Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/ehpExJC9Fy7cGkFnshwWwx0m6bM.roa
File: ehpExJC9Fy7cGkFnshwWwx0m6bM.roa (raw, json)
Hash identifier: fqiaqRJe2gzjR6VLCnamnx4anMDhZxWn+EgaHFH1YMM=
Subject key identifier: 7A:1A:44:C4:90:BD:17:2E:DC:1A:41:67:B2:1C:16:C3:1D:26:E9:B3
Certificate issuer: /CN=3905f66ad4aeee3d6998b1d6e478c17f3df15315
Certificate serial: 019D31205C5370B6E917D2105F60785D017D
Authority key identifier: 39:05:F6:6A:D4:AE:EE:3D:69:98:B1:D6:E4:78:C1:7F:3D:F1:53:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQX2atSu7j1pmLHW5HjBfz3xUxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/ehpExJC9Fy7cGkFnshwWwx0m6bM.roa
Signing time: Fri 27 Mar 2026 21:08:17 +0000
ROA not before: Fri 27 Mar 2026 21:08:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199792
IP address blocks: 45.82.56.0/24 maxlen: 24
45.146.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/OQX2atSu7j1pmLHW5HjBfz3xUxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/OQX2atSu7j1pmLHW5HjBfz3xUxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQX2atSu7j1pmLHW5HjBfz3xUxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:20:5c:53:70:b6:e9:17:d2:10:5f:60:78:5d:01:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905f66ad4aeee3d6998b1d6e478c17f3df15315
Validity
Not Before: Mar 27 21:08:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a1a44c490bd172edc1a4167b21c16c31d26e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:ae:5e:f1:b8:20:72:e1:62:45:83:fe:a9:
08:b3:9f:cb:b1:88:73:1a:3f:0b:97:94:72:c8:4b:
94:d5:61:73:71:a4:3f:39:d8:58:60:81:ca:f0:f1:
f2:bc:71:c7:42:53:e1:28:9a:66:c4:67:87:3b:c8:
3d:bc:24:dc:ea:6d:48:ba:d9:32:cc:17:10:e1:3f:
11:3d:0f:60:f0:ad:2b:41:4a:c3:16:d0:b3:89:a1:
44:3b:1f:d5:3d:d6:c2:c5:04:b9:24:9a:d8:07:1c:
7d:da:3a:90:3d:eb:24:e6:44:d9:12:a2:5b:3b:8f:
d0:eb:c3:11:73:52:3e:20:cf:7f:fe:12:5d:6b:93:
c5:99:cd:f9:0d:b9:fe:c0:ff:e5:3d:29:f1:67:7d:
20:ac:ee:45:19:1f:c5:6f:44:1d:08:6b:ff:b8:1d:
d0:e5:ca:2f:ac:71:49:ff:d5:6c:68:58:ff:60:f2:
51:2a:07:40:b0:1d:2a:45:d6:74:0a:f1:7e:26:f1:
e5:df:33:b5:47:df:76:cd:1b:56:98:0c:65:38:88:
1f:c8:b7:50:e3:4f:44:c8:d6:5a:3f:29:a6:7f:82:
fe:cb:93:5c:f5:23:60:8e:fb:54:fa:20:0e:2f:e3:
20:35:12:34:52:12:06:07:9b:74:0c:e5:70:61:ad:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:44:C4:90:BD:17:2E:DC:1A:41:67:B2:1C:16:C3:1D:26:E9:B3
X509v3 Authority Key Identifier:
keyid:39:05:F6:6A:D4:AE:EE:3D:69:98:B1:D6:E4:78:C1:7F:3D:F1:53:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQX2atSu7j1pmLHW5HjBfz3xUxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/ehpExJC9Fy7cGkFnshwWwx0m6bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f1c18d-2335-411c-aaeb-eedd8d9086d0/1/OQX2atSu7j1pmLHW5HjBfz3xUxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.56.0/24
45.146.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:84:4f:79:13:12:e0:e6:8a:8c:5d:fa:1c:c0:18:eb:8e:a6:
a5:28:dc:66:b6:b1:0f:16:7e:c5:89:e7:96:c4:9c:c3:a4:de:
92:c8:86:23:0c:eb:c9:52:c8:cb:eb:d5:77:32:4e:56:a8:61:
0a:2e:96:d9:56:33:25:04:2b:b9:f8:00:19:a0:ae:12:04:78:
19:15:1f:4a:ff:ac:e1:51:c4:16:df:89:aa:1d:9e:1d:f0:38:
d2:e0:36:94:b8:b0:09:f0:1d:48:ce:e3:64:bd:81:43:a8:67:
d1:17:57:4f:8c:9d:45:e7:68:cf:54:a8:e5:81:c7:5c:56:67:
37:c6:52:f7:e8:73:7b:0f:92:8a:a4:6d:47:b5:22:31:cb:f9:
89:b7:8b:d1:fb:a7:fa:fe:63:9c:5a:81:89:9e:d6:39:22:f9:
ab:f9:93:56:4c:56:6d:ff:de:e5:f8:52:df:84:48:1d:9e:66:
67:5e:f4:e6:9b:3e:56:73:1a:66:b9:2e:05:ca:ab:a6:7c:d6:
6f:f4:15:eb:d5:28:e7:ee:de:60:26:71:f0:9a:f1:39:d7:a3:
f8:e2:52:65:cc:c4:19:97:ec:b6:ae:ad:12:b1:96:dd:3b:45:
db:09:f5:15:0e:53:de:2e:9b:09:85:15:9f:93:a4:fc:f1:d6:
ee:b5:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:09 2026 by rpki-client