Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa
File: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (raw, json)
Hash identifier: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=
Subject key identifier: 79:3A:D4:A1:5D:41:E1:B4:43:B9:24:9D:DE:F8:F3:6A:17:F9:16:FD
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019B78A2A8D32D9E5D8033C7B755AFCCA02B
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa
Signing time: Thu 01 Jan 2026 08:18:04 +0000
ROA not before: Thu 01 Jan 2026 08:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199348
IP address blocks: 45.86.148.0/22 maxlen: 22
46.31.132.0/22 maxlen: 22
176.105.152.0/22 maxlen: 22
185.20.64.0/22 maxlen: 22
185.76.140.0/22 maxlen: 22
2a04:1540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:a8:d3:2d:9e:5d:80:33:c7:b7:55:af:cc:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jan 1 08:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=793ad4a15d41e1b443b9249ddef8f36a17f916fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:bb:ca:c4:66:37:e0:86:08:ce:67:46:a0:
a5:80:07:2b:09:80:70:64:06:e7:8c:96:37:11:3e:
90:71:e2:a9:a8:aa:87:33:cb:62:7e:f6:fd:30:c1:
82:b0:9b:52:9d:12:86:da:9e:4a:a9:7a:7e:7f:9e:
f1:36:de:30:cd:08:2c:7b:fc:5a:83:b7:49:d1:e5:
11:7c:0f:7c:0b:65:6a:d7:cd:eb:71:7a:d2:57:7d:
7b:d5:45:93:27:f0:06:5b:15:d8:d2:4b:65:3e:55:
5c:b6:52:c3:be:01:b4:42:47:2d:99:3c:67:fe:54:
9a:7a:18:53:ac:b4:46:04:63:5f:23:cf:ab:44:b9:
57:f2:a3:46:08:d4:9e:c3:0c:be:19:2b:93:91:a6:
f9:05:95:2a:7b:3e:8c:99:1a:30:08:a9:97:7e:d2:
26:92:c6:6b:65:e5:51:f3:eb:81:4f:92:12:5b:9a:
b0:f4:10:49:be:9d:42:c0:27:b4:a8:c5:6a:aa:53:
5d:ef:45:f6:df:81:95:a9:e2:2f:65:6d:ed:99:c5:
95:58:03:9e:e9:6f:39:42:b1:b5:9f:18:b9:ae:c5:
a2:e1:94:e2:c2:4b:40:55:64:60:27:f0:d9:bc:b1:
26:f7:5e:53:ee:d5:ee:8b:51:15:a6:a5:e6:72:a2:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:D4:A1:5D:41:E1:B4:43:B9:24:9D:DE:F8:F3:6A:17:F9:16:FD
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.148.0/22
46.31.132.0/22
176.105.152.0/22
185.20.64.0/22
185.76.140.0/22
IPv6:
2a04:1540::/29
Signature Algorithm: sha256WithRSAEncryption
6a:41:3f:b1:0d:11:4c:5b:fa:dd:6c:f2:43:e7:12:a1:2b:72:
b3:5f:47:cd:01:54:fd:1e:bc:aa:d9:83:d3:75:d4:77:5d:32:
c7:6a:32:9a:59:88:c3:42:a3:c0:9e:84:27:aa:a2:a0:e0:34:
93:4b:b6:12:49:60:6a:b0:f6:61:84:ad:77:23:48:80:9e:76:
51:1b:b4:67:b3:ce:d5:4d:04:9a:5b:41:59:da:b4:7a:61:84:
e6:c2:ff:00:37:a4:f2:12:1c:a7:88:4f:b4:ff:01:10:74:61:
14:82:fd:d7:ac:27:4e:b7:ab:53:0a:32:12:ed:d4:15:04:24:
79:e5:47:c4:81:70:01:57:9f:33:0a:6f:41:17:b5:a4:09:75:
d3:96:7e:5d:1a:5d:73:13:aa:28:9c:a8:bb:ce:23:39:6f:ed:
99:4d:85:77:92:23:57:e1:1d:22:25:20:83:5f:94:13:ed:9a:
ae:ec:36:00:73:08:55:58:23:ce:5f:96:2f:78:f5:cc:44:44:
09:c8:98:e5:de:78:15:cc:75:6f:fa:98:b9:3c:3b:5c:e5:5b:
de:b3:4a:ea:ea:e9:a7:15:d8:b7:1a:52:24:63:cc:53:eb:29:
5d:bf:aa:28:e1:33:00:68:5f:ce:62:9e:8d:6d:eb:c2:ac:2d:
7e:e7:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:49:40 2026 by rpki-client