Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CApaz3aCUGkJsLGgKmhc3hBHns4.roa
File: CApaz3aCUGkJsLGgKmhc3hBHns4.roa (raw, json)
Hash identifier: mM6cPGeVZyEUUD8Iczj8tlnm+IWUvOJglUPnSxM/XDE=
Subject key identifier: 08:0A:5A:CF:76:82:50:69:09:B0:B1:A0:2A:68:5C:DE:10:47:9E:CE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F4CBC1C0BA301574A7C93C82B8D2FFBAC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CApaz3aCUGkJsLGgKmhc3hBHns4.roa
Signing time: Fri 10 Jul 2026 15:53:44 +0000
ROA not before: Fri 10 Jul 2026 15:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274956
IP address blocks: 45.81.124.0/24 maxlen: 24
45.81.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:bc:1c:0b:a3:01:57:4a:7c:93:c8:2b:8d:2f:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 10 15:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=080a5acf7682506909b0b1a02a685cde10479ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:69:9a:51:90:35:cb:6f:0e:a1:ce:26:f9:
28:f5:b2:67:ab:4a:08:0c:cb:8a:66:22:82:80:fa:
df:02:44:ec:36:e2:c0:90:b9:7f:86:fc:be:ff:2a:
e0:68:b4:fa:72:e0:2e:41:39:d5:f2:2d:9f:9a:cf:
d6:25:7f:38:61:ca:9c:ba:22:0f:a6:48:07:ea:b4:
a6:d5:84:9c:4d:aa:32:6a:a6:66:2d:ce:cf:a3:41:
5b:b4:2d:43:da:13:e7:b2:4f:37:76:df:4f:45:81:
c5:11:49:74:64:2d:9a:73:31:da:53:df:bb:3d:dc:
c2:44:da:e6:67:1f:8b:3a:ac:9b:23:7d:16:e2:42:
0e:ee:64:8f:ff:a2:4b:c1:57:5f:94:fc:de:6d:9e:
1a:7f:02:f3:1b:04:e8:1b:1d:69:c8:cc:8f:f0:99:
13:30:9b:0a:43:01:8c:b8:b8:07:3d:35:71:a8:98:
e5:b6:7a:56:61:32:7a:25:dd:6a:78:6c:6d:ef:09:
e4:f1:ac:75:0d:c0:56:4a:06:d6:42:02:73:61:34:
ae:85:a2:19:a5:6b:08:48:ee:95:bc:e1:f0:5c:ac:
67:db:d0:03:e0:0c:33:f2:95:77:42:44:5e:d8:08:
c4:47:92:1c:8d:68:c3:3b:66:b1:bd:f3:39:77:25:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:5A:CF:76:82:50:69:09:B0:B1:A0:2A:68:5C:DE:10:47:9E:CE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CApaz3aCUGkJsLGgKmhc3hBHns4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.124.0/24
45.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:37:b4:19:f1:37:dc:57:70:3b:6f:19:00:56:8f:d2:b7:55:
65:c2:5d:11:89:1b:11:88:c2:5c:5c:bd:23:a2:76:74:28:58:
45:52:e8:c8:34:e9:0a:38:b8:e4:84:17:46:b3:b4:e9:dc:56:
92:70:91:43:5d:ae:0c:4e:35:bd:14:e7:f7:37:1c:f8:0b:a9:
fd:17:4c:90:9c:c5:67:76:00:fa:bb:9b:0f:d7:07:4f:4e:0b:
c6:db:6d:7f:2c:65:61:2a:b9:c1:b2:02:6b:7e:05:71:22:ee:
f9:a3:b6:74:6e:9a:7a:cc:f9:f2:98:70:18:c0:d4:ba:f5:79:
fe:02:45:1a:77:53:08:60:b6:dc:3c:c9:72:e3:ab:63:3f:ac:
dc:e0:55:e6:db:03:7b:b8:32:59:d6:d1:e8:01:95:6f:d2:53:
c6:3e:1d:65:fd:36:c8:ce:32:6a:02:a5:5a:78:1c:79:80:a1:
0b:8f:c5:7a:34:e6:fe:52:72:94:6f:75:32:b6:42:d4:24:56:
e0:4a:a2:e0:8b:17:42:9f:da:48:17:f9:ed:ee:76:54:32:bc:
e7:22:bb:7f:d6:61:61:17:13:1c:ad:5b:14:54:a8:cd:ce:4e:
53:9f:86:f4:5f:1a:e6:ad:4d:08:cd:44:aa:3f:23:f4:9f:98:
c8:6a:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:37 2026 by rpki-client