Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cIfdxiZOQJHzKgqAKGJ_9bz0VDk.roa
File: cIfdxiZOQJHzKgqAKGJ_9bz0VDk.roa (raw, json)
Hash identifier: ubGEfYsgoWmBgn7Z16pYigBntjc6eUBzn1Yto7Vc7cY=
Subject key identifier: 70:87:DD:C6:26:4E:40:91:F3:2A:0A:80:28:62:7F:F5:BC:F4:54:39
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FCD7886D9E41324C732AE9C3D3659BDFB
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cIfdxiZOQJHzKgqAKGJ_9bz0VDk.roa
Signing time: Tue 04 Aug 2026 15:50:55 +0000
ROA not before: Tue 04 Aug 2026 15:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44803
IP address blocks: 45.136.70.0/23 maxlen: 23
45.136.70.0/24 maxlen: 24
45.136.71.0/24 maxlen: 24
45.153.48.0/24 maxlen: 24
92.119.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:78:86:d9:e4:13:24:c7:32:ae:9c:3d:36:59:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 4 15:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7087ddc6264e4091f32a0a8028627ff5bcf45439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:0c:a7:0d:a5:a4:a4:7b:22:3b:46:de:a4:
6c:f5:9b:9a:93:f1:4e:83:20:f0:21:93:02:ee:bc:
40:dc:51:98:e6:e2:3a:58:f0:ae:31:e2:79:62:c6:
b5:ef:17:22:ee:95:70:8f:35:5e:73:20:fc:06:b7:
22:f2:cf:44:8c:d1:89:eb:33:b8:52:ef:0c:e6:c4:
10:a1:c8:25:3b:c3:10:0d:6b:1e:f4:db:61:4f:06:
7c:2a:e7:4a:63:e4:bc:79:a1:9e:2e:9d:ba:a9:8f:
0a:7f:04:05:77:30:0f:64:d3:47:2f:7c:20:1c:91:
4f:32:e4:e4:90:31:3f:50:d0:4b:45:0e:0a:0f:cd:
48:86:85:22:5c:35:9a:64:ab:fb:ae:3a:9c:87:b7:
74:94:69:49:28:bd:05:92:2a:e2:1f:b1:fa:55:41:
99:0b:45:f6:67:3d:fa:7c:5a:db:44:f5:68:af:5b:
30:bd:8d:92:21:b1:ee:f4:ba:ed:f0:17:59:db:cb:
6e:56:39:aa:0b:21:7a:69:30:d7:c3:68:a8:0d:90:
d0:eb:e4:57:be:7e:4a:b5:fd:57:06:42:c6:da:4d:
4b:c8:ea:32:55:32:07:28:d1:bc:00:5a:ad:73:17:
76:fe:da:86:b8:d0:af:db:48:b4:7c:83:c3:7d:a6:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:DD:C6:26:4E:40:91:F3:2A:0A:80:28:62:7F:F5:BC:F4:54:39
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/cIfdxiZOQJHzKgqAKGJ_9bz0VDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.70.0/23
45.153.48.0/24
92.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cc:84:ac:89:ba:d9:ba:c2:83:03:38:9b:9b:85:dc:89:c0:
9a:e5:fc:62:3f:be:20:34:fe:d3:97:98:98:bd:4c:ee:7f:ce:
55:7d:de:79:53:b7:35:cc:a4:96:28:9d:06:68:7e:1c:51:39:
09:8b:02:d4:c2:71:f4:ee:78:e9:ba:79:26:00:5c:11:57:55:
a0:82:86:7d:76:48:1f:40:75:d1:84:56:d8:7f:ad:73:0b:92:
ac:41:71:70:ed:31:d9:f5:41:df:0d:b1:c4:61:c7:1d:8f:3e:
c6:c9:70:82:51:4e:fd:51:c3:ed:c1:f6:95:59:fd:c5:1a:77:
56:a4:4a:36:ca:0a:2b:fd:ef:9e:d5:a0:a4:46:df:f0:ff:a6:
31:a4:3a:15:c6:51:5d:60:ed:48:a5:26:28:f4:08:8c:41:6e:
6f:14:e8:ce:c1:42:9f:a5:d0:b5:d1:18:c8:2a:4e:61:2a:c3:
e7:97:01:db:6c:5c:26:f3:35:5e:ea:19:44:71:20:84:39:12:
45:95:76:0a:c5:bd:8a:f9:c5:4c:c2:ec:f1:79:61:d6:2f:0b:
58:9a:78:d5:d6:a4:20:f8:d6:e3:4c:09:ab:c2:cd:3e:7c:cb:
f4:23:a2:ba:66:4a:5a:7c:64:b6:29:59:d5:63:1f:1e:53:34:
20:0d:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:56 2026 by rpki-client