Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZGRufHjaEOQfZDX946W9j6Kmqp4.roa
File: ZGRufHjaEOQfZDX946W9j6Kmqp4.roa (raw, json)
Hash identifier: 9yXb0jdoscPhoz5VZ5tNsNxnKaSTWuDYouPvk/pE4eQ=
Subject key identifier: 64:64:6E:7C:78:DA:10:E4:1F:64:35:FD:E3:A5:BD:8F:A2:A6:AA:9E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019EF3BD43C85DCD8693AA926F64071E9F40
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZGRufHjaEOQfZDX946W9j6Kmqp4.roa
Signing time: Tue 23 Jun 2026 09:08:47 +0000
ROA not before: Tue 23 Jun 2026 09:08:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197261
IP address blocks: 45.74.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:bd:43:c8:5d:cd:86:93:aa:92:6f:64:07:1e:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 23 09:08:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64646e7c78da10e41f6435fde3a5bd8fa2a6aa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:f0:90:6e:29:c1:3c:5d:36:01:ab:e9:59:
3b:31:c0:18:b2:4c:95:fb:5e:d3:bb:cf:86:ab:58:
12:24:b1:08:85:84:d0:33:bd:4d:ab:03:4b:5c:93:
ac:f7:51:ad:dc:b2:c4:98:35:fc:06:e2:af:d5:8d:
5a:a5:24:8e:5d:04:2f:83:62:e6:0b:a1:d9:3c:37:
6e:8a:9f:bc:36:03:ae:06:43:93:3e:db:27:ea:7d:
28:30:c0:51:28:28:a9:08:33:8d:4c:34:9d:b1:e2:
e2:35:86:b1:42:54:0a:c9:90:70:0c:cf:13:1d:c2:
df:53:c5:89:b9:59:e9:11:3d:08:eb:9e:f2:5e:85:
9a:e1:22:59:b1:e6:5e:dc:c0:3d:6b:e5:24:98:86:
b6:c4:ba:11:90:ea:54:ca:61:11:c1:3d:18:89:c1:
ce:17:3c:e7:bc:1a:76:e0:b2:44:fa:28:5d:7f:e5:
05:8d:30:f2:30:76:ce:5b:e6:29:14:ef:7a:f3:0a:
ea:71:dc:ec:f7:9c:de:d2:82:aa:6f:97:54:e6:cb:
80:20:58:a9:1a:96:aa:5d:be:c9:23:bb:45:c9:91:
a0:94:8f:c9:69:31:15:1f:f8:8b:29:0e:a2:8d:66:
04:d0:33:89:fc:50:2a:a9:5c:14:c6:5a:4e:bb:fe:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:6E:7C:78:DA:10:E4:1F:64:35:FD:E3:A5:BD:8F:A2:A6:AA:9E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ZGRufHjaEOQfZDX946W9j6Kmqp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.243.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4f:8d:24:31:6a:00:b3:12:4b:6a:e1:33:d4:f0:f2:fa:7f:
0e:9d:43:fa:3f:08:16:cd:09:b8:26:37:ab:2b:2b:e8:40:25:
f5:89:65:f9:f7:90:a0:ad:fe:e4:76:4d:20:3f:b9:30:c6:a0:
29:9f:a8:1d:08:46:e5:a9:e5:c8:da:ad:37:13:f4:93:8f:51:
73:14:7c:95:6e:30:2b:03:29:6c:10:6f:3d:a1:bf:a7:eb:73:
b5:5b:09:9c:f8:f0:e6:7b:e5:8d:38:31:ee:ac:e5:ec:a4:1e:
f3:58:59:59:3c:cb:50:df:12:74:05:8f:a3:73:d0:72:cb:3b:
2e:4a:3c:c6:75:1e:3f:d8:ad:b4:a8:f1:86:71:de:4d:25:16:
f0:2d:95:94:df:cf:16:4a:70:42:af:1d:0e:e5:19:86:19:91:
19:72:3d:4f:60:e2:8c:fb:7e:6b:de:77:d5:a8:16:c4:b6:08:
dd:a3:e7:56:ee:c8:38:f5:5a:8a:38:b8:3d:ab:12:b1:92:ae:
b3:d5:9f:6d:03:66:c6:53:51:b1:ac:56:1e:1f:fa:48:68:29:
67:70:ce:93:69:f3:41:c2:f1:af:07:20:1e:cf:fd:5a:c3:c3:
cc:e1:af:ad:fb:f2:c4:09:54:ba:79:9d:6a:73:d1:62:02:2e:
2c:a5:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:49 2026 by rpki-client