Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1NauFlrEcL5yRpxvR8FIvV9kSqw.roa
File: 1NauFlrEcL5yRpxvR8FIvV9kSqw.roa (raw, json)
Hash identifier: rTdu9ZgbI0o8dJ2Ir7I92M6rOTJzTyaHKIO+7XZGF+A=
Subject key identifier: D4:D6:AE:16:5A:C4:70:BE:72:46:9C:6F:47:C1:48:BD:5F:64:4A:AC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019ED02FCC9175CF306F1E26A6C05088615D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1NauFlrEcL5yRpxvR8FIvV9kSqw.roa
Signing time: Tue 16 Jun 2026 11:27:33 +0000
ROA not before: Tue 16 Jun 2026 11:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2f:cc:91:75:cf:30:6f:1e:26:a6:c0:50:88:61:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 16 11:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4d6ae165ac470be72469c6f47c148bd5f644aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:46:63:dc:36:99:bb:36:d1:cf:c6:ed:8c:
8e:05:b5:77:ff:a8:a4:82:7e:93:69:db:ef:84:b5:
30:8e:fc:e5:38:c5:30:fe:09:ac:f9:88:2e:af:a3:
be:df:88:f5:df:5f:50:be:03:78:65:d6:0b:63:2e:
83:ca:f1:ef:7d:f4:8f:03:03:b1:45:01:5b:14:84:
2d:d1:5a:27:5a:07:a2:b6:51:36:f8:03:e3:ae:90:
f9:4d:b2:15:4a:d3:73:22:8c:88:43:0a:57:6d:41:
e9:77:32:00:0e:a9:fc:f4:03:bd:1f:36:fa:8e:fa:
6f:44:17:c4:d8:a9:1d:de:27:6b:86:81:4a:c4:3e:
6f:96:0d:fb:75:6b:38:aa:8f:88:67:50:29:85:d0:
02:dd:c2:24:4a:dc:8a:6c:1b:14:aa:49:70:5b:27:
df:82:d2:ab:d9:68:a1:b0:6c:c8:04:77:d2:03:6c:
dd:f7:72:c9:d2:cf:6e:33:d9:8f:3b:db:94:03:2a:
18:09:77:4d:8e:f2:35:57:b6:6c:d7:34:e2:f3:13:
3e:f1:d6:64:2b:8a:e7:a5:df:4d:44:3c:de:76:87:
14:1b:96:02:19:5a:91:23:76:35:a3:90:c3:79:f3:
63:00:8f:20:63:93:49:9f:a2:b3:e3:93:43:27:c4:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:AE:16:5A:C4:70:BE:72:46:9C:6F:47:C1:48:BD:5F:64:4A:AC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1NauFlrEcL5yRpxvR8FIvV9kSqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9a:29:d0:2d:64:b2:4b:44:2b:d3:ad:fc:20:66:bc:8d:68:
2a:9c:d7:74:8e:0f:b5:d1:ed:34:76:c1:39:c2:55:9f:6f:45:
a6:37:5c:ac:e5:bd:bd:e3:ed:28:44:ab:4f:7d:f1:9d:5f:a2:
62:e6:3c:ae:b5:e5:94:cf:a3:15:bc:d2:ad:d3:6f:f2:ea:2b:
26:3a:ea:63:83:ed:7d:37:d8:07:1d:47:2e:bd:d5:46:03:70:
86:25:07:c2:66:cf:e5:e0:ad:7e:40:10:d2:21:1a:3e:9f:a5:
fa:14:6c:ab:9f:05:12:63:f9:ba:0b:d9:fd:c3:22:5b:be:80:
7e:30:80:73:ff:8f:40:4e:a4:ce:9f:f1:4d:14:64:d9:40:3b:
42:6e:45:b8:cc:36:32:2a:2f:30:f0:2e:1c:a4:1a:f1:5d:ea:
db:17:fd:d9:6e:20:0a:61:a4:32:89:68:4e:8b:b2:3c:1b:05:
dd:c0:7b:7b:7c:45:29:99:0d:67:f9:37:ab:f8:0d:58:b8:75:
02:46:c8:36:42:49:9f:e6:c1:66:29:9b:0a:e9:23:8a:65:d3:
32:8e:fd:f6:4f:33:76:22:74:d9:1c:ac:e2:73:93:fe:e2:30:
f8:01:d0:16:a9:b7:85:35:fa:8a:65:ec:c3:2b:1d:b0:e1:d3:
fb:b9:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:29:39 2026 by rpki-client