Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/SMEpFUx1Ia1bmQYy_jLGjX9qLeM.roa
File: SMEpFUx1Ia1bmQYy_jLGjX9qLeM.roa (raw, json)
Hash identifier: 4tNwPRdbIQsRn+L0rU7kJqeUM9vgVw2CbqlLZSq0/38=
Subject key identifier: 48:C1:29:15:4C:75:21:AD:5B:99:06:32:FE:32:C6:8D:7F:6A:2D:E3
Certificate issuer: /CN=79df640fa7197f2bda36cdcd6bb002f118a1f9b5
Certificate serial: 019F236832E327A40A36AE2BC3AA45A2BBEF
Authority key identifier: 79:DF:64:0F:A7:19:7F:2B:DA:36:CD:CD:6B:B0:02:F1:18:A1:F9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/SMEpFUx1Ia1bmQYy_jLGjX9qLeM.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8495
IP address blocks: 45.135.106.0/24 maxlen: 24
2a0e:6b40:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:e3:27:a4:0a:36:ae:2b:c3:aa:45:a2:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df640fa7197f2bda36cdcd6bb002f118a1f9b5
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c129154c7521ad5b990632fe32c68d7f6a2de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:61:f1:c7:13:60:50:fd:c1:b0:cf:22:ba:
77:0e:10:83:c3:0f:4c:cc:5e:39:aa:b0:c0:8a:f7:
28:ad:de:41:42:cb:0f:ac:fd:3a:ae:b0:4c:63:b3:
e4:b0:96:6e:c5:29:7b:aa:43:fd:e9:5f:4d:dd:69:
be:17:6f:15:43:e7:34:9d:61:a9:8d:d0:ae:00:ae:
84:5d:79:36:a1:88:94:f4:5c:c8:d8:ca:35:2d:61:
b4:e5:0d:3c:78:3d:fe:85:4c:68:60:ad:c8:eb:37:
94:12:ef:e7:60:30:64:b2:a8:29:68:8d:22:65:9a:
35:41:85:33:e5:84:5a:84:0a:ae:ba:6c:0c:70:e9:
fb:fe:71:3e:87:69:5a:92:42:5d:60:b0:bd:c6:2d:
f6:0a:4e:cc:5e:b6:18:28:b5:f1:26:18:44:49:10:
67:d9:32:4c:01:30:43:d4:c4:3b:eb:86:07:40:60:
bd:66:19:78:fc:80:80:b8:45:cf:b3:c0:9a:1b:c2:
1b:48:7a:2e:5c:ab:b3:0f:e9:f2:e8:49:bf:bb:e0:
ea:e3:44:20:e9:e5:5f:2b:90:a1:9a:a9:7d:ad:5f:
ff:cf:a2:b1:e6:bf:11:11:72:b7:e0:8f:e0:6e:12:
14:f9:0c:8f:09:fe:b2:48:a3:f7:d8:17:0c:cc:0f:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:29:15:4C:75:21:AD:5B:99:06:32:FE:32:C6:8D:7F:6A:2D:E3
X509v3 Authority Key Identifier:
keyid:79:DF:64:0F:A7:19:7F:2B:DA:36:CD:CD:6B:B0:02:F1:18:A1:F9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9kD6cZfyvaNs3Na7AC8Rih-bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/SMEpFUx1Ia1bmQYy_jLGjX9qLeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/ed9kD6cZfyvaNs3Na7AC8Rih-bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.106.0/24
IPv6:
2a0e:6b40:20::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c2:f8:68:1a:e1:82:10:ff:e8:2f:c1:26:72:88:2c:06:0b:
0c:9e:6c:53:00:b6:1e:62:37:18:ea:31:d0:82:82:fd:bb:02:
4b:4e:77:77:e5:c9:11:98:08:9b:8f:01:11:cf:17:67:d0:7b:
ca:29:6a:5e:41:48:6f:ab:16:02:6d:cf:08:89:0f:2c:87:30:
48:1f:09:cd:64:1d:36:99:f7:ae:15:6d:8a:ef:81:09:2d:11:
1e:57:38:07:d7:5e:e4:25:98:0b:e8:01:9e:66:7d:83:b9:48:
a6:b9:31:34:f9:31:07:b2:13:01:94:52:e1:51:5c:fe:60:ca:
77:f4:10:38:cd:8f:c8:91:c5:9f:8e:47:dd:49:15:9d:80:56:
08:54:be:55:2e:e2:b9:ec:e6:1f:04:0f:79:f7:09:4f:45:a7:
3a:eb:52:85:02:63:49:c8:14:c4:90:79:1a:a6:e3:77:80:0a:
34:f6:c0:da:50:3b:06:c7:c3:45:c0:f9:23:ae:cd:86:19:a7:
db:1f:be:77:18:e0:6e:46:26:fa:e9:ce:62:0e:3d:0c:ea:34:
74:4b:a1:80:cd:fb:77:29:e0:32:9d:5c:38:27:cb:b4:82:87:
42:88:38:1d:60:09:45:3f:6a:9f:2e:ff:b1:c0:bc:d1:94:3d:
ba:58:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:34 2026 by rpki-client