Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efLppXHlERCKKYaJTde-86Ghjlk.roa
File: efLppXHlERCKKYaJTde-86Ghjlk.roa (raw, json)
Hash identifier: QKED85n+T67n9kk+tVSC2dGP5JLesJDmpO536eK8+nU=
Subject key identifier: 79:F2:E9:A5:71:E5:11:10:8A:29:86:89:4D:D7:BE:F3:A1:A1:8E:59
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019E44D79CB18A0184A12FD34D91F05FACA3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efLppXHlERCKKYaJTde-86Ghjlk.roa
Signing time: Wed 20 May 2026 10:04:01 +0000
ROA not before: Wed 20 May 2026 10:04:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197464
IP address blocks: 45.74.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:d7:9c:b1:8a:01:84:a1:2f:d3:4d:91:f0:5f:ac:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 20 10:04:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79f2e9a571e511108a2986894dd7bef3a1a18e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:26:b3:3a:a0:05:2c:55:15:7b:ec:9c:a7:
54:38:8c:fc:09:3d:84:b5:35:e1:4a:07:b0:d8:ce:
96:52:92:b7:ab:f1:c3:48:1c:9a:22:6b:5f:82:d2:
55:30:3b:5f:3c:d8:4d:d5:c9:50:af:e2:36:98:04:
1c:a2:ce:ff:f5:d0:70:7b:b6:78:be:c8:d6:56:52:
de:fe:c2:ae:19:25:21:d4:20:24:d0:c7:49:fa:df:
4c:5a:52:f8:5d:8a:71:47:b2:22:f4:be:f3:21:5e:
31:51:3d:70:81:92:e2:e9:dd:43:67:8b:1b:89:82:
15:8b:e8:59:c8:10:b4:83:dc:0e:9e:de:43:8b:30:
7a:78:4a:ea:11:b0:17:02:30:71:e1:7c:cb:01:aa:
38:d3:9d:54:db:60:f3:f6:5d:5f:8f:0a:a2:d4:f3:
5d:b6:fb:f9:fe:7d:f0:9c:5c:c9:d1:f8:a6:2d:48:
1c:42:99:d0:7e:dc:8a:52:92:a8:95:37:d1:f1:18:
54:e3:53:4f:ad:8d:bf:f1:ef:b9:6d:e5:de:37:36:
78:ec:3f:27:b3:87:08:5a:e1:25:cc:e6:28:b2:95:
1c:c7:9a:15:76:73:dd:bc:9a:14:e3:5b:ca:b8:5e:
bf:3e:1f:48:ec:10:db:b1:10:1d:e0:ba:f3:5f:1e:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:E9:A5:71:E5:11:10:8A:29:86:89:4D:D7:BE:F3:A1:A1:8E:59
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/efLppXHlERCKKYaJTde-86Ghjlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.179.0/24
Signature Algorithm: sha256WithRSAEncryption
98:01:77:d4:7d:bf:d4:64:82:9f:8d:7c:b7:a4:13:20:46:c6:
27:fb:ca:ce:87:f8:99:f3:4f:cc:77:82:3f:29:96:02:68:e1:
27:47:c9:a9:dc:89:bd:f4:ac:8f:00:01:44:82:14:10:3e:57:
0f:d7:13:a3:ac:e6:eb:f3:dd:46:be:86:c5:2c:0a:24:c8:1a:
4b:b7:65:e1:de:ff:15:30:49:62:15:b5:ca:cc:6c:10:58:fb:
19:8c:a3:35:ca:4c:78:eb:f1:9c:60:38:b5:d1:1d:f9:90:38:
8d:19:8e:89:0f:88:63:3b:f6:8e:43:91:b2:01:61:e6:41:20:
5c:a9:01:0f:e6:df:ea:bb:1f:af:eb:f5:6b:7a:e8:e0:13:8f:
47:7f:fa:9f:e1:18:fa:c5:42:b6:0a:2e:15:30:cb:14:76:de:
8d:0e:9f:e1:31:64:50:2d:c2:a2:63:a8:93:54:90:30:a5:9f:
e5:d7:30:8f:fe:9d:1c:f9:a8:02:05:21:21:79:b3:32:3d:e3:
56:d3:c6:ba:d9:83:a3:b6:f6:03:ac:37:7d:1e:b2:f4:86:68:
f1:2b:da:2f:5a:c1:81:a8:f8:30:1b:4f:51:23:bf:93:5f:02:
70:c4:61:b8:03:90:5b:ad:13:54:5c:76:35:b6:3d:9e:3b:f3:
9f:b0:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:55 2026 by rpki-client