Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/gh9mh2nEYvJBvUONr1JLfJRdcUs.roa
File: gh9mh2nEYvJBvUONr1JLfJRdcUs.roa (raw, json)
Hash identifier: 14Bmt92WrcjOAYI79zrk/0f0+mA+kpeqt2TIxdzRFFM=
Subject key identifier: 82:1F:66:87:69:C4:62:F2:41:BD:43:8D:AF:52:4B:7C:94:5D:71:4B
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 019FF896822097EBC2F7DD506762DF485747
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/gh9mh2nEYvJBvUONr1JLfJRdcUs.roa
Signing time: Thu 13 Aug 2026 00:47:20 +0000
ROA not before: Thu 13 Aug 2026 00:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 45.13.92.0/23 maxlen: 23
45.89.208.0/23 maxlen: 23
96.125.144.0/21 maxlen: 21
96.125.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:96:82:20:97:eb:c2:f7:dd:50:67:62:df:48:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Aug 13 00:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=821f668769c462f241bd438daf524b7c945d714b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:b8:6e:1d:65:db:d0:04:ba:82:cb:1b:69:
8c:13:6c:6c:a2:53:91:ad:30:b0:1a:6b:a4:84:34:
72:82:a6:bf:79:d8:c1:9b:e5:61:e2:d1:13:12:72:
d2:4f:fb:9e:58:5e:e4:bb:92:03:cd:db:f9:78:04:
74:4b:b1:a0:d2:08:63:4e:49:e3:c7:2e:ad:86:d8:
5a:91:cb:3d:94:7c:52:6b:e2:5e:81:8a:65:87:50:
24:87:2d:ab:8e:50:51:2e:ae:2d:32:88:a7:7c:d0:
26:59:8f:dc:79:17:d5:3b:9d:d9:38:d2:8c:3f:f3:
ec:2c:65:48:16:e9:3e:9e:82:76:e7:3f:cd:30:a9:
d1:61:07:d5:42:25:b4:ce:ce:59:f0:c0:79:67:5d:
40:10:cf:9f:7f:25:44:b8:5b:84:df:91:73:ea:74:
6e:14:5b:a6:b8:19:94:32:d6:3f:7d:2d:2a:88:05:
e7:90:99:66:3b:58:9b:a8:49:f8:e4:b1:b4:67:e1:
32:8a:19:f6:99:da:4c:a6:bc:55:49:09:b1:a3:06:
1f:8c:85:30:dc:d3:09:c2:ce:f0:cb:4c:c6:54:fc:
14:32:6b:44:cf:ec:15:74:19:e0:b4:d4:e0:7e:3b:
e5:92:6e:8d:16:04:e3:c2:52:14:2b:79:29:5f:15:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1F:66:87:69:C4:62:F2:41:BD:43:8D:AF:52:4B:7C:94:5D:71:4B
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/gh9mh2nEYvJBvUONr1JLfJRdcUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.92.0/23
45.89.208.0/23
96.125.144.0-96.125.153.255
Signature Algorithm: sha256WithRSAEncryption
09:61:e3:fd:6c:01:d7:50:6e:4d:bc:b2:d5:65:37:73:2e:91:
cc:ce:57:c4:4f:2f:fd:27:b1:eb:2e:e1:75:6d:b5:b5:df:0a:
09:04:e2:d7:2c:24:df:6f:67:18:3c:c6:19:a8:26:86:27:74:
89:d1:92:7c:8d:fd:1c:d2:f0:14:90:28:95:e0:92:76:6f:3b:
ea:a4:f9:0f:1e:ee:7f:c9:dc:d0:9e:67:95:f4:d0:f9:29:83:
0c:79:03:a6:5b:ec:e3:0c:8f:d0:ce:03:7f:04:1f:1e:96:43:
00:d0:bd:a2:a9:a8:f1:74:59:7f:95:44:31:0a:33:31:17:4e:
8a:64:28:6f:c2:f9:8f:cd:08:63:73:de:85:78:42:e8:e4:5b:
61:dc:16:38:d9:b2:ae:0b:93:59:c5:a7:8c:2b:76:f5:46:48:
4f:78:fb:ba:f2:28:48:d5:37:e6:76:8f:7c:9a:07:54:0c:f5:
54:e3:b3:59:24:7c:84:3c:3d:2a:eb:2e:93:05:33:3e:76:06:
9d:62:c2:60:57:e4:26:f3:4e:a2:de:f6:a0:6f:35:3e:5d:3f:
9b:78:90:b3:bf:bb:f3:94:b9:f7:de:63:25:49:19:be:7a:c3:
c4:1b:5f:44:3a:68:f7:0b:e5:25:65:5c:89:f2:7b:b5:c3:ad:
a6:d5:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:36 2026 by rpki-client