Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/0-9adPkcL-4YbjFYTMCOeFy3i08.roa
File: 0-9adPkcL-4YbjFYTMCOeFy3i08.roa (raw, json)
Hash identifier: +Wndu36xFA4FqzMwoCDPyuyiaHM6T8hR75Kfir6Lp0E=
Subject key identifier: D3:EF:5A:74:F9:1C:2F:EE:18:6E:31:58:4C:C0:8E:78:5C:B7:8B:4F
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 019D1AEA34331FDD05B8E7F9FB2D9042332E
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/0-9adPkcL-4YbjFYTMCOeFy3i08.roa
Signing time: Mon 23 Mar 2026 13:37:29 +0000
ROA not before: Mon 23 Mar 2026 13:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43602
IP address blocks: 45.133.12.0/23 maxlen: 23
45.133.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:ea:34:33:1f:dd:05:b8:e7:f9:fb:2d:90:42:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Mar 23 13:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ef5a74f91c2fee186e31584cc08e785cb78b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:d8:b3:95:3a:55:bb:ce:c1:8c:fe:3f:49:
90:32:b1:b4:f4:54:3c:85:3d:d8:63:c0:34:55:1e:
1b:cd:6c:1c:80:07:65:d2:34:77:65:6a:d0:48:84:
b0:d5:64:c7:42:ce:1c:30:06:73:0c:e6:a6:5c:4c:
b0:7b:30:d8:42:46:5c:e5:df:b6:42:6b:0b:48:1b:
27:ab:ed:ed:68:81:8b:40:5e:2d:a9:54:e1:4f:c9:
c2:d5:30:ee:1f:83:66:ba:f5:c3:be:db:8e:54:86:
17:c3:0a:24:21:d8:5e:2f:90:99:6c:cc:3d:78:3c:
bb:03:c6:58:6b:99:f2:9a:dd:27:03:bf:7a:7b:18:
21:2b:9d:64:98:04:eb:10:cd:4e:2c:c5:a8:82:30:
e9:19:f5:ae:43:45:6c:28:47:18:fc:20:4b:aa:66:
9c:63:fa:09:ca:95:b8:21:47:e2:30:ad:bc:19:12:
70:35:26:d1:6b:dd:dc:9f:39:31:70:cf:63:fd:ce:
13:21:06:d6:70:82:52:99:a0:32:a5:f0:5e:7b:de:
50:8e:4e:b3:86:a8:8c:6a:7f:2b:45:a5:39:80:66:
de:0c:43:bf:1a:cc:06:af:73:38:6e:08:eb:c7:a3:
a6:a9:e4:1d:39:64:cc:83:aa:7d:a8:93:8f:dd:c8:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:5A:74:F9:1C:2F:EE:18:6E:31:58:4C:C0:8E:78:5C:B7:8B:4F
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/0-9adPkcL-4YbjFYTMCOeFy3i08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:58:90:0d:02:6d:9b:23:8f:c1:09:8e:42:01:bc:25:bb:1d:
fd:71:ff:83:41:0d:d8:04:93:09:5b:80:ae:e8:0b:54:a2:ba:
41:8e:29:50:dc:83:c0:bc:59:33:b2:cc:18:3f:7a:54:86:62:
cb:7d:a8:bc:f1:7e:7d:95:72:33:0f:fa:cd:b6:89:af:38:e3:
19:31:cd:5f:14:31:c8:88:f0:b1:75:14:26:5f:6e:15:76:4f:
ea:60:69:ef:68:2b:82:63:e4:57:80:0d:83:26:3f:58:a7:b1:
aa:b4:15:52:d1:0d:c6:f5:58:40:83:06:5f:20:45:fa:0f:2a:
bd:0a:66:07:f0:39:cc:66:b5:ab:23:e6:b7:6f:30:c3:7a:e1:
17:64:23:7c:16:72:eb:2a:d8:11:7c:9d:62:53:f2:1a:27:09:
c8:9c:c4:c4:a7:fd:13:29:e5:c7:1f:1c:b6:1a:0c:8c:43:09:
46:bf:d6:60:3d:5e:75:8b:9f:e3:d3:02:0a:01:11:6c:80:7e:
ba:13:66:e7:ab:15:37:32:cf:91:83:5e:a6:ff:a6:ad:59:48:
b9:6e:33:2f:bf:a8:0d:ba:88:85:05:4b:aa:5b:cf:d9:4f:ba:
f6:a6:43:fd:88:b2:29:64:f4:dc:d8:c3:22:d5:87:e6:88:21:
11:34:ec:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:39 2026 by rpki-client