Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rpn8hoursrYP2oPVIXn3ts2-UzY.roa
File: Rpn8hoursrYP2oPVIXn3ts2-UzY.roa (raw, json)
Hash identifier: pGlbgYVQCXDa6vW1FPspg85lP3fa+nhbJFH+tk8ezi8=
Subject key identifier: 46:99:FC:86:8B:AB:B2:B6:0F:DA:83:D5:21:79:F7:B6:CD:BE:53:36
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019EB7C093824785ED7FC2DEEA354C817DFA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rpn8hoursrYP2oPVIXn3ts2-UzY.roa
Signing time: Thu 11 Jun 2026 17:35:11 +0000
ROA not before: Thu 11 Jun 2026 17:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.74.247.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:c0:93:82:47:85:ed:7f:c2:de:ea:35:4c:81:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 11 17:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4699fc868babb2b60fda83d52179f7b6cdbe5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:4a:84:13:8a:e0:8b:cb:51:ee:72:fd:4e:
3f:8f:5d:5a:08:cf:58:d6:8a:2f:57:84:70:0d:0b:
05:37:34:f5:70:4a:eb:84:a4:64:be:11:27:83:2d:
95:57:d8:87:57:66:58:07:ed:06:a4:d5:2b:0a:13:
47:32:5b:f1:87:ad:0b:7e:84:f6:1e:7f:0b:1c:da:
b5:09:fc:55:7f:b9:0f:10:89:cf:56:f7:a7:ac:7e:
b3:71:4a:12:2a:c5:80:31:da:27:4b:5a:63:4a:bc:
1c:6d:6a:10:9a:3b:d9:47:da:48:98:44:4a:21:1f:
2b:4c:94:4e:68:5d:54:96:0e:28:34:34:53:be:39:
92:82:49:75:1c:f2:23:49:02:d3:92:b2:11:9a:ba:
c2:82:1d:12:12:1b:7d:ad:7c:0c:1b:12:6a:d0:ad:
c3:35:80:b3:1d:73:45:33:40:d3:a4:4e:af:25:a3:
5e:2e:da:a9:e2:ce:6e:11:12:47:6b:10:69:c5:a3:
f1:81:c2:23:82:1f:cf:3a:9b:fd:da:f3:80:25:b7:
2a:21:68:2d:5a:66:e0:4b:7f:73:9f:5e:66:0b:07:
5d:2e:b5:d8:8c:9e:c4:94:ba:f4:62:e6:5d:79:1d:
2d:d8:f4:f6:ff:a1:a2:3c:f1:c9:65:16:f7:07:41:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:99:FC:86:8B:AB:B2:B6:0F:DA:83:D5:21:79:F7:B6:CD:BE:53:36
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rpn8hoursrYP2oPVIXn3ts2-UzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.247.0/24
45.131.2.0/23
45.141.149.0/24
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e9:44:ef:fb:c8:38:e9:94:b2:7b:39:22:bd:34:c9:75:c5:
71:e3:34:99:fb:ae:10:28:0f:12:f5:e1:36:0b:c3:ca:05:ef:
b2:de:0d:22:13:e8:d7:03:78:cd:6d:cd:d3:eb:1d:3f:f1:c3:
ab:45:b0:86:36:07:dd:5b:82:0e:50:ca:23:f6:6b:11:b1:d3:
c1:f3:bb:3d:a0:77:e2:d6:a9:3e:4a:94:8a:0c:3b:65:c8:e0:
36:5e:ab:af:ab:cd:f5:95:a3:14:75:fc:2b:ff:c4:0b:e4:83:
7f:f0:e9:90:fe:f9:58:80:b0:56:eb:3e:56:43:66:c2:6a:56:
74:c0:82:89:54:33:64:70:b0:bc:cb:79:1f:83:c2:12:f9:98:
07:eb:33:c3:50:ce:ec:d7:65:32:21:bf:77:9f:c7:4e:43:6e:
f3:67:cf:24:2b:39:23:e7:99:e6:71:86:6b:e7:c1:1f:22:e0:
40:d7:eb:d9:32:33:bc:48:4d:fd:c2:ce:84:01:9a:58:bf:5c:
a2:96:94:12:8b:2e:0a:4b:77:41:f6:9a:17:5f:7d:1f:21:e3:
9b:21:bc:67:6c:c5:82:e5:82:ae:4d:e3:7a:c3:b1:b7:17:6c:
8e:75:07:fb:4e:0a:5d:c2:41:0b:d0:31:60:27:4f:06:43:85:
33:d0:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:54 2026 by rpki-client