Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/_-cN-sAbrViLwmycVeqjqlvUMm4.roa
File: _-cN-sAbrViLwmycVeqjqlvUMm4.roa (raw, json)
Hash identifier: noKzUYWAtrL71gb87r5bxvuWL2VHpxYOGDrkOQNEG/g=
Subject key identifier: FF:E7:0D:FA:C0:1B:AD:58:8B:C2:6C:9C:55:EA:A3:AA:5B:D4:32:6E
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019CE3EBDAC04AFA68A6B5C4E2ACCAC1A42F
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/_-cN-sAbrViLwmycVeqjqlvUMm4.roa
Signing time: Thu 12 Mar 2026 21:20:10 +0000
ROA not before: Thu 12 Mar 2026 21:20:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208770
IP address blocks: 45.136.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:eb:da:c0:4a:fa:68:a6:b5:c4:e2:ac:ca:c1:a4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Mar 12 21:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe70dfac01bad588bc26c9c55eaa3aa5bd4326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:47:38:54:5c:01:5a:42:23:3d:d2:d6:80:
b3:45:e6:74:28:03:aa:c7:95:a0:a1:9f:ea:1e:29:
08:83:94:d5:e5:68:7b:5b:d9:34:52:46:8c:da:3f:
72:a3:6f:15:28:bf:01:5f:c0:5b:5c:98:da:e6:c2:
27:46:9d:b6:d0:2c:8e:02:96:6f:ec:97:62:e5:c5:
24:8d:fd:a2:95:a2:71:fa:72:89:45:d8:42:a0:4b:
df:73:1f:8c:af:b5:e8:aa:2e:e5:e7:3c:b7:6e:01:
ac:0d:a7:57:7d:8c:9f:90:c1:77:5f:b3:cb:2c:97:
47:f8:db:79:35:68:c9:88:71:3e:ef:33:81:93:91:
91:74:e4:dc:37:1c:2b:1b:d6:69:29:e8:fc:a1:4c:
b1:92:2f:d5:71:12:9a:16:0e:30:2e:29:40:2a:2c:
2a:c7:ce:a4:09:c6:c8:d4:60:da:11:f6:3e:99:a1:
cc:b9:c7:d0:2e:a1:35:dd:41:c4:07:e4:51:11:8e:
81:60:17:0a:01:b1:c5:85:29:a5:21:5d:75:ef:c6:
5a:65:87:49:9f:53:76:ee:b3:31:1a:19:e5:d4:53:
d1:06:c1:e6:9d:8d:8f:17:32:96:b0:88:7b:5b:36:
7e:9b:01:5f:d9:f5:a5:4f:97:48:ac:53:df:df:fe:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:0D:FA:C0:1B:AD:58:8B:C2:6C:9C:55:EA:A3:AA:5B:D4:32:6E
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/_-cN-sAbrViLwmycVeqjqlvUMm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.44.0/22
Signature Algorithm: sha256WithRSAEncryption
29:7b:6f:74:41:1c:d2:f8:85:4e:2b:8a:f6:0d:66:db:2c:c8:
3a:9d:0c:ba:7e:a2:45:93:1e:84:5d:38:58:25:59:7a:16:13:
ba:91:66:4d:5e:7b:ae:2b:6b:e5:fb:00:16:55:ba:84:5c:dd:
0d:fa:39:0d:4d:2a:62:df:d1:f1:96:24:c0:17:c9:5f:2f:77:
35:5b:e3:a9:7a:a7:fb:e7:cc:2a:0f:f5:73:13:1e:1c:94:19:
06:80:07:68:f7:9e:8c:00:45:6e:e6:08:87:94:f2:0e:26:96:
70:1b:45:92:69:0e:ec:20:b0:b9:d6:f5:40:7b:bb:71:91:db:
ea:09:4c:eb:5f:d2:e8:8e:ab:ed:a6:cc:13:3a:67:32:c9:83:
ae:03:4a:5e:4d:d7:e5:f4:ca:7a:a5:2d:1c:dd:62:c5:ce:04:
9b:4b:3a:c6:f5:99:a7:32:a9:18:fe:e2:60:e6:e1:bf:94:5d:
97:33:01:70:52:86:9c:dd:fd:3c:78:56:83:89:34:c5:fe:72:
0a:cf:a9:cd:f4:1a:d4:07:0c:79:79:36:c3:aa:b8:42:88:51:
1b:11:8e:53:ef:a3:39:90:7e:d7:af:19:d7:a7:df:37:eb:a9:
fe:2f:70:93:d6:17:2f:fa:44:e1:52:93:c6:65:00:df:ad:ed:
2c:8a:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:38 2026 by rpki-client