Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/RYBfpwejJ-O5VWAWQi-3ZPFKnlw.roa
File: RYBfpwejJ-O5VWAWQi-3ZPFKnlw.roa (raw, json)
Hash identifier: FL1iJ8ZhnIIckmcYe2gVMH7xyuA0yKyn2gvsjGhQolg=
Subject key identifier: 45:80:5F:A7:07:A3:27:E3:B9:55:60:16:42:2F:B7:64:F1:4A:9E:5C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019FC8A66554EC899AFF68BE2CFCDF55A261
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/RYBfpwejJ-O5VWAWQi-3ZPFKnlw.roa
Signing time: Mon 03 Aug 2026 17:22:55 +0000
ROA not before: Mon 03 Aug 2026 17:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 45.94.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:a6:65:54:ec:89:9a:ff:68:be:2c:fc:df:55:a2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Aug 3 17:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45805fa707a327e3b9556016422fb764f14a9e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:57:69:22:1b:d7:34:72:68:d4:f0:3f:1d:
58:e8:28:3a:54:84:17:23:09:0d:95:04:e0:db:5c:
4a:f6:80:03:d6:bf:ae:57:32:86:00:a1:18:cd:d1:
cb:05:a1:fd:f2:50:21:ab:22:fb:00:d2:0f:19:ec:
bd:f0:47:52:2a:94:bc:05:c6:89:59:3c:72:cb:fb:
d5:d7:8a:96:af:12:23:df:dd:09:d8:b4:80:70:0b:
27:bc:9f:a7:a0:ca:21:bd:2f:76:9a:d3:ce:34:3c:
9d:bd:e7:72:ec:6d:27:0f:34:55:3c:37:27:b3:41:
ff:13:6e:80:fd:39:28:17:48:14:a7:5c:53:b3:b3:
be:39:a5:a3:54:50:41:4c:3b:37:fd:f5:36:da:78:
9b:fe:bd:b6:be:e0:16:d7:3c:64:e0:48:e8:aa:e3:
9b:b7:f3:8d:fc:1c:b6:db:cc:ef:8d:38:6d:c8:19:
c8:48:f6:95:f3:03:f5:ea:b0:17:21:18:4c:41:22:
56:6a:80:e7:39:69:26:68:5a:84:07:3b:ea:d9:a2:
45:3f:67:78:f6:11:ed:a4:e4:07:5b:30:28:cc:c6:
16:ed:a9:4b:13:02:ab:2a:4e:d2:8b:1e:f7:1a:74:
3d:db:36:bc:8d:ff:7a:5e:d5:fd:35:aa:e8:02:c6:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:5F:A7:07:A3:27:E3:B9:55:60:16:42:2F:B7:64:F1:4A:9E:5C
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/RYBfpwejJ-O5VWAWQi-3ZPFKnlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.27.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6b:35:bd:35:38:dc:3d:cf:42:37:9a:ec:09:fb:50:45:30:
b4:64:d8:7d:3e:d7:99:54:7f:a4:b4:d6:51:c2:49:2d:6a:f8:
26:8c:c9:42:ba:ec:0a:d7:3b:a2:30:a4:47:e1:6b:22:e4:bd:
a3:36:6d:6f:78:82:0d:f2:c3:92:fd:58:bd:0f:b5:bc:2f:30:
80:ef:d5:84:bc:c6:f3:96:69:7d:96:ab:e5:fb:7b:9c:42:f4:
67:8b:a9:d5:ff:99:de:f9:82:e4:8d:cc:8d:79:ec:f7:2f:c4:
43:6d:7b:15:03:3b:96:87:cb:15:d8:df:9c:33:0b:19:ed:0d:
a1:4e:5a:5b:7c:9c:3a:5b:5d:cd:4a:60:28:cc:df:71:df:cb:
7d:08:0f:62:c7:6b:8f:eb:cb:bc:c7:24:29:6d:0d:76:77:2e:
b5:d3:a3:18:62:a4:a2:b2:fe:c5:40:27:9a:e9:88:c2:68:55:
d9:64:a9:c2:17:57:be:4b:06:b9:34:02:54:2b:a4:1b:db:c7:
6d:34:2b:92:a2:90:61:fe:2d:c0:8a:bc:59:a8:e3:7e:f1:50:
cd:91:64:1f:37:b0:0f:05:09:72:13:1d:df:03:17:54:6d:16:
1b:42:a6:b1:8e:d0:de:cf:c4:33:0a:7e:ed:a8:4a:16:c9:5d:
ec:95:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:28 2026 by rpki-client