Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/rnnAz71keB-BLuah7N6N1G9agH4.roa
File: rnnAz71keB-BLuah7N6N1G9agH4.roa (raw, json)
Hash identifier: YW2RVgbWp/8bnP6kIVFSGfq9AAqltAV3oyCYTQOPGxI=
Subject key identifier: AE:79:C0:CF:BD:64:78:1F:81:2E:E6:A1:EC:DE:8D:D4:6F:5A:80:7E
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 019FB869E52A6793C2849B9D1104216366AD
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/rnnAz71keB-BLuah7N6N1G9agH4.roa
Signing time: Fri 31 Jul 2026 13:42:55 +0000
ROA not before: Fri 31 Jul 2026 13:42:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8309
IP address blocks: 45.85.54.0/24 maxlen: 24
2a0e:b884::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:69:e5:2a:67:93:c2:84:9b:9d:11:04:21:63:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jul 31 13:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae79c0cfbd64781f812ee6a1ecde8dd46f5a807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:77:47:42:58:77:32:e7:be:5c:ff:5c:25:
da:60:5e:e0:2b:11:09:d3:eb:a7:ec:7a:53:65:34:
3b:bc:c4:e3:7b:e5:0e:1b:df:0f:92:24:99:c9:de:
51:3a:4e:e7:0a:88:ab:aa:d6:cf:42:d8:60:49:b9:
ae:09:a6:59:7b:c9:e5:cf:d6:fc:e3:d0:5b:32:ff:
e5:a6:18:99:4d:28:4e:19:38:52:22:b2:91:cd:c5:
3e:35:b1:d8:88:3c:30:b5:ee:d6:0a:fe:5d:de:40:
1b:28:35:15:89:1e:00:08:55:d0:74:37:5d:2a:d1:
4e:0e:78:79:7c:c3:58:78:69:11:96:4c:e7:06:91:
5b:0f:e4:e8:54:74:53:e0:88:ec:54:d3:c2:75:f1:
18:a8:94:86:41:73:db:1c:45:af:c0:56:3d:99:97:
a5:9c:08:84:57:8e:b8:58:4a:c4:a2:8f:8f:25:09:
a8:00:dc:6d:ad:c4:3e:b8:68:b3:03:ac:a0:d6:d9:
5a:d0:68:5f:cb:ac:c4:75:2d:34:4a:18:71:12:45:
5b:6f:dd:2a:71:e8:c0:52:d2:b3:2e:1d:b9:1a:8a:
28:da:da:01:37:e4:42:63:f2:e4:3f:da:24:ff:09:
d6:20:b2:68:e5:84:53:42:86:72:2a:55:ae:88:58:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:C0:CF:BD:64:78:1F:81:2E:E6:A1:EC:DE:8D:D4:6F:5A:80:7E
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/rnnAz71keB-BLuah7N6N1G9agH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.54.0/24
IPv6:
2a0e:b884::/31
Signature Algorithm: sha256WithRSAEncryption
91:19:88:ec:d1:55:80:fa:7b:bb:2e:90:dc:ac:2d:b0:ba:36:
60:db:65:46:fc:25:e6:d5:79:b8:72:c4:e6:1d:2f:1c:cf:72:
f5:b2:02:88:79:82:f4:2f:fb:0b:ab:52:e3:3d:fc:8f:50:b0:
d3:c7:23:8d:c9:4a:05:a7:d9:d3:f8:7f:9a:7c:18:2f:85:9d:
67:7b:7b:b7:17:64:12:4a:15:8f:87:d9:da:99:0f:b7:a2:07:
43:c9:1c:04:5a:10:33:26:cd:6d:ee:e4:a9:48:6f:46:62:39:
54:97:bb:36:bb:c9:f4:6d:46:45:d4:87:d7:cc:0f:99:55:41:
3f:c2:02:a3:0e:34:ef:af:93:eb:54:30:2e:82:d1:a3:e0:8d:
2b:22:20:4e:b9:c2:1b:02:b8:2e:c8:46:00:4c:be:c5:36:d9:
8c:c1:83:8e:0b:b9:68:09:e6:70:86:48:e0:52:6a:02:c6:38:
c1:d2:7b:fd:d1:40:22:c3:7d:f0:86:95:00:d4:94:fe:53:a4:
01:be:de:d7:59:b3:7d:75:0c:fb:32:8d:1c:0a:7a:d3:e8:0e:
6a:c1:af:13:c3:84:25:54:5a:60:dd:22:0e:9c:c1:01:7c:02:
21:4f:90:23:7d:10:a9:e2:7f:0b:5d:75:a0:b3:19:c5:16:d8:
c6:fa:55:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 16:10:14 2026 by rpki-client