Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/T811gJjy7XiJUFo4KQMv1DP4J0c.roa
File: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (raw, json)
Hash identifier: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=
Subject key identifier: 4F:CD:75:80:98:F2:ED:78:89:50:5A:38:29:03:2F:D4:33:F8:27:47
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A07FF901AAEF6BD8729719A8D8163DC180
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/T811gJjy7XiJUFo4KQMv1DP4J0c.roa
Signing time: Tue 08 Sep 2026 07:43:40 +0000
ROA not before: Tue 08 Sep 2026 07:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218785
IP address blocks: 45.138.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f9:01:aa:ef:6b:d8:72:97:19:a8:d8:16:3d:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 8 07:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fcd758098f2ed7889505a3829032fd433f82747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:75:08:1f:c2:ca:20:83:c6:a6:d3:7d:a3:
d7:d3:7f:78:64:9f:3e:0e:19:39:14:4a:df:90:cb:
17:c3:70:9f:28:b3:35:86:18:8d:7f:3a:c9:22:53:
47:b8:16:3f:92:16:b6:5a:96:6f:e8:c0:69:f3:ce:
b7:28:b1:14:da:ed:9c:56:a8:01:2a:af:a1:d8:08:
bb:0a:a5:dd:ba:b0:64:79:6a:e8:f8:6d:23:5b:67:
71:65:2f:e9:df:67:3b:f0:83:61:46:0f:1b:58:95:
91:6c:47:0c:96:4d:49:ab:fb:1e:75:90:3e:cf:84:
90:85:14:ab:cb:ca:57:4e:d8:fc:c1:d2:c6:89:b8:
e6:73:13:1b:37:d9:c0:02:16:26:37:75:74:c6:f3:
d4:f1:f0:ab:34:64:83:1d:4f:f1:b7:ef:f9:ef:8f:
e2:e0:41:2e:11:bc:9f:c4:72:da:a9:16:d3:55:18:
7c:ac:30:26:e2:37:ac:0c:17:d4:b6:ee:ad:e3:0b:
e6:14:4f:34:41:ce:ba:b7:1e:43:52:50:82:ac:08:
b4:f4:f2:97:2a:84:2e:f6:0c:94:57:0f:23:e5:4b:
79:2a:c4:5b:4a:7a:77:65:a7:87:75:4c:59:13:58:
0e:00:83:b4:a7:c5:55:3f:c4:cd:cf:39:43:4c:6a:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:75:80:98:F2:ED:78:89:50:5A:38:29:03:2F:D4:33:F8:27:47
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/T811gJjy7XiJUFo4KQMv1DP4J0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0c:13:3c:2f:7b:d6:9d:cc:05:f6:2e:1b:24:f2:81:53:b6:
66:c4:1c:90:ca:0f:ca:05:dd:58:05:a7:0f:b0:54:fc:94:a7:
d6:13:90:3c:20:0f:40:b0:c2:c3:18:7c:bf:0d:3f:7f:8e:6b:
af:51:57:80:8f:1e:99:f3:65:8b:75:64:bc:e9:74:27:f9:36:
b8:d8:ce:b4:8d:22:8b:1a:8d:f3:44:55:9d:51:08:a7:6c:b2:
fb:01:3f:59:85:c2:40:03:84:70:70:7b:46:d8:f8:91:5c:68:
f8:b9:df:ce:4f:29:4d:63:a3:26:07:c7:5b:94:db:03:90:0d:
11:a6:8f:d7:ef:4f:d4:4b:a5:eb:e2:38:48:a3:d9:9f:57:62:
13:94:f2:cb:cd:00:dc:e1:27:ce:85:c8:b3:8e:a9:69:6f:46:
1c:e4:40:02:ed:29:a8:01:ed:77:a4:33:db:e9:8d:37:bd:d2:
d2:c0:bc:56:14:83:44:b0:a4:3f:39:92:3d:77:93:a5:4c:90:
de:ab:97:5e:f8:06:08:97:41:95:90:9c:53:20:45:54:5e:2d:
ca:16:bb:62:ad:4a:b3:60:65:da:26:1f:72:13:e9:da:08:e2:
bd:b3:9b:3e:6e:a6:04:86:64:26:20:60:02:11:f3:fc:af:07:
c8:20:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:44 2026 by rpki-client