Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UCsN7Ssj_1i3aLPG-dJQfOsPRVc.roa
File: UCsN7Ssj_1i3aLPG-dJQfOsPRVc.roa (raw, json)
Hash identifier: 7nZOpb7V5Azg9V1Hn40O+uts4a73DUgPRDbH2c5ys8U=
Subject key identifier: 50:2B:0D:ED:2B:23:FF:58:B7:68:B3:C6:F9:D2:50:7C:EB:0F:45:57
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F4088216B418964B4954B4E7268E43069
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UCsN7Ssj_1i3aLPG-dJQfOsPRVc.roa
Signing time: Wed 08 Jul 2026 07:01:30 +0000
ROA not before: Wed 08 Jul 2026 07:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:88:21:6b:41:89:64:b4:95:4b:4e:72:68:e4:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 8 07:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=502b0ded2b23ff58b768b3c6f9d2507ceb0f4557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:bb:be:cd:3a:0f:a2:a7:44:3f:9d:4f:98:
1e:09:a0:87:85:04:b1:49:22:ad:80:e5:65:35:74:
15:de:c3:56:05:43:32:c7:27:0d:2e:6b:c5:83:cd:
2a:76:bf:65:31:80:0a:b3:88:59:e1:c6:fa:20:de:
11:6a:e4:85:23:59:f6:2e:d5:fc:d7:ea:d0:d5:d5:
a4:d5:3d:74:2f:7f:64:6e:0e:79:81:14:cc:1d:cf:
67:aa:e3:b1:6c:3f:76:10:f3:83:33:48:de:75:95:
b2:d8:20:44:c6:d9:14:80:12:9c:e3:79:37:de:6c:
3f:96:36:ab:a8:17:e2:08:da:41:d6:66:57:04:a2:
f3:c5:7e:c9:5f:dc:22:3b:d2:5f:c9:34:c7:27:5d:
bd:d7:d5:ff:c5:3c:66:8d:80:6b:ac:7f:22:bc:20:
a7:37:f8:07:52:d8:aa:f3:d9:87:45:f0:0f:ef:9c:
d1:5d:6b:63:38:cb:82:7e:4e:41:b1:08:11:80:35:
1b:04:0b:43:cd:4d:6c:1f:b2:76:e8:16:f2:93:7d:
f1:00:01:d3:0e:ee:6d:0e:c1:87:8f:44:0a:76:e7:
43:f6:d5:38:5b:43:a7:03:b7:f7:f7:dd:be:cc:5b:
82:ce:9b:30:61:59:83:b8:a6:46:36:17:2b:cd:b7:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:0D:ED:2B:23:FF:58:B7:68:B3:C6:F9:D2:50:7C:EB:0F:45:57
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UCsN7Ssj_1i3aLPG-dJQfOsPRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.5.0/24
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2b:50:9a:8f:46:c0:bb:4d:a7:14:96:21:ab:79:72:1e:0b:
37:e0:30:d1:ca:d9:6f:ea:cd:ce:2c:e4:4f:f0:dd:36:70:27:
a9:f1:02:3d:78:88:4f:19:a4:99:95:93:3d:4a:f6:ee:96:83:
5c:e1:78:3d:4b:6b:71:8b:8f:fa:66:57:62:04:7f:d4:0b:e1:
ee:ca:99:d6:07:c5:7b:e4:55:53:6d:72:5c:59:ba:90:bc:ee:
53:6c:ae:8b:04:12:43:8b:24:99:77:b6:f8:a6:61:6f:0b:9a:
5e:86:46:7b:fc:31:c0:05:04:95:ef:8c:d3:d3:2b:99:94:44:
d5:47:02:31:c7:8b:4a:e4:f2:47:45:71:52:74:2f:ba:e3:51:
8d:9b:a8:4e:3f:e5:43:ee:4c:d4:a3:f7:a7:c5:f4:e8:13:6c:
ce:23:60:09:58:73:00:45:02:81:38:b3:bd:2a:e2:41:82:cb:
52:36:28:92:0a:ba:9c:f2:a8:ec:47:2c:4e:2a:58:e3:d5:98:
9e:c9:d6:15:16:ef:d2:c7:65:1c:d4:f7:94:36:a6:ad:71:8a:
31:84:ae:b1:03:0f:4c:2b:9b:a3:e3:10:c2:7d:0d:37:33:65:
b6:d9:f1:b1:8e:09:51:56:54:90:5b:08:86:04:14:59:98:cf:
de:79:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:56 2026 by rpki-client