Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/448LQQZP5963YjUgQmGdjGzZP4E.roa
File: 448LQQZP5963YjUgQmGdjGzZP4E.roa (raw, json)
Hash identifier: A0e3hQGSfaeleLtoKDDgK3wXOY26iCAWSqcLS0yWKi8=
Subject key identifier: E3:8F:0B:41:06:4F:E7:DE:B7:62:35:20:42:61:9D:8C:6C:D9:3F:81
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F7509A585901EF0CCAA2FF8C01ED6D063
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/448LQQZP5963YjUgQmGdjGzZP4E.roa
Signing time: Sat 18 Jul 2026 11:43:14 +0000
ROA not before: Sat 18 Jul 2026 11:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.74.247.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:09:a5:85:90:1e:f0:cc:aa:2f:f8:c0:1e:d6:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 18 11:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38f0b41064fe7deb762352042619d8c6cd93f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:12:c8:77:ed:88:2d:c7:25:d4:20:6b:be:
d4:85:aa:41:c1:71:e6:4c:e4:3a:f7:2e:23:a5:4d:
f9:a4:9e:03:c9:e2:fc:b1:99:a5:15:3e:6d:85:14:
71:1b:b6:c1:17:89:98:7b:90:2b:18:8c:71:66:60:
20:ae:5a:95:a4:ab:f5:bc:bf:f0:94:c2:49:da:de:
ea:ef:05:7d:3d:5e:0d:23:8e:2d:ad:7f:c8:c3:78:
94:80:b3:79:60:73:93:53:2e:75:18:66:7f:b6:69:
d0:c9:cc:5e:89:9b:15:6c:bb:90:89:8c:41:90:5d:
e7:03:e8:cd:ba:fe:2e:10:cd:6d:60:6f:57:36:d0:
d6:88:83:77:92:13:fd:14:aa:76:3a:d8:38:18:6a:
66:9b:d6:fc:cd:95:0c:2c:0c:b5:61:bc:e6:a3:93:
f5:71:0c:c9:7f:ad:7a:02:05:5d:05:eb:a8:a8:c0:
e1:ff:70:55:e1:c3:74:fe:89:df:e5:88:92:1a:fe:
29:12:39:a3:d5:57:22:be:52:7a:69:df:85:ec:99:
34:15:fc:7c:55:f2:98:f2:c3:b5:86:14:b8:72:30:
47:b4:42:c4:30:15:6a:9d:cc:8b:d2:a3:93:01:b9:
fc:06:21:b3:e0:fc:1b:d7:50:84:3e:8a:df:4e:2c:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:0B:41:06:4F:E7:DE:B7:62:35:20:42:61:9D:8C:6C:D9:3F:81
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/448LQQZP5963YjUgQmGdjGzZP4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.247.0/24
45.131.3.0/24
45.141.149.0/24
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
48:03:18:cd:f5:bd:9a:ad:0a:78:55:29:5a:a1:1e:48:15:c3:
64:39:a0:1e:54:ad:8f:82:15:31:57:55:7f:b9:27:9f:93:c5:
05:67:22:98:b7:58:68:c3:06:11:9c:ea:e3:cd:98:db:27:77:
17:b6:e4:9e:c7:e0:2b:16:6a:dd:db:8d:86:63:cb:81:00:c1:
9c:7b:0d:17:97:82:c4:00:82:53:66:cc:8f:57:0d:f5:01:89:
7f:a5:88:32:d1:65:b8:42:eb:c5:5f:58:ad:ac:57:ad:4e:91:
a0:3d:55:5b:0f:ed:0b:7c:4e:76:9c:b0:98:6d:d1:e5:aa:0c:
df:45:ed:d8:23:02:f0:af:52:1c:db:bc:56:05:af:71:f0:50:
e9:17:d3:ac:70:0d:c4:6d:1f:3d:83:0f:e7:ba:fd:b7:11:10:
bc:af:b3:c1:89:6b:a9:e2:cd:73:5d:e4:86:f1:2b:62:0b:58:
42:6d:75:38:b3:9c:c9:98:2e:80:88:26:18:9b:45:15:95:b9:
78:54:94:29:8d:49:a6:1f:25:c4:96:8b:f9:ee:98:01:63:a5:
05:6f:1d:46:bb:af:68:08:84:da:91:fc:10:aa:1a:33:59:f0:
5a:4e:e9:a3:d4:a1:f0:b3:a6:58:61:95:68:2b:8b:24:3b:f9:
30:04:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client