Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fLVVBwDC46veW27cWiPxu5tyA1A.roa
File: fLVVBwDC46veW27cWiPxu5tyA1A.roa (raw, json)
Hash identifier: T3dnSRkRGypGAUR6U14EppL7+QozNWVyPOVFXCP7qfU=
Subject key identifier: 7C:B5:55:07:00:C2:E3:AB:DE:5B:6E:DC:5A:23:F1:BB:9B:72:03:50
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01A06310F2EE22D7710BBEB62EB6C80D994D
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fLVVBwDC46veW27cWiPxu5tyA1A.roa
Signing time: Wed 02 Sep 2026 17:00:50 +0000
ROA not before: Wed 02 Sep 2026 17:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 45.86.159.0/24 maxlen: 24
85.117.243.0/24 maxlen: 24
185.236.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:10:f2:ee:22:d7:71:0b:be:b6:2e:b6:c8:0d:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Sep 2 17:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb5550700c2e3abde5b6edc5a23f1bb9b720350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:06:92:f3:fc:c8:aa:f3:b2:59:50:ea:11:
8b:e8:c6:3c:da:2e:42:4f:40:92:fa:78:fa:32:92:
98:3a:31:92:b7:7c:5e:ed:ad:40:05:0e:a9:a2:be:
4b:e2:f6:cd:85:f7:b6:84:e7:db:47:06:a6:21:35:
c4:6a:35:74:0d:0e:cf:03:5f:35:4e:b3:9b:82:f9:
c3:a1:d6:54:9e:78:64:96:aa:de:9e:d7:a4:1a:8b:
4c:c5:cd:83:6e:70:2f:29:4b:88:c4:21:43:96:df:
e2:88:d3:16:ea:0b:71:2d:e1:4d:7b:51:1f:a8:6d:
38:62:19:7b:1c:77:b0:81:37:43:50:a7:c1:82:21:
17:74:4e:99:42:8b:63:6d:c4:ad:3f:24:6d:7a:55:
9a:0d:3e:39:17:4c:e6:8f:5a:a8:49:46:68:b0:be:
8f:eb:2f:a0:ec:04:a7:65:7b:41:fc:b8:ba:6d:fb:
23:9e:f3:01:3a:13:23:09:32:8c:34:f0:e3:ee:9e:
5a:7c:fa:63:46:78:49:55:4c:1b:b0:ce:76:2a:4c:
20:31:7d:9b:25:53:28:2f:87:06:a6:9a:f6:98:6d:
79:e4:62:fa:f6:40:fd:cf:3c:4f:3e:6b:fe:7b:7f:
74:ea:ed:b7:1c:c6:e7:a3:1c:52:cf:cf:01:00:14:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:55:07:00:C2:E3:AB:DE:5B:6E:DC:5A:23:F1:BB:9B:72:03:50
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fLVVBwDC46veW27cWiPxu5tyA1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.159.0/24
85.117.243.0/24
185.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c1:8d:e4:98:16:84:74:de:90:7d:50:37:8a:a5:40:e4:b0:
5e:bb:e9:f3:8c:25:b6:dc:3a:0b:3e:86:0a:ee:21:ac:a5:66:
7d:33:6a:14:da:6d:31:a1:f0:bb:9b:90:6d:a6:82:b2:f0:09:
82:2a:13:29:8b:a4:a8:e3:7a:23:a7:f0:8d:90:06:dc:ed:df:
21:2b:14:df:52:c2:fe:76:37:c3:1d:d6:0e:63:26:ce:4a:c3:
9a:f1:8a:7a:1e:07:d9:c0:ef:bc:df:95:7b:53:65:9d:a2:17:
63:7c:68:dd:21:3f:ec:4a:bd:19:02:31:bd:6e:3b:32:f9:c6:
4a:4b:f1:87:23:f2:d0:6e:75:c8:30:52:c4:4c:8d:18:d2:43:
42:46:1a:39:71:3f:45:79:a1:60:9f:21:5d:a1:26:2d:b9:53:
70:45:a5:09:02:3f:88:33:9e:2a:f1:97:14:d1:f5:80:80:76:
5f:2e:e9:a3:c1:cb:15:7b:03:06:f4:9f:38:cb:40:30:18:72:
23:45:b8:33:8b:02:fa:3d:32:c5:c6:4e:02:d2:69:c8:f2:ed:
58:7f:1e:d6:6a:df:30:7c:81:a6:0c:a7:bb:fd:47:60:08:ef:
23:e5:ed:3c:4e:cf:5a:c4:7f:3d:e2:3e:60:5d:15:54:a3:02:
3c:56:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:16 2026 by rpki-client