Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ChXFfwDu8uLyjhroqoJ9yFBg2p8.roa
File: ChXFfwDu8uLyjhroqoJ9yFBg2p8.roa (raw, json)
Hash identifier: o/jJN92lkVmDfIA1yuY4kiis8hKCBsT4FJj29t7KcbE=
Subject key identifier: 0A:15:C5:7F:00:EE:F2:E2:F2:8E:1A:E8:AA:82:7D:C8:50:60:DA:9F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019F813D0357BCB5481F2BA76A90028A6316
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ChXFfwDu8uLyjhroqoJ9yFBg2p8.roa
Signing time: Mon 20 Jul 2026 20:34:47 +0000
ROA not before: Mon 20 Jul 2026 20:34:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205799
IP address blocks: 45.142.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:3d:03:57:bc:b5:48:1f:2b:a7:6a:90:02:8a:63:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 20 20:34:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a15c57f00eef2e2f28e1ae8aa827dc85060da9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:ee:5b:2a:b5:02:2b:d8:fe:44:fa:7e:71:
4c:3c:8a:ae:4d:83:26:90:e8:e5:e5:7c:1f:a4:c8:
ca:cd:f4:65:fa:b9:21:7a:88:be:a2:55:2d:9c:c0:
cb:9b:80:68:4f:31:f5:90:0c:c9:c7:58:bd:0f:34:
a4:b3:7d:84:0d:74:51:cf:8a:21:2f:a8:57:1a:71:
ce:7c:09:a3:45:97:6b:1a:a8:b8:f2:1c:87:09:1b:
88:a1:a5:51:33:d6:c4:a0:0f:9a:8c:8d:0d:d2:34:
e8:d9:e9:1d:38:7d:2c:b7:93:1b:44:89:ec:fb:cb:
9d:a2:3e:9f:88:ac:fc:cf:df:2e:c0:6d:af:a8:21:
a6:d0:7a:c9:60:f7:b9:04:6b:09:4f:8e:27:8f:2c:
93:25:5b:c3:a2:68:cb:84:9c:e9:d9:74:73:7a:9a:
54:d7:46:c0:f9:fc:dd:b7:5b:86:b6:2d:10:7a:c3:
1c:c6:5e:28:32:87:25:3d:91:51:82:62:51:2c:d3:
ac:27:28:42:bb:af:6b:d6:ff:ea:3f:37:da:a3:a2:
37:f4:35:24:6f:35:87:05:f0:0a:b0:b7:12:f5:a9:
84:89:6d:c4:74:1b:8b:15:de:7c:34:bc:83:27:fb:
3d:92:de:49:56:bc:26:08:2a:21:74:a2:03:ee:91:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:C5:7F:00:EE:F2:E2:F2:8E:1A:E8:AA:82:7D:C8:50:60:DA:9F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ChXFfwDu8uLyjhroqoJ9yFBg2p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.45.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2a:a2:b4:3c:71:72:cb:2a:2b:c2:e0:a2:12:55:f2:bf:cf:
ec:7d:4c:98:32:31:14:d2:2b:3a:d9:0b:16:b4:38:6b:c8:2f:
c7:e9:00:d0:85:b3:eb:57:4a:04:0f:69:31:35:b5:f9:39:c6:
f4:11:4a:11:b0:5d:a0:df:fc:27:b1:90:c9:c0:06:bb:c9:7c:
5c:72:b8:7c:69:e9:a6:94:42:8b:f4:27:49:e6:c7:ee:b9:4c:
d8:20:0b:5d:d1:7c:a4:96:ea:dc:65:e6:10:e4:f6:41:55:16:
d5:f9:b8:60:cd:25:7f:bf:8c:e1:c4:86:d2:13:db:1e:41:be:
8f:4d:eb:a0:f7:3c:d0:e5:3e:ea:0b:18:17:3f:d8:16:ef:2b:
58:6d:f7:3a:76:53:fd:6d:77:9f:01:a1:f1:31:40:fc:c8:66:
8b:20:96:ae:62:03:0e:cb:4c:7b:e1:21:48:ba:ef:35:54:ec:
b6:83:2a:d3:ef:f7:04:ac:ec:0b:f1:37:97:72:0c:30:60:23:
d0:1d:d3:79:ef:00:67:3f:3e:8a:43:e2:cf:50:44:90:07:4a:
87:4b:e4:6b:fd:45:18:cd:91:95:3a:f6:6f:1d:a2:0a:e4:c9:
f7:fa:d2:9b:29:62:f3:3d:3f:dd:84:a3:97:cb:a1:6e:4e:93:
25:b1:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:23 2026 by rpki-client