Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/NGpHbF0qELe-yypRyZG8QYDDkQ8.roa
File: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (raw, json)
Hash identifier: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=
Subject key identifier: 34:6A:47:6C:5D:2A:10:B7:BE:CB:2A:51:C9:91:BC:41:80:C3:91:0F
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019F269D7EB0A335303251D8AAA93305F0B1
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/NGpHbF0qELe-yypRyZG8QYDDkQ8.roa
Signing time: Fri 03 Jul 2026 06:14:43 +0000
ROA not before: Fri 03 Jul 2026 06:14:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.129.240.0/23 maxlen: 24
45.129.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:9d:7e:b0:a3:35:30:32:51:d8:aa:a9:33:05:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jul 3 06:14:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=346a476c5d2a10b7becb2a51c991bc4180c3910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:4f:83:f8:48:25:da:c5:1e:a6:9f:01:2b:
2d:fc:47:33:86:42:17:49:eb:9f:e8:cc:e6:72:ae:
6d:44:f4:bd:e4:e7:aa:7f:20:b5:48:18:d3:7e:e5:
07:6c:35:ce:cf:4b:30:a1:b4:e5:27:40:08:86:c3:
16:68:d4:b1:a8:ae:86:7d:43:6e:b1:38:12:be:69:
60:ba:0d:11:de:df:ed:65:4c:47:59:0e:8a:88:18:
29:14:b9:7d:90:80:6b:75:d6:6e:c1:6b:fa:94:f8:
4a:5f:8e:64:69:cc:ef:92:f4:e9:04:d0:ee:7d:50:
53:1d:e1:62:47:0e:2d:f0:d7:74:2a:59:77:ce:78:
58:0f:e3:de:b9:c5:72:bd:7f:83:8c:39:c4:30:82:
d0:ec:c4:a7:2c:f9:69:ae:a0:58:f2:21:60:30:a0:
f3:4d:0f:d9:d3:8b:6d:63:8c:79:66:5f:d1:a4:b4:
49:d0:66:a4:59:2d:cc:60:2c:0d:22:ed:a7:43:82:
d1:bc:67:89:d5:e1:9f:22:1d:07:c3:eb:8a:fb:bd:
db:4a:cb:3c:71:ab:89:b9:b3:a1:a8:06:b1:53:34:
b2:50:9c:2e:41:cc:c5:05:aa:63:ea:51:94:9c:cb:
11:c6:2b:17:4b:46:fd:2a:5f:da:eb:29:44:cd:66:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:47:6C:5D:2A:10:B7:BE:CB:2A:51:C9:91:BC:41:80:C3:91:0F
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/NGpHbF0qELe-yypRyZG8QYDDkQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.240.0-45.129.242.255
Signature Algorithm: sha256WithRSAEncryption
63:6d:fd:b0:86:0d:9c:73:72:d8:2b:df:af:61:0f:34:ec:bd:
c4:39:d9:8d:8e:24:63:c7:0a:21:72:a9:a5:36:de:93:73:11:
a9:f2:40:bd:26:7c:13:51:8e:0b:05:72:cd:d7:2b:18:8e:1f:
e6:d7:ca:53:f1:f8:da:b6:c8:0e:60:6b:0b:87:29:0c:97:89:
4a:2d:72:fe:c0:ea:75:d7:76:7c:e5:78:43:ed:84:f1:45:53:
5e:74:80:ef:f6:89:0f:3b:4b:13:ae:bd:42:3a:cd:67:b6:35:
64:47:52:ee:5f:e6:b5:99:c5:8d:d3:60:4c:a7:f4:5f:5a:07:
79:8c:4b:40:ab:39:2b:a7:32:2a:fe:72:bb:71:08:b8:ef:d5:
ce:ed:7d:46:f2:6e:bf:a2:dc:79:86:bb:25:b1:aa:a6:9a:c6:
64:2f:fe:7b:7b:ca:6d:61:29:4d:d1:7d:eb:cb:9d:75:57:19:
d1:e6:d6:3f:8e:cb:2a:4f:67:49:8c:83:a4:4d:01:90:41:10:
a3:a3:df:b0:8e:67:04:59:ad:73:cb:5e:06:1f:8c:43:18:53:
6e:8a:79:89:56:75:70:81:0f:22:72:a0:d8:90:8b:5c:6d:79:
c0:38:70:8f:62:13:5c:c9:4c:5b:d9:a8:38:f5:f3:dd:71:07:
91:c2:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:46 2026 by rpki-client