Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa
File: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (raw, json)
Hash identifier: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=
Subject key identifier: 91:F7:87:F9:A1:F2:89:9F:E5:96:19:43:0A:DC:2B:F1:87:AA:2A:E9
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019E46E77E47DD4E707879DB047214B97580
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa
Signing time: Wed 20 May 2026 19:40:36 +0000
ROA not before: Wed 20 May 2026 19:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 45.81.232.0/22 maxlen: 24
45.81.232.0/24 maxlen: 24
45.81.233.0/24 maxlen: 24
45.81.234.0/24 maxlen: 24
45.81.235.0/24 maxlen: 24
45.93.248.0/24 maxlen: 24
45.93.249.0/24 maxlen: 24
45.93.250.0/24 maxlen: 24
45.93.251.0/24 maxlen: 24
45.132.88.0/24 maxlen: 24
45.132.89.0/24 maxlen: 24
45.132.90.0/24 maxlen: 24
45.132.91.0/24 maxlen: 24
2a0e:66c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:e7:7e:47:dd:4e:70:78:79:db:04:72:14:b9:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: May 20 19:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91f787f9a1f2899fe59619430adc2bf187aa2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:e3:f4:68:4e:84:d4:9c:07:1b:28:90:8c:
bb:71:e8:79:7c:a8:04:1f:48:f3:d9:4f:66:b2:7e:
54:d6:aa:11:5f:88:39:64:1f:0d:15:54:c5:6b:66:
9c:48:5b:0e:d6:39:76:51:41:0a:f8:3d:97:6e:78:
66:9d:64:bc:d3:95:12:9e:fd:7e:1f:14:7c:ea:fd:
24:29:c6:ee:1b:b2:51:05:53:44:57:fe:4f:0c:1a:
0f:15:8b:fa:0e:4c:7a:fe:cd:e2:13:e6:97:09:59:
82:47:d0:3b:a4:d8:94:92:12:cb:48:36:1f:a3:e8:
26:71:3e:a1:56:66:5d:a6:3b:4b:df:f2:02:c4:3e:
77:4a:d2:2e:a4:ce:ad:3a:f6:4f:8a:37:30:df:5b:
3b:79:81:7e:cd:c8:f5:a4:ca:79:68:5e:b6:a7:7e:
da:11:fb:98:41:9c:0a:a4:72:60:0d:8e:83:1e:74:
18:9d:fe:3a:0e:13:37:e6:7a:d1:6f:4d:a9:ac:aa:
ab:71:7e:fe:4c:f6:a0:e1:9c:64:44:97:ce:c3:78:
c7:e1:3e:1d:28:74:2e:e5:48:3b:75:bc:e5:da:f0:
06:42:7b:1d:82:e9:7f:7b:09:f0:61:94:10:d5:e7:
7a:57:75:2d:f1:31:a9:a4:89:da:81:13:eb:09:f8:
9d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:87:F9:A1:F2:89:9F:E5:96:19:43:0A:DC:2B:F1:87:AA:2A:E9
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
45.93.248.0/22
45.132.88.0/22
IPv6:
2a0e:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:70:89:57:29:10:85:27:20:02:c8:d6:86:21:4b:a8:8a:db:
e1:38:af:4d:48:a5:2e:3f:5b:5c:2c:5b:8e:70:e5:00:54:90:
9d:8c:7b:5e:f2:bf:d2:09:15:a3:4d:be:22:3e:8b:7f:c9:26:
77:fe:2a:1a:e9:83:30:66:19:94:04:a9:33:bb:82:9c:d5:c8:
f5:46:8e:07:92:21:84:02:13:3a:a9:92:53:b5:41:02:14:25:
91:9b:09:e1:1e:05:84:b9:ef:0b:c2:08:b9:89:3b:fd:d1:c1:
1f:ce:44:f0:04:ef:5b:f0:fc:40:c7:5f:0d:6e:2a:07:67:5d:
b4:f9:a1:cb:6b:d2:f8:b2:51:fb:b0:71:7a:9f:36:ec:e0:b8:
c8:10:e0:f8:ed:db:16:5e:d9:b2:ac:9c:fe:24:ce:4a:12:70:
bd:ae:dc:94:55:28:a9:a5:f1:38:ae:e9:6e:38:30:25:49:ca:
62:49:b3:1c:48:93:eb:73:a6:5a:a4:d2:f1:78:a6:7f:de:14:
52:c1:e0:26:23:f0:60:a2:d5:96:4a:7d:bf:ef:24:41:9c:5d:
63:39:25:75:8a:d5:c3:9b:28:3b:3d:c7:96:c9:b9:b9:f5:da:
9c:40:2c:b8:37:f0:10:03:bf:6f:f7:76:64:b4:59:79:98:98:
fc:e9:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:47 2026 by rpki-client