d1:7f:36:60:15:99:
99:47:ea:72:c0:fd:78:fb:12:16:3e:b0:7d:7b:ea:
e8:cc:8a:17:83:54:3c:d4:dc:48:56:95:e7:a8:2e:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:4A:0B:89:EF:45:40:C5:E1:B0:40:69:6E:AD:82:A1:BE:5A:EF
X509v3 Authority Key Identifier:
keyid:DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/Ru9KC4nvRUDF4bBAaW6tgqG-Wu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.56.0/22
IPv6:
2a0e:9340::/47
Signature Algorithm: sha256WithRSAEncryption
0f:d8:5a:04:2f:0c:ef:dc:f3:a4:3c:a4:b5:06:bd:63:bf:c0:
ba:d3:ae:6b:cd:ff:1d:24:e2:ec:c8:80:42:87:94:64:24:24:
b8:c0:76:a5:96:8e:f6:01:9e:2f:49:58:61:7d:b7:e7:46:fd:
17:f9:d5:71:68:9b:64:c6:98:02:b0:cb:f5:ce:b4:b2:56:4e:
be:da:e5:e9:7e:b9:ed:d0:dd:cb:6b:2e:27:1f:24:bd:23:f1:
e7:33:ac:34:65:a4:2c:27:90:d7:79:06:8d:b8:a9:1e:35:c4:
bc:a7:db:00:7d:31:61:80:ed:09:cd:08:b1:94:b7:48:df:b9:
5c:af:61:f9:24:51:ff:88:b4:b9:32:44:a7:f2:91:b4:88:3e:
43:1a:ae:1f:9c:8c:09:0a:68:8a:93:2d:04:42:62:8d:c7:15:
17:73:d4:41:40:8e:ee:14:d4:3f:da:af:7c:38:0a:8a:3c:e4:
f2:0c:c7:77:09:4d:84:93:68:59:01:32:5a:50:a7:f1:58:7f:
fd:80:b2:34:4d:c6:77:d6:cf:dc:f5:f2:3d:fa:1b:38:f5:10:
53:c5:55:e6:fd:ad:45:a0:ad:20:0a:36:35:99:51:25:b3:9d:
09:48:e6:c1:66:04:b7:be:7b:46:dc:fe:71:2c:b8:a1:63:18:
05:1c:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client