Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p_-F_gZNwSja9HlusE4TYmgaUwY.roa
File: p_-F_gZNwSja9HlusE4TYmgaUwY.roa (raw, json)
Hash identifier: 9uZH8FSVLCXJ4Mozz5c3Fj+lNnWQV44dFhzKdriybFs=
Subject key identifier: A7:FF:85:FE:06:4D:C1:28:DA:F4:79:6E:B0:4E:13:62:68:1A:53:06
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019FF58DB0A1869533386B44CE197C807A36
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p_-F_gZNwSja9HlusE4TYmgaUwY.roa
Signing time: Wed 12 Aug 2026 10:38:51 +0000
ROA not before: Wed 12 Aug 2026 10:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199099
IP address blocks: 45.74.241.0/24 maxlen: 24
45.74.245.0/24 maxlen: 24
2a13:a440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:8d:b0:a1:86:95:33:38:6b:44:ce:19:7c:80:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 12 10:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7ff85fe064dc128daf4796eb04e1362681a5306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:20:08:a9:9c:c5:31:d6:1c:2f:c8:ad:98:
69:fc:c0:3f:67:24:ab:ce:01:a0:74:8a:50:2f:ed:
20:0e:b2:a5:02:b8:a0:85:69:4a:33:a9:31:fc:8c:
8e:f3:24:63:f5:5a:29:84:51:a6:7a:a5:af:e5:19:
f0:be:af:76:bd:53:ee:b8:d4:29:b7:48:a4:49:92:
76:93:99:e9:00:89:dc:d6:e0:9e:0f:80:e1:21:47:
47:7c:a3:76:3d:1d:d0:b6:48:38:5b:19:ed:17:54:
0e:e0:a8:06:7e:d6:bf:5d:32:c3:50:09:b4:be:e0:
05:27:ef:84:dc:6c:22:83:83:14:07:2c:d5:34:f1:
b2:47:f9:c7:90:d5:ab:e5:ca:87:02:87:0b:36:ef:
fd:ae:ad:f7:06:42:09:eb:95:ec:88:5b:bb:6c:fa:
d7:6f:81:68:c5:30:95:93:db:21:92:5d:2c:98:03:
29:a5:b5:ba:4f:41:01:b3:7e:42:38:da:68:26:6d:
6a:60:46:83:d8:05:09:d9:fc:5e:9c:0f:25:d8:dd:
78:ee:c9:94:b4:85:c2:23:0b:5f:e8:d4:d7:0d:f6:
6e:4d:4a:73:91:79:d0:8d:aa:0a:b9:db:e5:d3:08:
e5:ea:38:e3:97:8c:ca:9b:54:27:a7:38:39:cd:d3:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:85:FE:06:4D:C1:28:DA:F4:79:6E:B0:4E:13:62:68:1A:53:06
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/p_-F_gZNwSja9HlusE4TYmgaUwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.241.0/24
45.74.245.0/24
IPv6:
2a13:a440::/48
Signature Algorithm: sha256WithRSAEncryption
39:22:89:c1:06:48:c4:16:4f:4c:79:24:b1:fd:04:8a:48:58:
c4:c2:b0:5a:6c:f3:5b:32:0a:ea:b0:69:7c:56:00:67:20:b5:
52:d0:83:92:eb:8e:60:88:26:dc:27:6c:3d:2b:8d:57:32:49:
52:b6:ad:e7:ed:cf:bd:68:e3:37:c2:81:03:d0:8a:e3:58:3f:
87:68:1e:36:b5:14:da:1c:87:a1:b8:84:6a:e3:84:4b:1d:12:
c4:78:ce:b6:0b:b0:46:b9:7a:0d:c0:52:b1:b4:7b:37:16:8a:
9e:d0:f6:52:07:c6:c4:5d:44:39:95:46:5f:3b:be:7f:89:2a:
c1:a4:8c:af:f0:51:be:ce:bb:d3:70:ed:7d:31:85:c0:19:66:
9c:85:1c:1a:c2:bd:4a:c3:75:85:ba:1d:80:ba:1f:0c:b6:e7:
28:e8:e9:a6:b3:ba:04:b3:5a:bb:e3:98:92:2e:c2:88:e0:32:
70:d6:96:4f:67:57:5b:7d:c9:16:16:22:d8:39:dd:03:dc:93:
ec:5e:f4:62:e9:21:d9:f2:71:a9:1c:f4:16:49:5d:52:1d:65:
ec:2b:4d:54:4a:f6:10:4d:f3:10:0d:90:de:56:4b:cc:96:f3:
41:f5:dc:12:40:11:8d:e9:31:9d:4e:12:0a:fc:91:fb:0f:a1:
7d:88:0b:f8
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ/1jbChhpUzOGtEzhl8gHo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjYwODEyMTAzODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2ZmODVmZTA2NGRjMTI4ZGFmNDc5NmViMDRlMTM2MjY4MWE1MzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhcgCKmcxTHWHC/IrZhp/MA/ZySr
zgGgdIpQL+0gDrKlArighWlKM6kx/IyO8yRj9VophFGmeqWv5Rnwvq92vVPuuNQp
t0ikSZJ2k5npAInc1uCeD4DhIUdHfKN2PR3Qtkg4WxntF1QO4KgGfta/XTLDUAm0
vuAFJ++E3Gwig4MUByzVNPGyR/nHkNWr5cqHAocLNu/9rq33BkIJ65XsiFu7bPrX
b4FoxTCVk9shkl0smAMppbW6T0EBs35CONpoJm1qYEaD2AUJ2fxenA8l2N147smU
tIXCIwtf6NTXDfZuTUpzkXnQjaoKudvl0wjl6jjjl4zKm1Qnpzg5zdOrUwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKf/hf4GTcEo2vR5brBOE2JoGlMGMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvcF8tRl9nWk53U2phOUhsdXNFNFRZbWdhVXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALUrxAwQA
LUr1MA8EAgACMAkDBwAqE6RAAAAwDQYJKoZIhvcNAQELBQADggEBADkiicEGSMQW
T0x5JLH9BIpIWMTCsFps81syCuqwaXxWAGcgtVLQg5LrjmCIJtwnbD0rjVcySVK2
reftz71o4zfCgQPQiuNYP4doHja1FNoch6G4hGrjhEsdEsR4zrYLsEa5eg3AUrG0
ezcWip7Q9lIHxsRdRDmVRl87vn+JKsGkjK/wUb7Ou9Nw7X0xhcAZZpyFHBrCvUrD
dYW6HYC6Hwy25yjo6aazugSzWrvjmJIuwojgMnDWlk9nV1t9yRYWItg53QPck+xe
9GLpIdnycakc9BZJXVIdZewrTVRK9hBN8xANkN5WS8yW80H13BJAEY3pMZ1OEgr8
kfsPoX2IC/g=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:12 2026 by rpki-client