Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa
File: KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa (raw, json)
Hash identifier: Y+VyjlDROYbrCdf29xH6G3H2D1QPefe6usrsIsZCitM=
Subject key identifier: 28:D4:E3:1F:34:F8:C9:27:95:C6:D6:33:D3:1E:6F:D1:F8:10:25:4D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A04877AD4BDB6B99CD38D2BB9F0CAA7373
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa
Signing time: Fri 28 Aug 2026 13:03:17 +0000
ROA not before: Fri 28 Aug 2026 13:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:77:ad:4b:db:6b:99:cd:38:d2:bb:9f:0c:aa:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 28 13:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28d4e31f34f8c92795c6d633d31e6fd1f810254d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:23:8a:6b:01:dd:a9:cb:2d:ec:99:f1:a1:
73:9f:15:e5:d1:3d:f9:77:45:86:77:55:1e:3c:43:
d3:e9:3a:6e:43:60:7e:ed:1c:53:89:52:8d:79:4e:
78:60:fc:ad:50:e3:9a:11:e5:89:0b:e9:5d:1c:fd:
48:79:f8:5f:c4:08:f1:88:29:28:bd:72:c5:21:68:
4f:18:12:7f:8d:6f:7f:8a:d4:34:d3:2f:82:3a:45:
17:27:84:02:70:c2:3e:da:43:f1:71:f6:35:c5:61:
d8:15:b1:b9:4b:c3:a2:8c:7b:ee:a6:1c:13:0d:0e:
c3:cf:ab:ed:d1:aa:89:06:84:e6:4e:00:a4:bd:ab:
d4:d8:c0:e5:58:e7:8d:c4:9c:d4:69:36:94:3d:04:
f4:21:4c:69:47:f3:8c:07:1c:ca:94:e8:be:39:72:
d8:4f:61:90:bf:56:dd:33:7c:be:a7:c8:3b:ad:66:
eb:e8:98:b1:e4:cb:10:7c:77:c0:54:3d:6f:98:51:
4a:33:93:59:a2:6e:ae:89:67:e0:01:22:97:82:91:
4b:1f:c9:35:95:cf:27:fc:4c:99:05:87:f5:17:f6:
18:3c:74:3a:64:e8:5c:b4:46:e8:04:7e:37:c9:b7:
d4:20:2e:f5:ed:4a:2f:39:dd:c4:66:ea:dc:4d:3e:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:E3:1F:34:F8:C9:27:95:C6:D6:33:D3:1E:6F:D1:F8:10:25:4D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/KNTjHzT4ySeVxtYz0x5v0fgQJU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
22:23:fa:e6:18:4e:47:c3:ac:dd:51:90:d8:56:b4:57:15:22:
d0:fc:d1:5a:87:c5:b3:77:34:df:f5:e7:e6:f5:fb:9a:af:77:
c8:62:76:04:68:e0:bd:64:9c:89:23:a2:4f:a6:61:db:f0:ea:
6d:1d:69:f1:09:0e:6f:cf:18:12:d4:1a:6e:bf:5c:c3:4e:4c:
bc:8c:6f:5b:60:ff:69:f3:83:b5:81:fa:cb:19:2e:15:2b:4a:
62:f9:00:14:bb:10:49:22:3a:b4:76:25:ec:0b:1f:59:5f:80:
20:0a:d6:36:36:c9:7d:c2:af:e7:44:c8:a9:33:dd:41:0c:a7:
fe:40:51:5c:b1:65:cd:da:13:0b:e3:9b:17:7a:99:b2:5c:82:
b5:2c:06:9e:09:2b:8c:eb:0f:cb:74:fb:7a:75:d9:1a:3a:48:
83:95:12:62:79:56:5e:a9:d8:ff:18:81:a5:75:e3:ef:a0:bf:
e5:5a:23:44:cd:13:94:f0:5c:f9:ee:b6:3b:05:a9:4a:22:62:
59:0a:d9:95:06:62:a9:e4:b2:90:9e:81:1a:11:80:20:04:a6:
bf:7a:cf:fc:27:e8:55:25:c9:d4:2f:ed:37:c9:73:90:4d:56:
bf:7c:79:c1:b1:ee:49:a0:c3:3e:f2:e3:c2:07:1e:ac:cb:a4:
97:50:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:33 2026 by rpki-client