Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ss4fVycWbzrbsGfC-UotFuMZAfI.roa
File: Ss4fVycWbzrbsGfC-UotFuMZAfI.roa (raw, json)
Hash identifier: jWq8iYtN0x0FwpUA7Gu/Lr/cnfU6eTDqvTSInxcOStI=
Subject key identifier: 4A:CE:1F:57:27:16:6F:3A:DB:B0:67:C2:F9:4A:2D:16:E3:19:01:F2
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E596B2FFB3699645E8A341843B3891BA2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ss4fVycWbzrbsGfC-UotFuMZAfI.roa
Signing time: Sun 24 May 2026 09:57:37 +0000
ROA not before: Sun 24 May 2026 09:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209711
IP address blocks: 45.74.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:6b:2f:fb:36:99:64:5e:8a:34:18:43:b3:89:1b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 24 09:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ace1f5727166f3adbb067c2f94a2d16e31901f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:71:2a:b2:ca:7d:f5:f9:e9:e3:79:39:e1:
a5:3d:e6:25:5f:eb:ea:97:33:82:2c:9e:ae:be:95:
e8:d3:6d:f6:f1:6b:90:9d:80:17:07:9a:ea:6f:27:
c1:2b:b0:64:f3:75:63:e2:f6:e8:2d:2c:c1:b4:37:
ea:b0:ac:e1:84:a0:bc:0a:81:86:f4:68:14:9a:b1:
52:f4:08:a4:d2:c9:a9:95:94:a6:cf:ee:e7:ac:79:
b9:e9:dc:4b:e7:23:c5:28:67:91:c4:9c:60:b0:e8:
62:ec:ec:3f:bd:4b:7b:93:db:1f:e0:fb:1c:e9:43:
df:fa:93:c6:21:8a:6e:44:45:72:ae:0a:5a:3a:af:
cd:d0:ff:18:41:f5:b6:08:0e:c0:da:4f:ff:83:ed:
da:18:a9:90:d5:41:45:e0:88:e0:77:ce:57:24:77:
4c:ff:fb:86:da:6e:4a:0c:70:83:09:45:59:dd:e5:
52:94:65:9d:d3:df:ba:0f:2e:41:ef:11:8d:c2:95:
4e:d7:aa:0a:e8:df:6f:16:67:a1:f6:b6:87:4d:13:
5c:4b:33:72:82:aa:f3:2f:a8:e9:1d:03:a8:12:05:
c9:8d:3b:78:74:d9:2f:f2:b8:7a:8a:52:18:0e:03:
9b:59:e1:cd:f7:c7:4a:d4:d4:f3:66:56:47:9a:34:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:1F:57:27:16:6F:3A:DB:B0:67:C2:F9:4A:2D:16:E3:19:01:F2
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Ss4fVycWbzrbsGfC-UotFuMZAfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.243.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a6:93:0b:86:d8:69:ba:c1:2f:a6:21:81:3d:d8:fa:79:87:
18:6a:ab:89:b6:66:0f:63:82:89:e3:75:8c:27:93:c7:d9:15:
18:99:5c:39:ea:c5:d6:40:b4:ab:86:5b:cb:1c:07:c0:da:1c:
27:05:7f:c3:21:df:35:e8:c6:46:0c:24:05:74:ca:5b:62:54:
bf:90:0a:78:05:b5:fa:ea:e1:71:97:ee:79:c7:34:aa:5b:0d:
bc:55:3c:da:b0:47:d5:90:72:23:fc:74:6c:36:6d:5d:72:3b:
2d:a7:ae:d7:95:d9:9d:db:36:87:53:cb:68:2a:0f:01:2f:b7:
24:57:9e:ae:35:e6:ce:3c:3e:26:0e:ea:74:83:32:1d:e5:55:
0f:3f:1e:68:a6:3f:18:80:0b:e5:6a:0e:24:db:af:5d:b6:cd:
0c:cf:da:23:8e:d3:da:e7:b1:1d:c1:3f:29:5b:51:71:da:00:
30:d6:4c:98:c1:60:4b:84:f9:9e:83:52:3e:c3:ba:dc:1a:b0:
44:e2:7a:78:34:00:7e:2f:f2:57:65:51:74:e5:51:2c:d4:17:
4d:02:3b:21:75:b9:d3:f6:33:4e:64:7f:35:7a:37:23:ee:c2:
06:b1:0b:2d:2c:5a:c0:1a:53:14:01:99:af:08:c0:b9:5d:5a:
0e:47:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:49:53 2026 by rpki-client