Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/UbteF0EGCdi6gfORL30dQO-_S4U.roa
File: UbteF0EGCdi6gfORL30dQO-_S4U.roa (raw, json)
Hash identifier: ackfEEjxOVy94oJBRuk+2oKVVk+t5G4fWLvdaqS5jFw=
Subject key identifier: 51:BB:5E:17:41:06:09:D8:BA:81:F3:91:2F:7D:1D:40:EF:BF:4B:85
Certificate issuer: /CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Certificate serial: 019F236920E5DF7E61F8A11BED7AD40A0741
Authority key identifier: 46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/UbteF0EGCdi6gfORL30dQO-_S4U.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205122
IP address blocks: 45.92.52.0/22 maxlen: 24
45.92.52.0/24 maxlen: 24
45.92.53.0/24 maxlen: 24
45.92.54.0/24 maxlen: 24
2a0a:f742::/32 maxlen: 48
2a0a:f742:12::/48 maxlen: 48
2a0a:f742:13::/48 maxlen: 48
2a0a:f742:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:e5:df:7e:61:f8:a1:1b:ed:7a:d4:0a:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51bb5e17410609d8ba81f3912f7d1d40efbf4b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:bd:8a:b0:d4:3c:f2:d7:88:de:ce:a5:4c:
79:e5:98:fd:fb:fc:2a:d9:df:a0:6f:fa:db:17:ca:
76:c5:bc:50:0b:97:86:56:27:e6:be:c5:e3:ab:aa:
04:82:5f:32:2a:79:2b:19:2e:8f:f5:51:f6:f6:9a:
9b:67:e7:ba:7c:cd:62:27:b5:c9:19:a6:72:a6:6b:
7b:83:d0:59:1b:de:6b:c4:ac:af:15:b3:39:c3:3d:
5e:b8:95:96:80:f0:9a:f8:28:7e:a4:3b:3f:2a:e2:
95:36:86:41:d9:32:0d:f7:fd:a8:b2:dc:58:59:ca:
b0:c2:c1:82:3d:4f:8b:27:06:9a:48:54:fc:c3:9e:
c3:e1:56:0d:32:65:fa:da:a4:c6:9d:e7:97:9c:a4:
72:9b:64:7a:73:b8:c3:a6:ad:3f:44:29:b5:66:4b:
1d:67:22:3d:a6:2b:7f:08:c1:de:89:65:f5:83:25:
25:fb:a2:1b:2d:9a:76:1f:b6:a7:48:4f:0a:0f:eb:
2a:e9:e2:f1:67:bd:0b:4c:27:18:6c:7e:5c:10:a8:
a1:07:3d:87:23:0f:b4:c2:a7:52:e8:b7:26:93:79:
f6:55:ba:71:2d:1f:2f:9d:e7:88:fe:b2:63:d7:24:
ad:ef:7c:be:5d:75:69:22:4f:88:2c:8c:0e:ec:50:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:5E:17:41:06:09:D8:BA:81:F3:91:2F:7D:1D:40:EF:BF:4B:85
X509v3 Authority Key Identifier:
keyid:46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/UbteF0EGCdi6gfORL30dQO-_S4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.52.0/22
IPv6:
2a0a:f742::/32
Signature Algorithm: sha256WithRSAEncryption
1b:8d:b4:9d:f4:a0:8c:e2:9b:33:9d:30:28:e1:a7:64:e0:44:
7e:4b:9b:15:45:8b:92:5b:e8:05:8e:1f:cd:f8:62:e9:86:dd:
92:86:6c:7f:5a:95:2c:e4:49:3f:9c:09:91:80:ce:8e:fa:0a:
28:f4:d6:c9:68:9c:89:44:14:91:5e:94:4f:8a:f9:ee:24:b6:
e4:5b:5d:1a:1c:fe:8a:a7:0a:5e:77:1f:71:9c:1a:bc:be:0e:
61:09:38:b5:d9:0e:75:21:43:b9:ad:b7:27:2f:b4:54:1b:6a:
6b:e2:b7:fb:b8:97:86:ff:ab:18:3f:42:ad:ff:e5:b7:0f:98:
8a:6e:0d:9c:46:29:22:84:bb:8a:79:f2:50:85:bd:ec:33:f7:
78:a2:9c:1c:2f:b1:72:fd:98:e6:43:b0:9f:a5:21:3a:84:d4:
8d:c0:6f:10:e7:ac:73:d3:f4:58:ac:9a:25:79:cb:29:a5:0d:
b8:ed:b0:0b:f2:7f:a9:29:92:3a:8c:30:1b:81:f5:cb:3d:41:
bb:e6:99:49:1a:1d:bc:62:b7:10:e3:7d:a7:5f:7f:20:6e:f3:
f8:0c:d8:71:bb:99:80:92:94:03:a0:47:b8:f7:d9:75:3a:b5:
af:57:cd:0b:ae:d1:20:5f:5a:29:fd:c2:bb:55:03:c9:6e:fa:
5f:d1:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:48 2026 by rpki-client