Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gID46NhD6hvl2nv_cf_eSX2tonc.roa
File: gID46NhD6hvl2nv_cf_eSX2tonc.roa (raw, json)
Hash identifier: YHrB9LZc1doQx8FMo5EWouRxMXkXccU8/QjTJjtf9to=
Subject key identifier: 80:80:F8:E8:D8:43:EA:1B:E5:DA:7B:FF:71:FF:DE:49:7D:AD:A2:77
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A04877ACEE8DE8BF06231D97300816D23B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gID46NhD6hvl2nv_cf_eSX2tonc.roa
Signing time: Fri 28 Aug 2026 13:03:17 +0000
ROA not before: Fri 28 Aug 2026 13:03:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:77:ac:ee:8d:e8:bf:06:23:1d:97:30:08:16:d2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 28 13:03:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8080f8e8d843ea1be5da7bff71ffde497dada277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:5e:95:7f:8c:fc:b9:e5:45:57:1b:08:7a:
43:47:00:9b:f7:f3:be:8f:d1:ce:ed:cc:36:a6:e9:
71:5a:68:a8:7f:c2:a1:4c:ef:39:f0:0f:f4:59:a2:
2d:f8:00:17:57:48:a1:3d:e1:3b:93:0b:01:75:48:
2d:71:87:e2:29:80:9b:e3:be:80:78:38:22:e7:e9:
37:89:58:ba:51:3c:87:53:86:02:42:e6:24:d4:a8:
c4:b8:bc:75:d9:0d:87:8f:67:5f:a0:7f:f6:d0:90:
0e:65:6b:83:97:55:94:81:bb:02:f6:ff:dd:76:68:
99:af:91:0f:07:ae:16:d9:71:1a:3f:ba:90:ee:fb:
f9:d3:25:d1:a7:0f:84:ac:43:54:c4:38:43:30:27:
f5:e1:03:b0:2a:f7:cb:51:1d:3f:42:37:22:0c:0e:
fc:cc:fa:be:98:c6:ee:4b:81:ca:70:a5:15:6f:83:
d3:89:20:8f:3b:18:c3:00:7f:cf:76:93:1e:96:f8:
78:b0:0e:ae:14:19:aa:1f:60:c3:11:01:8f:de:76:
11:4a:33:ad:77:75:58:ad:4d:dc:a5:99:6e:07:2d:
50:1f:96:94:45:32:43:5a:f6:49:15:ca:16:81:83:
a0:40:74:bf:c8:a8:00:97:22:bc:38:99:0e:34:20:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:F8:E8:D8:43:EA:1B:E5:DA:7B:FF:71:FF:DE:49:7D:AD:A2:77
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gID46NhD6hvl2nv_cf_eSX2tonc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:77:ed:7a:05:e0:d0:03:53:ff:b8:86:b2:51:e8:d5:a5:0b:
c2:7d:b4:83:85:78:9d:16:e3:81:b3:d1:a0:ee:3f:a1:4b:a3:
fb:a8:e1:0e:d7:fd:fc:d9:f3:90:64:44:05:6c:fe:24:95:0f:
b7:29:24:ce:4e:28:bd:91:46:f5:d3:56:35:82:a4:b1:37:62:
e2:26:fb:11:f0:6e:27:36:41:d3:fb:db:f0:1d:f6:54:2d:38:
5a:36:56:db:73:a9:17:50:94:07:94:ba:1e:e6:5a:22:a4:b0:
78:ab:99:38:42:2d:ae:24:56:d9:7c:ec:d3:29:04:b0:da:d8:
70:ba:6d:5a:96:94:67:06:79:4e:ee:de:29:97:e4:3c:41:6f:
99:e7:1b:2b:93:0f:20:e7:34:8b:70:5e:65:b8:bc:ff:f4:b2:
9e:f6:93:64:bc:13:c2:9f:1c:b8:1e:b8:2c:88:53:87:de:31:
74:62:d6:64:64:92:38:e0:64:d1:fa:49:50:b9:70:55:64:8d:
4b:fc:0f:89:93:a3:d4:dc:e5:dc:b9:b0:26:dd:53:35:65:ee:
d7:27:66:f9:77:76:1e:9d:90:84:b1:04:29:a6:1b:14:df:dc:
37:1b:c9:b3:a1:39:d8:b5:94:39:ba:8c:d8:29:6c:09:c8:28:
54:44:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:44 2026 by rpki-client