Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/dxZrm_kRJNnz8YeorAaaxgmTmrU.roa
File: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (raw, json)
Hash identifier: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=
Subject key identifier: 77:16:6B:9B:F9:11:24:D9:F3:F1:87:A8:AC:06:9A:C6:09:93:9A:B5
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01A02427091870EA62C2787470CE05093566
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/dxZrm_kRJNnz8YeorAaaxgmTmrU.roa
Signing time: Fri 21 Aug 2026 11:48:53 +0000
ROA not before: Fri 21 Aug 2026 11:48:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134450
IP address blocks: 45.82.40.0/23 maxlen: 23
45.82.41.0/24 maxlen: 24
45.130.66.0/23 maxlen: 23
45.130.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:27:09:18:70:ea:62:c2:78:74:70:ce:05:09:35:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Aug 21 11:48:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77166b9bf91124d9f3f187a8ac069ac609939ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:d9:d7:7d:70:bb:9c:92:e1:51:a3:d6:00:
38:e6:1c:22:dd:cc:ad:ce:d6:3d:b2:b4:08:04:42:
8c:bd:e0:71:c5:17:92:88:49:72:55:82:06:2c:b7:
62:28:e1:f3:8c:12:49:f1:af:e7:c7:39:b3:6e:14:
3a:9e:33:c5:73:25:e3:34:a0:ca:21:b4:5c:24:f5:
b6:86:9a:13:b8:16:57:b3:f3:4f:22:69:30:70:b0:
83:37:0b:e9:fd:69:a6:9e:69:9f:00:68:9d:d3:3f:
67:ac:52:73:36:df:37:62:0a:79:36:e4:e8:3b:65:
da:cf:cc:a8:59:7b:7e:bf:64:2d:5e:88:f3:63:c8:
db:fb:0c:1a:b5:b0:5d:95:6d:a8:46:99:64:bc:a8:
72:1c:a6:62:a3:18:91:ce:fa:6f:60:f6:7f:1f:f3:
4c:6b:db:bc:29:55:62:ae:c6:17:55:b4:63:7d:40:
0b:d0:ee:bc:f4:a5:a7:53:58:6a:78:97:c8:84:d8:
2a:14:3f:2c:36:53:d7:0e:0c:d6:3a:df:39:4e:31:
8f:67:8d:8c:2a:4c:98:68:46:e7:ff:5a:2a:76:66:
8f:02:6c:fb:4f:17:5a:79:78:43:ff:ff:d4:dc:e8:
d9:85:27:96:ef:3d:34:83:30:e9:27:2d:d0:29:4e:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:16:6B:9B:F9:11:24:D9:F3:F1:87:A8:AC:06:9A:C6:09:93:9A:B5
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/dxZrm_kRJNnz8YeorAaaxgmTmrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.40.0/23
45.130.66.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:1e:75:20:10:2e:84:bf:46:1d:a1:66:13:56:b5:37:c7:12:
2f:d1:68:92:43:ed:87:e6:d3:f7:80:37:b3:3e:37:52:71:67:
47:d5:2c:45:1c:55:b8:f0:ba:73:29:f0:18:01:07:dc:77:d9:
de:c2:b0:c5:57:c5:37:6a:81:ba:de:cd:a5:c9:1d:da:0d:ab:
cf:28:50:1a:95:4d:ee:9d:d6:52:ad:b4:f6:c1:fd:86:4d:4d:
3f:b7:9a:7e:2d:f1:a8:89:bb:f2:ee:5b:a2:c0:51:69:da:21:
38:5f:21:52:f6:a5:39:a2:fb:ee:b1:31:7e:a7:60:5c:f4:4b:
9d:4a:13:d9:5d:35:80:af:31:48:62:2b:d2:d0:0e:97:b2:3b:
40:eb:13:7d:c5:93:19:84:18:4a:22:ca:53:b9:43:f0:3d:0b:
b1:e6:ed:89:c0:0c:c1:fa:54:75:3e:10:41:13:c0:cb:1d:7c:
84:6f:3a:fc:5c:f2:17:e1:d5:a2:93:16:15:0e:66:61:fe:36:
26:8d:02:dc:8b:27:c6:e9:2f:45:41:77:fe:46:79:19:ed:73:
20:37:c8:97:94:b1:00:93:9f:10:25:2b:d0:ff:71:e1:ef:90:
be:5f:12:97:ff:f3:69:3d:e1:80:1c:3c:73:70:0f:46:17:0a:
68:43:2a:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAkJwkYcOpiwnh0cM4FCTVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw
MGQwNDYwHhcNMjYwODIxMTE0ODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzE2NmI5YmY5MTEyNGQ5ZjNmMTg3YThhYzA2OWFjNjA5OTM5YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7TZ131wu5yS4VGj1gA45hwi3cyt
ztY9srQIBEKMveBxxReSiElyVYIGLLdiKOHzjBJJ8a/nxzmzbhQ6njPFcyXjNKDK
IbRcJPW2hpoTuBZXs/NPImkwcLCDNwvp/WmmnmmfAGid0z9nrFJzNt83Ygp5NuTo
O2Xaz8yoWXt+v2QtXojzY8jb+wwatbBdlW2oRplkvKhyHKZioxiRzvpvYPZ/H/NM
a9u8KVVirsYXVbRjfUAL0O689KWnU1hqeJfIhNgqFD8sNlPXDgzWOt85TjGPZ42M
KkyYaEbn/1oqdmaPAmz7TxdaeXhD///U3OjZhSeW7z00gzDpJy3QKU5L4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHcWa5v5ESTZ8/GHqKwGmsYJk5q1MB8GA1UdIwQY
MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt
NDRlYTY0NzIxYzllLzEvZHhacm1fa1JKTm56OFllb3JBYWF4Z21UbXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll
LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVIoAwQB
LYJCMA0GCSqGSIb3DQEBCwUAA4IBAQCtHnUgEC6Ev0YdoWYTVrU3xxIv0WiSQ+2H
5tP3gDezPjdScWdH1SxFHFW48LpzKfAYAQfcd9newrDFV8U3aoG63s2lyR3aDavP
KFAalU3undZSrbT2wf2GTU0/t5p+LfGoibvy7luiwFFp2iE4XyFS9qU5ovvusTF+
p2Bc9EudShPZXTWArzFIYivS0A6XsjtA6xN9xZMZhBhKIspTuUPwPQux5u2JwAzB
+lR1PhBBE8DLHXyEbzr8XPIX4dWikxYVDmZh/jYmjQLciyfG6S9FQXf+RnkZ7XMg
N8iXlLEAk58QJSvQ/3Hh75C+XxKX//NpPeGAHDxzcA9GFwpoQyrY
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:06:33 2026 by rpki-client