Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o7kAOmPY1REf4ErvzQzotSi_dbA.roa
File: o7kAOmPY1REf4ErvzQzotSi_dbA.roa (raw, json)
Hash identifier: ymVu1kw978x+E74fH7JYdK01iqt5sgEn8iTK0iBC+IY=
Subject key identifier: A3:B9:00:3A:63:D8:D5:11:1F:E0:4A:EF:CD:0C:E8:B5:28:BF:75:B0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DBCAE368288610C6611C141840137D36C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o7kAOmPY1REf4ErvzQzotSi_dbA.roa
Signing time: Thu 23 Apr 2026 23:30:26 +0000
ROA not before: Thu 23 Apr 2026 23:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bc:ae:36:82:88:61:0c:66:11:c1:41:84:01:37:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 23 23:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3b9003a63d8d5111fe04aefcd0ce8b528bf75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:61:16:b5:d5:22:82:75:48:9c:77:74:55:
0b:20:3c:cc:a5:8f:fa:0f:a4:e6:7c:81:69:55:ee:
e4:29:1e:ab:ed:39:b6:8c:ec:dd:71:dd:2d:ac:df:
4d:7b:ab:b4:e7:dc:da:05:27:11:42:97:12:ac:96:
9e:36:5a:33:71:8c:05:ee:e8:20:32:2f:68:09:fd:
da:15:ff:b9:d2:3e:13:3b:0c:4c:27:d5:54:bb:44:
e8:9c:82:7e:b2:3b:d0:a3:d3:b7:3b:22:76:f6:d2:
0c:e2:39:2c:54:af:58:05:3a:37:0b:8c:22:ee:8b:
7d:8a:1a:72:28:55:75:de:b2:70:0b:b7:84:04:2b:
49:83:62:ab:65:30:49:fd:f5:25:c4:36:fc:79:51:
6b:b6:1d:11:07:6e:d2:87:7d:b1:34:0a:3d:be:f9:
29:04:e7:55:df:64:7b:37:07:79:b1:19:2b:b9:85:
20:f7:e4:5e:b1:d0:ce:d2:b5:cb:49:59:df:fc:51:
bc:40:42:6f:a3:3e:05:ca:73:38:54:68:69:ae:8a:
ff:f8:a9:06:79:bb:c0:37:fa:90:76:e7:9e:47:40:
a4:22:f7:da:d9:80:f8:97:8a:9f:31:3a:f0:52:9c:
de:92:d2:f7:f7:fd:fb:4e:7e:f4:a4:d7:96:e9:49:
d6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B9:00:3A:63:D8:D5:11:1F:E0:4A:EF:CD:0C:E8:B5:28:BF:75:B0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/o7kAOmPY1REf4ErvzQzotSi_dbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2e:94:c6:ad:53:9a:b9:8a:0b:68:c0:73:7c:c3:bf:a9:21:
23:28:6b:15:64:eb:98:e5:78:6b:c2:a7:18:61:06:f1:bc:e6:
21:76:c6:9b:f8:e1:9c:71:cb:3b:a3:0e:a0:06:46:b3:6d:ce:
f7:c2:17:91:73:bc:99:cb:8e:e9:62:40:1d:d1:f3:db:38:25:
38:83:08:66:11:82:31:df:41:d3:2b:57:4a:e1:8f:9a:a7:ca:
a3:2e:d8:22:2c:97:06:f3:ec:db:4b:bb:68:f3:07:96:9a:61:
b4:04:23:94:ad:55:4e:ef:94:bc:db:59:13:30:e9:9b:67:79:
dd:00:17:34:96:dc:40:f1:79:7c:dd:25:fc:4a:a7:cd:11:79:
e6:2f:64:4d:9c:c1:0b:64:f3:74:a6:6b:8e:f1:a0:b7:6a:8a:
af:89:81:a1:09:d6:0d:07:0e:96:48:c1:40:80:e4:a6:d4:56:
a9:04:ce:13:27:82:f5:12:ed:a9:1a:41:7d:25:22:17:03:c4:
53:f1:5b:7d:bd:29:7d:e5:df:87:77:47:b8:e3:e3:35:cf:98:
2d:9f:cc:83:09:7f:87:4d:fa:f6:41:aa:a7:cc:39:f3:86:e9:
71:28:22:f9:6c:9a:6d:cb:5f:7d:7e:db:71:86:ea:76:04:11:
44:8e:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:23 2026 by rpki-client