Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/Syx-W1nauzr5Dpxe6peULgXAAtY.roa
File: Syx-W1nauzr5Dpxe6peULgXAAtY.roa (raw, json)
Hash identifier: TRbEL2oQIoKttvvoFuUorq6cRO4At0CjTJYaz/OskZc=
Subject key identifier: 4B:2C:7E:5B:59:DA:BB:3A:F9:0E:9C:5E:EA:97:94:2E:05:C0:02:D6
Certificate issuer: /CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Certificate serial: 019F236919F8C4ECC2282B5F2DF4D46C7EFD
Authority key identifier: 23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/Syx-W1nauzr5Dpxe6peULgXAAtY.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56534
IP address blocks: 45.140.76.0/23 maxlen: 23
45.140.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:f8:c4:ec:c2:28:2b:5f:2d:f4:d4:6c:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23bf79147cf0a86cef587add0e66a8f72ec726b4
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b2c7e5b59dabb3af90e9c5eea97942e05c002d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:a2:8c:f9:f2:04:de:96:87:fb:a4:e3:c4:
f6:17:7e:47:27:dc:e1:c8:9c:45:87:0f:d9:fc:43:
ed:5c:a9:80:52:d3:43:12:52:02:eb:46:ba:6c:22:
29:c6:a8:f6:fe:35:63:52:6a:6d:b4:14:d2:50:34:
da:c2:9c:13:e5:49:6d:e0:fa:76:e0:36:c3:75:45:
7b:01:0b:ea:43:11:f8:b6:27:1a:3d:da:dd:f0:61:
6b:17:a9:b0:86:1b:f3:02:1e:a2:47:be:5e:32:07:
41:dd:06:5e:5e:f7:d9:35:04:98:12:e1:3c:83:99:
08:73:60:6d:6e:4d:85:23:0e:6d:1e:0b:a1:e6:cd:
ea:67:93:96:e6:9e:84:41:7e:ca:22:68:61:6b:bc:
4d:54:20:8e:b9:a5:29:13:9e:ae:f9:08:ad:da:6b:
6b:f2:3a:77:56:74:34:16:9b:d7:6a:2c:4a:72:35:
eb:ea:a2:a7:a1:55:f6:7c:95:89:08:38:e3:34:b1:
84:14:77:51:7b:9c:1e:31:b9:bb:7d:2f:59:ac:d1:
7e:9c:e1:a7:2d:ff:ab:0b:f3:a9:0e:97:5a:8c:91:
04:8e:e4:8f:16:c8:20:23:ec:3e:f6:1c:23:e2:7b:
11:63:ea:2b:6f:5e:89:f4:73:35:c5:d2:3c:fe:6f:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:7E:5B:59:DA:BB:3A:F9:0E:9C:5E:EA:97:94:2E:05:C0:02:D6
X509v3 Authority Key Identifier:
keyid:23:BF:79:14:7C:F0:A8:6C:EF:58:7A:DD:0E:66:A8:F7:2E:C7:26:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I795FHzwqGzvWHrdDmao9y7HJrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/Syx-W1nauzr5Dpxe6peULgXAAtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/I795FHzwqGzvWHrdDmao9y7HJrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
32:41:fc:58:7d:5d:32:7a:c1:d4:df:21:d7:02:e2:53:d4:e6:
6f:77:d2:db:e8:b3:17:67:64:ab:39:d6:45:31:bc:a8:9f:a2:
05:da:0d:c9:49:0b:ad:43:7a:69:57:fc:87:8a:ad:1e:01:76:
04:ec:85:fc:4f:a3:2c:af:77:21:31:4b:33:7e:e7:10:c2:cc:
e5:d3:1d:6d:ee:75:ae:db:1a:ad:f0:6f:b6:4d:74:f9:1e:a9:
8d:1c:67:dc:ce:d1:0f:08:e9:f1:da:c3:0b:f7:60:6b:5c:35:
70:78:44:54:ec:b7:56:de:e7:50:9e:51:ff:13:72:b9:46:79:
f6:ff:ba:4b:8a:6b:94:a7:eb:15:c9:a6:8d:51:86:5c:b2:72:
b9:3a:81:ed:b5:b7:93:19:87:f4:08:9d:54:40:1b:87:08:b1:
8b:f9:63:9e:27:50:74:a5:9f:df:58:5b:70:09:7c:28:e8:5d:
c6:47:71:10:8c:6b:30:54:5a:d7:72:ad:34:2e:fc:87:e5:16:
06:9f:e0:83:12:8a:48:a1:be:c8:3b:6c:59:85:9a:e9:5d:5a:
8d:ef:65:13:13:62:5f:ed:53:56:b9:11:c1:3d:6a:0b:5a:48:
ad:02:d8:7d:74:f4:28:a6:52:fe:d0:3f:5a:81:ea:58:a6:f8:
2e:b9:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:50 2026 by rpki-client