Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/4N7TKsAdU50Sfu-8v0ipI3-lins.roa
File: 4N7TKsAdU50Sfu-8v0ipI3-lins.roa (raw, json)
Hash identifier: oHXYu+TYlH400JCMIwTrTr3rlCmTcmPVIOW7UvumUcw=
Subject key identifier: E0:DE:D3:2A:C0:1D:53:9D:12:7E:EF:BC:BF:48:A9:23:7F:A5:8A:7B
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019FD8FB94E2E1F90DCED7B1F1B7BF61A909
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/4N7TKsAdU50Sfu-8v0ipI3-lins.roa
Signing time: Thu 06 Aug 2026 21:29:54 +0000
ROA not before: Thu 06 Aug 2026 21:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:fb:94:e2:e1:f9:0d:ce:d7:b1:f1:b7:bf:61:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 6 21:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0ded32ac01d539d127eefbcbf48a9237fa58a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:60:3e:7d:47:a0:df:80:3f:3a:cd:2e:1a:
08:b4:5f:90:b7:6b:29:25:d9:c2:01:05:ad:05:8a:
fe:92:b5:79:8b:a8:fb:9f:2d:c3:f6:1d:fa:72:21:
e8:0c:e0:1b:47:4b:19:ae:81:44:f5:c8:67:e8:df:
97:df:42:44:0e:86:74:2e:8d:aa:90:06:2b:28:4d:
20:4d:0a:df:e0:d4:29:b3:f3:0f:8e:c2:80:7d:e9:
36:ea:eb:f5:bc:3a:45:da:4d:3b:c5:64:b6:23:60:
86:90:dd:35:9f:27:e8:c4:19:67:57:76:2e:ff:36:
dc:1c:ef:af:9e:a2:dc:fa:c8:17:db:be:ea:ee:8a:
b4:f4:3b:b2:68:82:10:83:ed:f2:9e:98:6e:d8:70:
3a:d4:28:02:fc:47:22:89:b8:c1:b6:a5:77:d8:43:
10:47:23:40:66:85:7e:43:fa:bb:1a:1a:c2:dd:27:
2c:99:8a:88:07:04:13:55:b6:fa:b1:a4:ea:60:89:
48:15:f0:7b:ad:d1:bd:e0:7a:54:f0:e1:95:63:d2:
4f:80:cc:e0:cd:4d:f8:5c:ca:dc:28:d8:d9:ac:d4:
42:b2:e9:85:17:9a:7e:f1:db:ab:f7:b4:1e:5f:c8:
71:ce:ec:f2:86:6d:28:64:e2:19:eb:90:9b:28:84:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DE:D3:2A:C0:1D:53:9D:12:7E:EF:BC:BF:48:A9:23:7F:A5:8A:7B
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/4N7TKsAdU50Sfu-8v0ipI3-lins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7c:dd:5b:b1:29:40:29:f4:ca:ad:51:7d:d9:2c:90:b5:90:
96:64:ac:e5:1d:2b:93:97:8b:b5:aa:8c:0f:32:66:bb:54:53:
87:45:f7:2b:27:1c:bf:fb:f8:1b:98:a2:09:4b:82:ec:50:68:
7b:3e:bd:1b:64:a8:d4:7f:c5:ff:24:38:98:8f:be:50:5b:3a:
85:86:fb:20:4c:66:48:b4:d9:5a:df:50:4e:07:98:97:29:49:
45:d5:74:fa:50:f2:3c:69:6d:01:b1:ce:c0:1a:6d:9b:cc:f8:
c7:86:cb:7f:41:a1:25:25:24:50:e3:e4:3c:c6:7f:93:0e:fe:
2c:36:e2:8d:6c:ea:bd:d3:83:cd:f8:4d:08:e8:9c:bd:78:2c:
9f:db:2d:4a:1b:7a:18:10:64:90:5e:dd:f1:15:39:b1:83:79:
f6:46:cb:b3:7f:2c:bd:b2:76:47:74:79:45:18:9d:63:8b:70:
61:75:eb:ba:a9:42:2e:d4:13:86:4d:92:cc:ed:8c:20:89:31:
03:96:9f:4b:ee:38:97:44:e9:30:d8:2f:17:80:4f:0d:ad:93:
c9:35:52:e3:0e:da:4d:61:3a:81:21:7b:82:1a:45:d6:ab:2b:
5e:11:86:3b:e5:05:7d:46:e1:a8:22:ec:62:12:b9:ec:6e:87:
d1:7d:84:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/Y+5Ti4fkNztex8be/YakJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYwODA2MjEyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGRlZDMyYWMwMWQ1MzlkMTI3ZWVmYmNiZjQ4YTkyMzdmYTU4YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm21gPn1HoN+APzrNLhoItF+Qt2sp
JdnCAQWtBYr+krV5i6j7ny3D9h36ciHoDOAbR0sZroFE9chn6N+X30JEDoZ0Lo2q
kAYrKE0gTQrf4NQps/MPjsKAfek26uv1vDpF2k07xWS2I2CGkN01nyfoxBlnV3Yu
/zbcHO+vnqLc+sgX277q7oq09DuyaIIQg+3ynphu2HA61CgC/EciibjBtqV32EMQ
RyNAZoV+Q/q7GhrC3ScsmYqIBwQTVbb6saTqYIlIFfB7rdG94HpU8OGVY9JPgMzg
zU34XMrcKNjZrNRCsumFF5p+8dur97QeX8hxzuzyhm0oZOIZ65CbKIQgQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODe0yrAHVOdEn7vvL9IqSN/pYp7MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvNE43VEtzQWRVNTBTZnUtOHYwaXBJMy1saW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQBbfN1bsSlAKfTKrVF92SyQtZCWZKzlHSuTl4u1qowP
Mma7VFOHRfcrJxy/+/gbmKIJS4LsUGh7Pr0bZKjUf8X/JDiYj75QWzqFhvsgTGZI
tNla31BOB5iXKUlF1XT6UPI8aW0Bsc7AGm2bzPjHhst/QaElJSRQ4+Q8xn+TDv4s
NuKNbOq904PN+E0I6Jy9eCyf2y1KG3oYEGSQXt3xFTmxg3n2Rsuzfyy9snZHdHlF
GJ1ji3Bhdeu6qUIu1BOGTZLM7YwgiTEDlp9L7jiXROkw2C8XgE8NrZPJNVLjDtpN
YTqBIXuCGkXWqyteEYY75QV9RuGoIuxiErnsbofRfYRv
-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:54 2026 by rpki-client