Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S57d2mwxs4AbtZ3xsQmoK7AdBis.roa
File: S57d2mwxs4AbtZ3xsQmoK7AdBis.roa (raw, json)
Hash identifier: O/sMff0nogIwsNbBgK+MWEIGUvc8+cHKatsk2Q4AToo=
Subject key identifier: 4B:9E:DD:DA:6C:31:B3:80:1B:B5:9D:F1:B1:09:A8:2B:B0:1D:06:2B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A03AC81C42D758C8E541EAA5F63BFCB5C4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S57d2mwxs4AbtZ3xsQmoK7AdBis.roa
Signing time: Tue 25 Aug 2026 21:16:27 +0000
ROA not before: Tue 25 Aug 2026 21:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62300
IP address blocks: 45.135.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:c8:1c:42:d7:58:c8:e5:41:ea:a5:f6:3b:fc:b5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 25 21:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b9eddda6c31b3801bb59df1b109a82bb01d062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:3b:5d:45:96:00:0f:2d:e7:2f:e3:de:fb:
fe:58:a2:68:9b:c5:50:b2:35:ae:50:09:f4:93:fc:
cd:07:94:b7:ad:ef:94:48:a5:6b:11:e8:8a:8b:bb:
14:5a:20:17:d0:a0:a1:f0:a0:e0:70:fb:6d:81:02:
d0:cb:b3:0d:29:45:a7:e3:bb:88:ca:79:ef:53:c6:
9f:48:60:47:36:29:fa:8a:ac:7c:00:58:75:f0:ba:
0a:5e:18:b5:72:4f:c6:d7:d1:db:2b:57:b4:e8:7d:
49:6b:f0:c8:62:2a:cc:6d:ce:62:66:ca:f1:11:c6:
1f:f6:7a:4a:95:ab:d1:1c:2e:c4:da:58:80:79:73:
04:c6:c4:14:e3:91:9a:0e:3b:b6:85:2f:24:1b:db:
df:6c:1f:5c:c4:8c:bd:22:d3:ab:a8:5e:41:86:22:
52:cb:b1:a7:07:7f:71:9d:88:21:a7:c4:70:d3:48:
77:69:d2:44:65:d2:13:ed:c7:9d:ab:2b:da:23:17:
29:3c:15:42:4f:3e:13:7c:a4:fd:df:9a:ff:fa:66:
43:f6:b1:24:88:9b:df:3f:c7:7d:80:d6:21:b0:25:
b0:14:ee:a1:28:8c:a5:36:fe:85:7d:44:53:e4:0c:
41:48:a6:4c:b3:39:da:a2:d4:ff:85:cb:6b:49:e4:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:DD:DA:6C:31:B3:80:1B:B5:9D:F1:B1:09:A8:2B:B0:1D:06:2B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/S57d2mwxs4AbtZ3xsQmoK7AdBis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.232.0/24
Signature Algorithm: sha256WithRSAEncryption
25:23:43:a2:5d:f8:ef:ad:e0:f0:fa:38:ca:10:48:93:f6:51:
36:4a:2f:4e:91:42:c5:ee:d6:e3:55:cd:46:dc:59:a0:ca:e7:
78:70:57:21:df:c7:9b:fd:01:cf:8b:28:41:d4:c7:7f:65:a1:
3b:a5:79:0f:34:9a:07:48:05:90:54:6a:6d:25:2f:ad:55:49:
47:34:80:83:36:a4:27:eb:b3:ad:a8:a1:82:32:63:fd:f1:19:
72:b6:90:8a:da:95:d7:27:48:65:d2:ee:f8:64:da:33:f8:96:
4e:44:e7:22:17:d7:55:d3:a0:fd:f5:f6:5a:66:59:50:59:44:
c3:30:a5:99:1c:1b:fe:ff:49:4e:5e:3f:97:94:50:c0:b8:81:
c7:41:6f:bf:d4:c3:16:0d:14:74:2d:93:af:9a:94:82:29:43:
9a:ec:30:d5:a2:48:8e:1c:94:9e:9e:65:90:71:04:ea:7c:2e:
58:e9:e3:e8:21:df:df:c7:ba:3d:43:a7:20:f8:da:f1:17:36:
be:47:38:8b:27:c4:49:24:ab:2d:ae:2a:0a:5f:40:60:cc:f3:
95:46:3b:8d:c8:8e:19:5e:44:62:77:94:f2:dc:66:13:62:55:
b8:9d:73:0d:ab:62:75:6d:92:52:ed:c8:3a:19:25:80:91:f8:
68:66:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:40 2026 by rpki-client