Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa
File: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (raw, json)
Hash identifier: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=
Subject key identifier: 23:3F:91:9D:90:78:08:F0:67:40:96:21:7E:9D:0E:02:12:EB:70:C3
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019F89FA0FB8987B99FF2FA32A567114B817
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa
Signing time: Wed 22 Jul 2026 13:18:14 +0000
ROA not before: Wed 22 Jul 2026 13:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 45.14.82.0/24 maxlen: 24
45.85.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:fa:0f:b8:98:7b:99:ff:2f:a3:2a:56:71:14:b8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jul 22 13:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=233f919d907808f0674096217e9d0e0212eb70c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:45:0a:24:e9:a3:7b:63:74:56:e4:62:64:
a7:ba:a2:14:e3:f3:64:a7:39:95:21:4c:c2:9f:da:
84:1d:d9:d0:52:eb:8a:db:5d:d9:4d:fe:45:36:8e:
fb:d1:c8:f3:c9:88:a7:20:ca:ae:4a:bb:03:65:55:
b5:52:d9:65:d5:a0:ac:82:69:7e:42:a4:73:26:d9:
bf:dc:00:14:46:fb:a6:c9:76:5d:3e:bd:d5:bb:86:
34:30:96:dc:e7:72:e6:6f:56:65:8c:41:34:d8:1b:
39:a8:e2:dd:32:05:91:29:22:e9:c2:53:fe:4c:cb:
b1:37:e1:87:7b:ca:ce:d8:b5:6f:f1:f4:0a:88:01:
64:2b:31:4d:89:54:d6:8c:41:50:74:36:99:26:df:
70:82:92:83:46:e8:b3:e7:d3:b1:25:87:11:3f:c1:
c1:e4:44:d6:f8:e4:78:5f:5c:9d:ce:89:4d:3f:9c:
64:55:25:e8:83:07:f2:82:88:b9:93:94:64:33:bd:
0f:5a:ef:b2:f9:32:ed:d9:a1:5d:d7:1d:a4:5b:4e:
37:ff:a7:15:be:a4:43:b5:63:3d:48:64:bd:ae:a0:
c9:bf:2c:62:85:e4:06:5f:a6:9f:b4:ab:a6:ac:4e:
fa:54:cb:66:cd:29:43:cd:82:f1:04:af:40:13:59:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:91:9D:90:78:08:F0:67:40:96:21:7E:9D:0E:02:12:EB:70:C3
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.82.0/24
45.85.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fc:0e:a2:2a:55:28:ab:24:01:72:ab:61:a2:34:14:80:90:
ad:e1:90:d0:ec:cb:88:87:a8:e9:27:46:52:d4:58:27:a9:89:
74:74:2a:20:ed:c0:08:98:3d:60:e9:ae:05:9d:ef:e8:1d:f1:
29:9f:68:bb:59:3e:52:4e:ce:ee:89:39:00:33:74:57:3f:31:
f9:bf:32:0e:c0:23:c1:cf:b5:b6:49:16:70:06:31:89:fb:70:
19:f7:98:1b:5d:1e:6b:db:19:74:ac:0b:d2:2b:de:aa:ca:32:
ce:9b:83:2c:b2:88:78:cc:3f:ad:4d:45:75:0c:8a:0f:c4:6d:
a7:21:84:a6:f2:63:13:d3:0d:48:0d:5f:fb:1a:27:ab:45:d7:
6f:f9:52:72:89:f9:5e:ed:55:bd:bf:6f:91:03:d5:7c:87:36:
98:4f:4a:af:43:09:65:18:29:57:17:01:5c:10:14:7a:94:3e:
20:d3:8f:5c:3f:f4:0a:62:a4:b5:61:ff:e2:b9:4e:95:75:77:
5a:a2:6f:6a:4f:ab:53:ba:44:93:0c:7b:29:c9:2c:88:34:5d:
44:0f:7e:c2:a4:35:09:3a:66:24:b9:6a:dd:1f:a7:00:70:39:
fa:94:22:bd:4a:15:2f:5e:35:6b:eb:79:f0:35:49:98:0a:ac:
da:fb:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:59 2026 by rpki-client