Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/L0enPaj_4hnZXqV7ZMEztaTZBC8.roa
File: L0enPaj_4hnZXqV7ZMEztaTZBC8.roa (raw, json)
Hash identifier: uzNqXLX0MMTGTUP5cxjMKgQ19ZYg9VfOrFLtYCvWoxk=
Subject key identifier: 2F:47:A7:3D:A8:FF:E2:19:D9:5E:A5:7B:64:C1:33:B5:A4:D9:04:2F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F8416319E2AED061A6ACEF9BF3E3B30F5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/L0enPaj_4hnZXqV7ZMEztaTZBC8.roa
Signing time: Tue 21 Jul 2026 09:51:14 +0000
ROA not before: Tue 21 Jul 2026 09:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 45.74.244.0/24 maxlen: 24
45.74.247.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:16:31:9e:2a:ed:06:1a:6a:ce:f9:bf:3e:3b:30:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 21 09:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f47a73da8ffe219d95ea57b64c133b5a4d9042f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:38:92:ee:d8:6c:27:82:9d:4a:f2:8a:45:c1:
13:4e:eb:f5:07:10:93:39:5b:8b:fe:b8:e8:24:e5:
bc:54:d4:ee:a2:46:46:97:1d:5e:f9:ce:22:61:c9:
83:f7:73:ae:72:30:32:93:63:b7:af:f9:74:f7:8b:
f4:f3:bc:5d:53:d1:22:83:e2:97:25:3c:3f:7e:a7:
a3:d4:f8:43:c3:af:19:e8:e0:e2:e2:c6:92:86:24:
3f:a2:26:c7:a6:c6:81:bc:c8:9c:59:b5:16:9e:e9:
62:0f:b5:52:f9:1d:91:2b:ae:43:0c:3a:c8:8f:30:
70:de:40:a7:f9:6f:db:75:a6:18:c8:df:99:5b:83:
81:6a:18:d2:5e:70:e9:d2:36:fe:08:c5:f8:64:4e:
05:9d:79:14:e9:33:da:5d:ae:f5:78:68:fb:59:e2:
57:02:d3:7e:cf:cb:fb:73:1f:71:fa:28:8c:42:74:
e2:ca:b3:f7:7d:5e:b0:c9:f2:10:bd:a2:43:0c:dc:
3e:a3:aa:9d:ca:46:21:96:bf:fc:9f:dc:63:1c:86:
75:b9:66:22:8b:39:cf:5d:f6:97:32:c7:b5:91:fa:
aa:b8:16:30:04:91:2d:03:5b:ed:e4:ed:54:a5:e1:
b6:41:a7:78:9f:02:22:79:c5:59:4e:96:35:c5:0e:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:A7:3D:A8:FF:E2:19:D9:5E:A5:7B:64:C1:33:B5:A4:D9:04:2F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/L0enPaj_4hnZXqV7ZMEztaTZBC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.244.0/24
45.74.247.0/24
45.131.1.0/24
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
194.146.36.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d9:10:07:ea:6d:00:6c:46:00:2c:5c:7d:25:55:62:e0:b0:
c9:37:bd:fb:9d:4e:28:3a:e4:8b:bc:88:d7:78:e7:12:ef:3c:
9c:e7:85:29:76:15:b4:8a:51:0a:8f:d8:d1:fe:ba:5f:12:54:
3d:c1:ac:4a:39:07:c6:fb:41:32:05:ab:db:59:89:4b:05:43:
97:cf:79:cc:e3:51:4b:ec:20:72:83:03:b1:27:25:b1:cc:ed:
a4:b9:5e:c3:f6:56:d3:40:cb:4a:57:64:f0:f5:2d:cb:bb:66:
de:fe:0b:03:bc:3c:1c:f2:e8:71:e3:00:39:f1:da:3f:28:38:
b0:ab:cc:2a:3b:45:0f:ae:b7:f0:f0:6f:1f:d3:e5:ea:1b:61:
04:fe:4e:40:bf:58:6a:f0:94:e0:c9:96:a3:3f:c7:77:aa:18:
69:a0:10:d8:08:d7:08:be:fd:4a:f4:6d:35:43:7f:9a:f1:1f:
0e:b1:17:9e:1d:30:4b:84:d5:3a:d2:7f:ac:95:2b:ae:42:b1:
77:57:16:93:8b:1c:b5:ce:80:80:a7:12:d9:20:3d:14:6a:f8:
19:b3:1f:94:e0:36:66:17:44:e8:7f:8f:a3:e9:9a:3a:47:d6:
40:03:d6:91:43:9e:65:ad:c4:c6:39:a4:fd:84:e8:20:e1:13:
e6:e5:cf:f1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ+EFjGeKu0GGmrO+b8+OzD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwNzIxMDk1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjQ3YTczZGE4ZmZlMjE5ZDk1ZWE1N2I2NGMxMzNiNWE0ZDkwNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjiS7thsJ4KdSvKKRcETTuv1BxCT
OVuL/rjoJOW8VNTuokZGlx1e+c4iYcmD93OucjAyk2O3r/l094v087xdU9Eig+KX
JTw/fqej1PhDw68Z6ODi4saShiQ/oibHpsaBvMicWbUWnuliD7VS+R2RK65DDDrI
jzBw3kCn+W/bdaYYyN+ZW4OBahjSXnDp0jb+CMX4ZE4FnXkU6TPaXa71eGj7WeJX
AtN+z8v7cx9x+iiMQnTiyrP3fV6wyfIQvaJDDNw+o6qdykYhlr/8n9xjHIZ1uWYi
iznPXfaXMse1kfqquBYwBJEtA1vt5O1UpeG2Qad4nwIiecVZTpY1xQ4OIQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFC9Hpz2o/+IZ2V6le2TBM7Wk2QQvMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvTDBlblBhal80aG5aWHFWN1pNRXp0YVRaQkM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALUr0AwQA
LUr3AwQALYMBAwQALYgGAwQALY2XAwQBLZMuAwQAwpIkMA0GCSqGSIb3DQEBCwUA
A4IBAQBx2RAH6m0AbEYALFx9JVVi4LDJN737nU4oOuSLvIjXeOcS7zyc54UpdhW0
ilEKj9jR/rpfElQ9waxKOQfG+0EyBavbWYlLBUOXz3nM41FL7CBygwOxJyWxzO2k
uV7D9lbTQMtKV2Tw9S3Lu2be/gsDvDwc8uhx4wA58do/KDiwq8wqO0UPrrfw8G8f
0+XqG2EE/k5Av1hq8JTgyZajP8d3qhhpoBDYCNcIvv1K9G01Q3+a8R8OsReeHTBL
hNU60n+slSuuQrF3VxaTixy1zoCApxLZID0UavgZsx+U4DZmF0Tof4+j6Zo6R9ZA
A9aRQ55lrcTGOaT9hOgg4RPm5c/x
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:57 2026 by rpki-client