Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa
File: 0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa (raw, json)
Hash identifier: rFJp94wINDC3ecjBHnwWODJLBayKpyALDaZAihUD5C4=
Subject key identifier: D2:74:39:1E:BA:52:7E:68:B4:B7:59:60:7F:32:B0:1B:81:84:10:70
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01A0A2928AB843255D6E3409F86A1C9A35AD
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa
Signing time: Tue 15 Sep 2026 00:58:27 +0000
ROA not before: Tue 15 Sep 2026 00:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219371
IP address blocks: 45.132.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:92:8a:b8:43:25:5d:6e:34:09:f8:6a:1c:9a:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Sep 15 00:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d274391eba527e68b4b759607f32b01b81841070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:a7:39:43:a9:b4:1f:5f:62:c7:4d:75:75:
cd:f5:81:ba:9d:31:c0:13:26:5a:11:ad:16:9b:6f:
a7:5b:37:9d:89:ba:b8:a7:f6:38:42:41:4f:e2:9d:
c9:61:7c:ae:26:f5:1d:13:3f:f0:5d:18:32:2d:e8:
43:b1:c4:87:e6:92:0d:df:cc:b7:8c:f5:ea:70:2b:
66:24:f6:9e:17:e9:4e:6b:94:03:89:3d:0b:09:ab:
7c:f1:e6:c0:67:bd:57:c2:83:73:65:7e:bb:cd:6b:
d1:42:be:34:1c:cf:27:1c:da:9f:b1:06:70:2d:1f:
71:30:46:13:8e:8f:c7:46:18:eb:ae:56:3d:d3:d9:
0f:00:ae:ad:19:a1:9f:fe:d6:9a:82:a3:68:20:b3:
a3:f1:0c:b7:0d:70:7c:86:33:2e:35:9b:85:d3:fb:
f9:f3:00:35:04:22:b4:36:4a:4c:03:9b:57:7b:0f:
61:0b:29:71:bb:24:b4:7f:3f:31:82:8f:c7:0a:19:
e9:eb:ee:ac:8a:58:33:38:65:d8:73:0b:c9:63:3b:
6c:28:f7:18:70:a9:2b:92:6a:74:7f:e4:5a:77:c4:
86:0a:b6:4a:c5:4a:11:67:77:59:47:18:bf:5a:ab:
27:eb:f6:16:26:87:0a:61:1e:c0:ce:79:b7:cd:97:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:39:1E:BA:52:7E:68:B4:B7:59:60:7F:32:B0:1B:81:84:10:70
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:0e:f0:85:98:26:44:d8:bf:37:60:22:17:8f:a8:25:22:c1:
e8:7a:b0:82:8f:c1:f5:f6:03:39:f7:9b:39:0e:36:da:12:5f:
d1:70:06:57:73:2b:00:67:1f:9f:1f:7b:3a:73:03:6e:6c:c4:
64:60:cc:0c:0d:f6:5e:00:2d:55:0f:29:40:b4:78:47:28:70:
12:e2:e6:55:cb:01:ed:09:08:80:87:a1:d8:65:2c:40:83:88:
c2:17:82:97:61:75:30:e3:94:64:89:4e:8b:f3:68:d8:02:a4:
24:c5:40:75:a8:12:d9:e9:75:ee:a5:d9:47:46:6a:b5:38:f9:
e2:9f:3f:7b:e6:c6:9c:45:f0:5f:24:3d:62:57:4f:49:a4:31:
5a:1b:91:73:9c:f1:93:bd:b3:65:b4:56:8b:f3:d1:57:ee:f7:
a5:9f:85:5e:ad:8d:28:c1:ca:9f:06:67:f9:3f:cd:f9:75:57:
90:5d:df:99:0b:6d:6a:6b:fb:a0:e8:35:a4:53:cb:11:e2:63:
da:02:68:f5:ba:67:ce:b4:a8:23:fe:1a:8c:0f:b0:df:07:e0:
d4:47:04:ad:a6:2c:86:9b:8b:34:49:a9:53:f4:69:a8:95:0e:
c8:76:da:68:e0:26:e5:01:41:a5:98:1f:0e:38:3a:19:ef:ca:
28:90:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:48:48 2026 by rpki-client