Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/u4PnfQwbctib9UTp0Hw6JFAFmdE.roa
File: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (raw, json)
Hash identifier: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=
Subject key identifier: BB:83:E7:7D:0C:1B:72:D8:9B:F5:44:E9:D0:7C:3A:24:50:05:99:D1
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DEE30326FA7B6562988A8A1B1365D6956
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/u4PnfQwbctib9UTp0Hw6JFAFmdE.roa
Signing time: Sun 03 May 2026 14:13:49 +0000
ROA not before: Sun 03 May 2026 14:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.184.0/24 maxlen: 24
45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:30:32:6f:a7:b6:56:29:88:a8:a1:b1:36:5d:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 3 14:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb83e77d0c1b72d89bf544e9d07c3a24500599d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:d4:73:26:55:9e:9e:b9:29:06:62:cb:01:
ba:20:07:ae:f7:a1:77:00:e2:84:ca:a7:c8:32:c9:
5a:5c:ef:62:60:7c:df:16:f4:23:a4:39:e7:77:8e:
1f:c4:8d:79:59:4b:b2:dc:d2:f4:db:f4:83:87:02:
f9:c0:7d:d9:27:85:88:7a:ba:85:86:8d:11:a1:99:
9d:7f:16:1f:8c:fa:30:d6:69:f1:68:74:3b:47:2f:
d8:f5:13:92:f6:88:ea:59:19:6c:ed:d6:ec:12:aa:
64:75:8d:0e:6d:d5:59:7a:76:05:1e:a6:73:6b:5b:
1e:44:3b:ae:82:87:df:75:d1:c2:3f:31:ca:24:6e:
9b:6f:79:99:75:18:2d:ba:31:23:c8:5c:a0:45:c6:
5e:2d:e5:14:89:96:df:1c:cc:34:cc:f6:02:d8:95:
2f:6a:c1:2e:4f:55:ac:57:f2:83:89:f0:d6:2f:09:
05:00:34:6b:d7:ac:fd:d1:69:be:5b:7e:f0:e8:3e:
32:dd:c7:42:55:9c:79:c3:95:e1:16:19:cb:63:92:
20:a2:d5:d1:d0:a6:1e:b2:b6:69:09:8d:84:9a:a7:
18:77:de:44:5c:78:c6:6e:a6:c6:ca:92:80:8c:c2:
c6:19:09:ea:4d:fe:13:c9:85:e1:ff:5b:89:98:16:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:E7:7D:0C:1B:72:D8:9B:F5:44:E9:D0:7C:3A:24:50:05:99:D1
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/u4PnfQwbctib9UTp0Hw6JFAFmdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
88:29:ef:95:35:e6:1f:ee:8c:ce:83:1a:1d:51:c7:d5:ee:9a:
da:0d:d2:18:af:6a:70:49:81:90:96:a9:b4:b0:08:db:a2:1d:
2e:38:7a:a5:01:72:2d:3b:cd:94:41:6e:54:15:44:0e:20:19:
05:fd:91:f5:c0:f4:59:11:83:79:11:41:53:7f:71:2b:4a:6c:
dc:8d:db:37:a0:f2:e7:e2:85:f9:b8:c6:4d:ad:c4:62:cb:e2:
72:5a:64:97:81:08:31:09:ee:d6:bc:92:21:2b:c9:94:35:db:
3b:ca:bb:c8:b1:37:ea:89:1c:bc:2b:f7:83:ee:74:65:07:9e:
18:c2:c5:0c:0b:0d:b7:e9:c3:bf:c9:79:68:aa:f8:0c:63:6d:
8e:e6:cb:b8:70:b6:56:75:6f:12:f0:ae:d0:0d:9f:9e:0f:8e:
2d:f8:d5:e5:4a:25:50:2b:32:38:58:87:46:c9:88:22:84:71:
cf:bd:d8:00:0d:51:09:6c:25:eb:d1:03:33:04:96:f9:9b:24:
6c:1f:2b:ce:4f:0f:cb:35:e0:9b:93:22:c5:95:dc:89:14:f6:
62:2f:ff:b3:e5:40:9f:5d:ef:8e:77:72:5f:ff:05:be:e5:50:
08:1a:b2:dd:7d:37:bc:ef:e8:de:54:83:33:3b:e6:82:7e:ed:
e9:b5:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 01:52:16 2026 by rpki-client