Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z6JfI-sh2bNRE1whfbGOorsLuCw.roa
File: z6JfI-sh2bNRE1whfbGOorsLuCw.roa (raw, json)
Hash identifier: 2ZqxwsXOn5MxMkpYtNE4aWeK6vzR7/Jj0bboBJ14PZ0=
Subject key identifier: CF:A2:5F:23:EB:21:D9:B3:51:13:5C:21:7D:B1:8E:A2:BB:0B:B8:2C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A07C85874F02432E48A87AE83BE8F96EF6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z6JfI-sh2bNRE1whfbGOorsLuCw.roa
Signing time: Mon 07 Sep 2026 15:38:40 +0000
ROA not before: Mon 07 Sep 2026 15:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.131.3.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:85:87:4f:02:43:2e:48:a8:7a:e8:3b:e8:f9:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 7 15:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfa25f23eb21d9b351135c217db18ea2bb0bb82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:26:09:dd:16:32:ce:a8:19:14:b7:e3:3c:
64:22:82:44:4c:cd:4d:6e:fa:57:5f:7c:30:36:17:
bc:f6:76:28:e8:39:5f:98:42:e7:f2:bc:c5:0f:b6:
c2:ea:cc:a6:c1:27:6a:4e:e7:72:c8:51:f6:0e:95:
99:2c:f9:3d:dd:70:9c:19:4a:85:52:11:3f:e9:fc:
5e:96:88:e0:28:de:85:be:a8:bd:dd:f3:61:fe:82:
39:d0:e9:7b:9a:17:c7:88:f5:71:3a:42:c7:73:e9:
ab:65:26:f4:8c:7a:23:b7:31:27:ff:d4:3a:a3:71:
07:cb:64:8e:dc:1b:45:99:d8:66:aa:45:cb:d1:75:
c7:0f:b6:b8:7e:fc:89:26:92:7d:8f:49:93:dd:27:
59:fe:f1:0d:d8:d1:78:3e:bf:0b:f0:b2:e5:f3:73:
a0:42:74:7f:43:2f:34:ca:50:7d:ef:52:4a:31:7a:
53:ed:9b:cf:1c:03:19:bb:77:fa:fb:8a:f9:32:29:
4a:f6:c6:9b:42:54:fa:cc:84:98:32:da:c9:1b:be:
e9:76:98:f8:88:cd:ef:d9:ca:db:82:af:af:32:70:
99:1e:64:5d:46:85:25:96:91:73:9a:39:f8:69:cd:
7c:a6:ff:6d:81:4c:e8:a0:7c:32:fc:72:cd:e7:d9:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:5F:23:EB:21:D9:B3:51:13:5C:21:7D:B1:8E:A2:BB:0B:B8:2C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/z6JfI-sh2bNRE1whfbGOorsLuCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
32:51:46:71:1e:8f:30:59:1a:f8:2f:a2:a3:08:6a:36:c8:e4:
bb:3c:35:8c:84:91:18:1d:74:7c:81:f7:2f:38:85:a5:a9:45:
8a:f7:f9:b1:14:21:e7:c8:69:83:6a:ba:8a:40:7c:12:aa:cf:
12:72:71:a0:af:18:6e:40:13:99:02:a1:36:4b:b2:e7:1c:be:
51:54:eb:df:86:06:fa:cd:d9:e0:ca:ab:43:b0:17:65:4e:a1:
9e:af:67:09:d3:cc:3c:84:f0:84:45:3f:f5:d8:5f:3e:3a:cb:
aa:7d:c8:37:f1:65:86:ea:ac:da:29:b7:1a:56:38:b2:31:53:
f6:1e:c1:ad:14:f9:bb:58:86:c0:91:30:ea:19:c5:e0:f3:42:
17:7f:de:6a:d3:12:18:b7:20:24:06:fd:10:e1:d1:6b:de:b4:
71:98:05:46:1f:62:34:18:bf:e5:68:62:85:54:1c:af:57:0d:
28:85:0a:1e:1a:8d:f3:4e:bc:b2:4a:5c:82:7d:ff:f2:5c:3f:
f3:24:78:7b:83:ea:7a:27:9e:ea:df:7e:9a:c4:3a:4a:f4:7f:
50:8d:96:33:16:57:12:dd:af:a6:0e:dc:3a:73:5c:b4:32:89:
87:1d:96:66:ff:f8:b2:9a:30:e2:bd:50:b0:89:9d:2d:e2:41:
0d:2d:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:47 2026 by rpki-client