Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vkob5ykG1uTUoQxf-Y0lIElf748.roa
File: Vkob5ykG1uTUoQxf-Y0lIElf748.roa (raw, json)
Hash identifier: rf3qd5Sq7pbldPkOkD+TRHnqHAa77Pp66pn/FP0ieM4=
Subject key identifier: 56:4A:1B:E7:29:06:D6:E4:D4:A1:0C:5F:F9:8D:25:20:49:5F:EF:8F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019FBD2F36608B510F8B0673267A6C53C983
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vkob5ykG1uTUoQxf-Y0lIElf748.roa
Signing time: Sat 01 Aug 2026 11:56:55 +0000
ROA not before: Sat 01 Aug 2026 11:56:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213637
IP address blocks: 45.74.246.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:2f:36:60:8b:51:0f:8b:06:73:26:7a:6c:53:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 1 11:56:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=564a1be72906d6e4d4a10c5ff98d2520495fef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:78:2d:ab:8f:a7:d2:8b:7d:1a:c3:d5:4c:
f7:3a:4f:b2:99:8a:df:38:7e:ff:69:5e:9a:1d:10:
d4:58:9f:03:ae:dc:bf:58:8d:8f:3b:d0:d0:3c:12:
34:c8:5a:71:d9:83:65:96:0c:d9:2b:4d:02:e6:de:
0b:dc:60:6a:a2:0d:e8:a1:2a:54:53:1d:c6:96:4e:
fd:72:9e:90:b0:4a:de:56:25:94:2a:65:9f:87:09:
86:f7:81:91:cb:04:3f:f1:94:ec:32:50:a3:20:9b:
85:9a:e3:d5:aa:dd:5b:72:d6:cd:63:ca:bd:5d:0a:
82:eb:27:52:4b:8b:70:ff:69:72:75:07:96:07:ee:
33:73:f2:d1:8d:8b:d5:fc:4f:d5:5c:2a:ee:0a:69:
f0:d5:65:76:94:96:eb:b3:6d:c0:4d:6b:64:dd:8a:
70:1d:7c:c2:e9:c2:15:d5:2f:85:ab:15:7a:24:de:
d4:f2:18:0a:98:1a:87:84:8e:41:d0:10:73:cc:0c:
4d:41:44:de:d0:7f:ec:d8:23:ea:67:6e:92:8e:6b:
f5:29:8f:00:45:a8:7e:f5:7e:2e:61:7d:37:25:e2:
94:7b:12:e8:c6:31:cd:f6:1a:bf:29:bf:57:53:bb:
09:4e:72:fb:52:24:ed:30:4d:08:5c:dc:95:37:67:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:1B:E7:29:06:D6:E4:D4:A1:0C:5F:F9:8D:25:20:49:5F:EF:8F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Vkob5ykG1uTUoQxf-Y0lIElf748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.246.0/24
45.131.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9f:d9:16:9f:b6:08:1e:58:3e:9f:2f:8d:d1:ac:6d:c0:51:
30:e0:f0:43:2d:7c:de:94:1d:c0:f8:10:14:c9:35:9c:31:da:
eb:20:8c:07:89:da:50:70:51:4b:87:db:f9:3a:05:2a:8d:74:
1b:89:1a:29:9e:59:23:65:c5:02:f7:45:80:ef:dd:8f:28:cf:
a0:cf:ef:4b:7f:d8:ea:6f:b2:73:50:60:da:df:c2:91:ab:dc:
71:c2:a9:fb:18:9e:96:63:2f:d5:21:1b:15:92:09:37:1f:7c:
61:cd:3c:d7:8b:a7:72:03:95:e3:30:1e:8b:1f:97:30:ee:86:
77:bc:64:f7:2c:cc:42:0f:48:23:b4:d2:cf:6b:20:65:04:10:
45:4c:6c:c6:8e:0a:0c:c0:16:3a:59:66:4c:c4:b1:cd:23:62:
1a:40:de:de:08:b3:91:35:f6:21:08:72:30:3a:0c:01:45:7b:
ac:8b:55:35:90:51:83:0b:1b:4a:86:9d:db:1a:c2:1f:71:45:
35:5a:13:d6:dd:32:11:cc:64:98:cb:b7:b2:40:a2:13:05:4c:
ae:fd:69:90:66:32:bd:ba:94:a6:81:82:18:84:8a:c9:86:7b:
6a:92:f8:da:3d:2c:7d:a9:bc:cf:20:1a:08:23:48:44:32:a4:
37:c6:98:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+9LzZgi1EPiwZzJnpsU8mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwODAxMTE1NjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjRhMWJlNzI5MDZkNmU0ZDRhMTBjNWZmOThkMjUyMDQ5NWZlZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujp4LauPp9KLfRrD1Uz3Ok+ymYrf
OH7/aV6aHRDUWJ8Drty/WI2PO9DQPBI0yFpx2YNllgzZK00C5t4L3GBqog3ooSpU
Ux3Glk79cp6QsEreViWUKmWfhwmG94GRywQ/8ZTsMlCjIJuFmuPVqt1bctbNY8q9
XQqC6ydSS4tw/2lydQeWB+4zc/LRjYvV/E/VXCruCmnw1WV2lJbrs23ATWtk3Ypw
HXzC6cIV1S+FqxV6JN7U8hgKmBqHhI5B0BBzzAxNQUTe0H/s2CPqZ26Sjmv1KY8A
Rah+9X4uYX03JeKUexLoxjHN9hq/Kb9XU7sJTnL7UiTtME0IXNyVN2dzxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFZKG+cpBtbk1KEMX/mNJSBJX++PMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvVmtvYjV5a0cxdVRVb1F4Zi1ZMGxJRWxmNzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUr2AwQA
LYMAMA0GCSqGSIb3DQEBCwUAA4IBAQCin9kWn7YIHlg+ny+N0axtwFEw4PBDLXze
lB3A+BAUyTWcMdrrIIwHidpQcFFLh9v5OgUqjXQbiRopnlkjZcUC90WA792PKM+g
z+9Lf9jqb7JzUGDa38KRq9xxwqn7GJ6WYy/VIRsVkgk3H3xhzTzXi6dyA5XjMB6L
H5cw7oZ3vGT3LMxCD0gjtNLPayBlBBBFTGzGjgoMwBY6WWZMxLHNI2IaQN7eCLOR
NfYhCHIwOgwBRXusi1U1kFGDCxtKhp3bGsIfcUU1WhPW3TIRzGSYy7eyQKITBUyu
/WmQZjK9upSmgYIYhIrJhntqkvjaPSx9qbzPIBoII0hEMqQ3xpjS
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:13 2026 by rpki-client