Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa
File: v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa (raw, json)
Hash identifier: nbLLR8O00X3nu5KSCFNmcVmiRFRIuKaoskqHKWizJhw=
Subject key identifier: BF:5B:03:B9:A0:21:23:C4:64:B6:A0:8D:D4:5F:40:E9:4E:0F:B9:44
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 019F2368607894E2DCE3036408376ADDF6CD
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33820
IP address blocks: 145.36.0.0/20 maxlen: 20
145.36.16.0/20 maxlen: 20
145.36.32.0/20 maxlen: 20
145.36.48.0/24 maxlen: 24
145.36.49.0/24 maxlen: 24
145.36.50.0/24 maxlen: 24
145.36.51.0/24 maxlen: 24
145.36.52.0/24 maxlen: 24
145.36.53.0/24 maxlen: 24
145.36.54.0/24 maxlen: 24
145.36.55.0/24 maxlen: 24
145.36.56.0/24 maxlen: 24
145.36.57.0/24 maxlen: 24
145.36.58.0/24 maxlen: 24
145.36.59.0/24 maxlen: 24
145.36.60.0/24 maxlen: 24
145.36.61.0/24 maxlen: 24
145.36.62.0/24 maxlen: 24
145.36.63.0/24 maxlen: 24
145.36.64.0/19 maxlen: 19
145.36.96.0/19 maxlen: 19
145.36.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:78:94:e2:dc:e3:03:64:08:37:6a:dd:f6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5b03b9a02123c464b6a08dd45f40e94e0fb944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:aa:66:eb:90:a9:68:62:57:65:9b:bd:67:
ea:fb:c2:b6:77:e3:27:7f:68:51:84:a6:62:6f:61:
9a:26:58:81:fc:b9:c8:3f:5b:c4:df:a3:45:49:65:
25:ae:f1:e6:ed:e6:0a:39:d4:b6:8b:d3:f6:d7:de:
a3:94:04:fd:62:b5:72:a0:4a:e6:fd:27:af:c6:a3:
4e:0d:8b:10:73:32:32:5f:76:66:26:c3:32:9f:f3:
78:e2:d6:00:66:c9:24:08:99:80:7e:e4:72:8d:85:
e2:28:04:12:20:2b:0a:16:01:f1:9a:ee:44:09:98:
90:7b:13:4f:93:4a:86:c8:1d:85:6a:be:8b:49:04:
27:8a:74:d6:cc:ab:a5:02:d3:b3:77:1a:fe:64:5e:
ee:29:93:fe:56:c7:b7:d8:df:c8:73:88:f1:67:6a:
91:c5:6d:e3:67:57:46:9a:9c:20:63:e8:83:56:a6:
8a:82:fe:68:9d:4f:6a:5a:80:3c:e1:ce:02:e6:ab:
d1:9c:df:8f:28:3d:df:61:f8:1e:02:9c:6d:e9:cd:
06:64:87:cd:2b:64:7f:64:50:48:6d:c4:21:3a:e8:
ea:f6:a6:87:06:ee:5f:2d:93:b3:77:dc:55:c5:e2:
62:68:fa:e3:14:48:15:1e:6c:ef:52:a7:e9:ed:53:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:03:B9:A0:21:23:C4:64:B6:A0:8D:D4:5F:40:E9:4E:0F:B9:44
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.36.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:cf:96:a2:3a:83:9f:6f:99:6d:bf:52:bc:65:fe:5c:20:7a:
42:03:26:37:d3:25:37:f2:38:1c:48:bd:b3:7e:92:4f:2d:d0:
3c:00:07:3e:68:65:95:96:07:03:20:fd:f3:52:e5:38:8e:d7:
b0:5f:47:11:8d:f9:2d:31:61:b9:94:d1:05:20:a6:6a:42:11:
cb:7e:7d:7b:72:e8:c0:28:53:6e:49:ce:3e:ae:b7:6e:c4:20:
28:7b:e8:97:cb:8d:b0:0c:c4:f5:f5:55:47:7f:22:56:60:86:
87:17:86:29:4d:f6:8c:ee:af:06:2f:97:ed:46:79:04:5e:b7:
f5:d2:6b:96:ee:6b:fa:d8:82:f4:5b:85:10:49:16:98:87:c3:
47:04:8d:f3:f8:b1:eb:78:cc:31:1d:44:63:d0:69:52:42:1d:
13:c7:9d:63:b3:8f:44:99:eb:7f:62:62:70:0f:7f:22:70:81:
24:5c:00:ae:f7:41:88:9a:c0:53:4d:af:c9:21:af:e2:0c:7d:
0f:5b:e4:54:0b:9d:d4:80:cd:12:86:a3:ec:80:72:9a:21:6c:
8d:9a:60:2b:aa:5d:d0:31:4b:b8:4f:eb:e7:de:95:00:d3:1a:
72:d1:29:d7:a1:a8:5c:7a:4e:9c:a4:e6:a9:95:a8:00:6f:4d:
97:45:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:44 2026 by rpki-client