Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/deJApcGELp8js2VZYhbGdsTa5Ps.roa
File: deJApcGELp8js2VZYhbGdsTa5Ps.roa (raw, json)
Hash identifier: 7uBJeMAyalCUwi0DNOS6H871CdfOk/LqeKcizb5vPSg=
Subject key identifier: 75:E2:40:A5:C1:84:2E:9F:23:B3:65:59:62:16:C6:76:C4:DA:E4:FB
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01A064A2B850946EC93CD0F16B249DE574E7
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/deJApcGELp8js2VZYhbGdsTa5Ps.roa
Signing time: Thu 03 Sep 2026 00:19:40 +0000
ROA not before: Thu 03 Sep 2026 00:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.43.66.0/24 maxlen: 24
45.43.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:a2:b8:50:94:6e:c9:3c:d0:f1:6b:24:9d:e5:74:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Sep 3 00:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e240a5c1842e9f23b365596216c676c4dae4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:d8:95:49:e0:87:e3:ae:64:d2:a6:ce:3a:
d6:94:9a:60:e6:6a:5b:bf:e1:77:d2:5f:9d:ba:fd:
d3:fa:99:49:7d:6b:49:4c:ab:2c:6b:6c:d7:95:0e:
17:a1:f7:07:fb:3d:ac:9f:65:2c:87:d9:3c:c1:7e:
4f:63:34:8f:dc:23:af:83:dc:b6:3e:27:93:99:af:
61:e2:0e:18:8c:72:0b:e7:34:c7:a6:68:b5:31:10:
ef:f2:bd:3b:c7:2e:17:48:43:29:c1:63:56:90:ff:
a9:6a:d1:ed:fa:75:df:90:a3:eb:f8:51:6d:28:8f:
75:eb:50:6d:6c:49:12:ca:fb:fd:96:01:2c:ea:c6:
24:95:bf:ea:89:e5:9a:85:ae:71:c7:91:14:f9:52:
c1:cb:ea:ef:d0:cf:be:35:0e:54:0c:db:eb:be:5d:
d5:ae:96:90:c9:52:ab:1d:6e:0f:0c:b3:60:40:c3:
ef:59:30:43:c8:3b:8b:37:e0:85:8c:74:29:4b:b8:
9a:d3:64:5d:cb:85:a1:8c:28:d2:78:37:22:9d:d6:
8d:ed:09:30:57:c1:5b:22:d4:8c:92:52:2d:d8:7c:
87:44:dc:c5:a8:a1:58:a1:7a:4a:9f:d7:00:e4:72:
fa:b3:90:47:e5:94:d2:ba:f6:a4:0d:64:50:b3:59:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:40:A5:C1:84:2E:9F:23:B3:65:59:62:16:C6:76:C4:DA:E4:FB
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/deJApcGELp8js2VZYhbGdsTa5Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.66.0/24
45.43.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:42:6b:b5:44:18:ba:0a:6b:c7:71:8d:52:56:a1:46:49:c2:
21:32:5e:15:4d:29:e8:5f:ad:24:81:b2:bf:04:78:40:d4:c0:
11:fb:bd:f3:04:f2:0a:89:3f:38:22:4d:8f:ff:16:0f:24:bc:
27:28:99:81:08:57:b9:d0:63:92:46:ff:2d:63:a3:8e:f5:b9:
4d:cd:e0:32:9c:0a:a0:d0:50:c9:c7:00:f1:9d:77:39:96:ef:
2e:a1:23:de:af:86:b6:04:f2:40:54:a7:fe:05:28:99:5c:4c:
15:90:ca:4a:30:85:0e:b4:76:82:d8:0e:4e:89:3e:d9:c9:a8:
ad:4e:dc:bb:be:73:09:3b:bf:41:22:91:4d:a7:cb:1d:ee:f5:
3b:ad:3b:ac:d2:af:3e:4f:aa:f2:54:59:4e:f7:27:be:e6:d5:
f9:bb:ce:b0:eb:e9:ee:35:35:70:a3:b6:0e:d2:9a:4c:12:c9:
82:64:f2:f1:26:d6:e6:c3:ab:55:71:37:a4:23:67:29:58:2a:
05:61:2b:f1:78:a3:4c:93:27:ee:37:41:9c:13:f0:c2:0b:0e:
fd:84:25:59:cf:ea:c3:d8:09:0b:b9:bc:e3:52:9c:93:82:17:
b4:7e:b4:89:27:5a:cf:88:76:68:7c:2e:08:c1:bf:a6:ca:37:
da:16:41:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBkorhQlG7JPNDxaySd5XTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjYwOTAzMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWUyNDBhNWMxODQyZTlmMjNiMzY1NTk2MjE2YzY3NmM0ZGFlNGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQzYlUngh+OuZNKmzjrWlJpg5mpb
v+F30l+duv3T+plJfWtJTKssa2zXlQ4XofcH+z2sn2Ush9k8wX5PYzSP3COvg9y2
PieTma9h4g4YjHIL5zTHpmi1MRDv8r07xy4XSEMpwWNWkP+patHt+nXfkKPr+FFt
KI9161BtbEkSyvv9lgEs6sYklb/qieWaha5xx5EU+VLBy+rv0M++NQ5UDNvrvl3V
rpaQyVKrHW4PDLNgQMPvWTBDyDuLN+CFjHQpS7ia02Rdy4WhjCjSeDcindaN7Qkw
V8FbItSMklIt2HyHRNzFqKFYoXpKn9cA5HL6s5BH5ZTSuvakDWRQs1nGMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHXiQKXBhC6fI7NlWWIWxnbE2uT7MB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvZGVKQXBjR0VMcDhqczJWWlloYkdkc1RhNVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALStCAwQA
LStKMA0GCSqGSIb3DQEBCwUAA4IBAQC6Qmu1RBi6CmvHcY1SVqFGScIhMl4VTSno
X60kgbK/BHhA1MAR+73zBPIKiT84Ik2P/xYPJLwnKJmBCFe50GOSRv8tY6OO9blN
zeAynAqg0FDJxwDxnXc5lu8uoSPer4a2BPJAVKf+BSiZXEwVkMpKMIUOtHaC2A5O
iT7ZyaitTty7vnMJO79BIpFNp8sd7vU7rTus0q8+T6ryVFlO9ye+5tX5u86w6+nu
NTVwo7YO0ppMEsmCZPLxJtbmw6tVcTekI2cpWCoFYSvxeKNMkyfuN0GcE/DCCw79
hCVZz+rD2AkLubzjUpyTghe0frSJJ1rPiHZofC4Iwb+myjfaFkFL
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:19 2026 by rpki-client