Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/33ufZ-EFmTYlfl_M1Aa6WnayVr4.roa
File: 33ufZ-EFmTYlfl_M1Aa6WnayVr4.roa (raw, json)
Hash identifier: 0HXa4l0V9fRUp0G3sNXMqjYGejO4Nd2jwgHCI8wD6e4=
Subject key identifier: DF:7B:9F:67:E1:05:99:36:25:7E:5F:CC:D4:06:BA:5A:76:B2:56:BE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A03880EBDD8E40D7E2D50838165CBDBD06
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/33ufZ-EFmTYlfl_M1Aa6WnayVr4.roa
Signing time: Tue 25 Aug 2026 10:39:28 +0000
ROA not before: Tue 25 Aug 2026 10:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 45.8.203.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:80:eb:dd:8e:40:d7:e2:d5:08:38:16:5c:bd:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 25 10:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df7b9f67e1059936257e5fccd406ba5a76b256be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:11:78:1f:85:ca:18:f2:f6:3d:2c:9b:d1:
97:05:bc:97:25:47:33:98:42:b7:fc:43:d9:d3:24:
1e:ae:0d:39:1e:d8:10:90:64:8f:26:93:c4:be:37:
98:5e:14:3d:14:cc:43:7b:84:bd:69:e8:6b:8e:cc:
97:4e:4f:a9:e5:c7:7d:4e:4a:44:d5:7a:5d:c2:cd:
8d:62:de:dd:f3:00:8a:19:63:f4:c9:06:4b:bf:f0:
53:13:ae:52:76:9c:95:0e:45:4a:c2:a6:4c:e6:ab:
7b:c6:fd:cc:f1:e3:31:61:58:8a:97:cb:dd:6c:08:
9d:e9:8e:9e:1d:6e:e6:51:c1:ce:d4:c4:5a:00:b7:
22:ab:5f:3d:2f:fb:32:66:01:f7:60:d2:6d:e8:b2:
c3:cc:3f:bf:e7:01:0d:88:6c:c8:7e:30:83:7a:f0:
f5:f2:9e:7f:67:bf:3a:35:aa:6c:2f:c0:70:2e:3d:
66:b1:2a:9a:5f:44:62:a2:25:83:e8:2d:44:07:57:
13:02:ec:8a:b3:dc:eb:85:db:1e:a7:73:31:98:9d:
5f:e6:22:bf:7c:7f:8a:f2:46:77:f8:b6:bd:ba:4a:
6f:ab:4c:e9:96:f1:9e:9c:90:76:e6:5d:0c:d9:30:
5b:9f:48:a3:d2:a5:57:c1:38:21:94:50:6b:a0:5e:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:9F:67:E1:05:99:36:25:7E:5F:CC:D4:06:BA:5A:76:B2:56:BE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/33ufZ-EFmTYlfl_M1Aa6WnayVr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
80:17:67:cc:81:55:3e:84:f2:14:9b:1d:d6:93:a7:f8:d8:fe:
31:43:7e:c3:f8:cd:c3:7d:22:2e:4e:98:33:41:94:86:65:54:
f1:42:55:2e:6e:63:c6:3d:86:9b:0d:76:bc:c2:e5:1d:f7:51:
ef:2b:c2:26:ea:a2:b8:e7:86:75:3d:d8:ff:54:c2:0c:15:f5:
8e:ff:34:e0:1d:29:6d:4f:9b:a0:91:f1:e1:62:28:19:96:b7:
05:4a:d3:68:18:26:16:f1:8c:37:dd:d7:4f:ad:94:03:5a:10:
fc:e5:5e:8e:17:55:96:d9:58:f6:3a:df:1c:de:72:05:d3:27:
21:5f:a6:15:3a:17:c4:27:d5:15:1a:b8:cc:65:ce:18:0c:c7:
b7:33:3e:24:65:14:0f:79:72:e5:2a:b1:51:5a:b7:27:7e:ef:
db:ef:8c:45:03:13:2f:ba:c1:02:62:1b:34:a6:75:a0:d0:4b:
94:dc:35:da:1f:a4:ab:4a:6b:2f:60:76:cd:1d:ae:73:4a:7a:
79:3e:d8:a4:60:4a:a5:44:3d:68:56:f3:1b:5e:91:0b:04:6e:
f6:33:a1:d5:f7:ff:8b:45:74:11:5c:f9:01:09:21:e4:56:3a:
93:ef:31:1d:e1:7d:57:0b:7c:d7:cd:44:5d:4c:98:00:ff:84:
fc:f5:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:47 2026 by rpki-client