Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/d4-TFbz-oqeLLp6bwikLyk7BouY.roa
File: d4-TFbz-oqeLLp6bwikLyk7BouY.roa (raw, json)
Hash identifier: X7KhtR+I1OQBZN8LT6vTNUjdXPKB17DVohSBLz6YYbs=
Subject key identifier: 77:8F:93:15:BC:FE:A2:A7:8B:2E:9E:9B:C2:29:0B:CA:4E:C1:A2:E6
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019E1C2DAF4D012744278E6A36C51A9295B1
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/d4-TFbz-oqeLLp6bwikLyk7BouY.roa
Signing time: Tue 12 May 2026 12:33:36 +0000
ROA not before: Tue 12 May 2026 12:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208233
IP address blocks: 45.130.36.0/24 maxlen: 24
45.130.37.0/24 maxlen: 24
45.130.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:2d:af:4d:01:27:44:27:8e:6a:36:c5:1a:92:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: May 12 12:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=778f9315bcfea2a78b2e9e9bc2290bca4ec1a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:eb:9b:f8:42:c7:48:39:97:7a:8b:05:f1:da:
ae:88:bd:64:1a:aa:bb:44:bd:f4:17:44:72:3b:64:
32:58:13:82:05:d9:dc:40:a8:0c:93:51:cb:4c:b3:
93:0f:8b:f8:f2:a4:97:12:69:34:c5:09:84:e1:28:
98:f7:c6:a7:d0:64:e9:e8:db:5a:09:87:72:69:14:
98:ef:cc:ed:b3:d9:92:c5:68:35:ed:71:34:75:b2:
f8:45:c2:d4:16:51:f0:27:93:08:82:de:ef:ee:d8:
20:38:63:2d:f9:33:a9:31:d6:b3:2c:e6:2b:a7:62:
ab:07:5d:c8:3f:28:bb:f5:6c:3c:00:de:36:ab:cb:
96:02:cb:d8:86:15:cb:81:a7:af:9a:2c:75:df:b6:
91:2a:7b:b2:2c:7a:75:e6:d4:3c:d2:ae:f4:fd:9c:
e4:54:d3:85:d2:b4:70:ec:cd:d7:d4:57:8b:19:41:
76:62:e0:e0:7c:43:3d:48:2d:99:0f:91:7e:61:0c:
5a:b4:84:12:ad:e8:a5:85:17:a0:a0:73:9d:a3:93:
2f:e2:e5:ab:ac:04:6a:7c:51:ee:5a:bc:5a:7c:c0:
12:1f:03:21:9d:60:de:43:29:dc:ea:53:bf:91:a0:
d7:76:49:3b:83:1a:2f:59:3d:1b:fb:a9:6f:ab:a5:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8F:93:15:BC:FE:A2:A7:8B:2E:9E:9B:C2:29:0B:CA:4E:C1:A2:E6
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/d4-TFbz-oqeLLp6bwikLyk7BouY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.36.0-45.130.38.255
Signature Algorithm: sha256WithRSAEncryption
88:31:fd:58:30:4f:08:08:f9:ad:ec:3c:f0:6c:48:18:98:cf:
4f:fe:90:91:54:a5:ed:57:c2:eb:5e:62:92:b3:a5:f6:ac:03:
0a:c0:8d:a1:93:6f:e7:b1:4b:4b:3c:60:a5:50:92:2e:f9:48:
93:06:4a:91:d6:94:d5:fc:69:4b:fe:d1:f6:e1:9f:b8:ec:0c:
f2:af:19:f3:de:c3:38:d9:25:09:9e:e4:24:83:10:90:fe:7a:
39:08:10:f2:2c:5b:9a:46:97:43:18:45:fa:db:7c:21:7e:e0:
22:d9:b3:61:f1:e0:f1:47:4e:93:88:87:b8:c4:e4:dc:ad:24:
e2:d7:fd:b8:14:55:2c:eb:cb:74:d6:81:d0:7a:d8:41:86:bd:
90:6f:3d:c6:da:c2:c3:9b:ed:fe:0a:c9:19:a7:d2:8e:51:36:
44:2d:98:dc:91:af:d8:1e:9b:43:04:bc:97:bc:07:79:ab:72:
53:19:b0:16:1b:3f:0a:74:ee:25:ab:f5:45:6e:68:b4:ed:6f:
c7:52:ba:8b:d8:59:74:ff:3a:07:c8:56:0c:f0:4d:08:9c:2e:
c9:73:f3:1d:6c:cd:a8:d5:4a:36:42:00:57:92:2b:fc:38:d5:
b7:6d:a9:4a:d6:7f:5b:70:95:9d:58:ae:ea:d9:83:80:0a:c0:
53:5b:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:13 2026 by rpki-client