Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/InZzXVL8KHJoCW3P7j1vC_LCtX0.roa
File: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (raw, json)
Hash identifier: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=
Subject key identifier: 22:76:73:5D:52:FC:28:72:68:09:6D:CF:EE:3D:6F:0B:F2:C2:B5:7D
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019F89F83AC061839A05F070390DF7C03EC7
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/InZzXVL8KHJoCW3P7j1vC_LCtX0.roa
Signing time: Wed 22 Jul 2026 13:16:14 +0000
ROA not before: Wed 22 Jul 2026 13:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 45.142.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:f8:3a:c0:61:83:9a:05:f0:70:39:0d:f7:c0:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jul 22 13:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2276735d52fc287268096dcfee3d6f0bf2c2b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:3c:b7:26:8b:e5:a9:4c:d6:a8:77:a6:92:
3c:a1:69:43:96:2e:f8:82:08:d7:c7:76:50:f7:13:
c1:43:cf:ed:1d:70:f5:8f:ce:80:e5:a6:58:6a:4c:
4e:1b:58:3d:f0:a8:5c:bb:34:65:7c:55:52:b4:50:
33:47:9d:94:51:e0:33:97:e3:59:ca:14:3a:03:06:
ab:d8:5d:e9:9e:12:59:e4:14:2f:b0:d8:02:f3:55:
9d:a8:6c:46:f2:41:97:a0:be:17:00:18:2a:7b:d9:
4e:ab:5e:4e:86:68:08:c0:63:d3:1a:b9:d6:53:c4:
9d:1f:93:a8:e7:2f:de:68:e8:f4:94:e6:d1:68:1e:
26:c0:4b:dd:af:23:46:86:ce:5d:5b:5c:de:d3:c5:
f5:34:7c:c4:38:c5:46:59:2e:d4:8f:c0:1e:0f:18:
06:a9:29:a8:e4:81:53:8f:ea:75:7d:57:95:80:96:
88:05:fd:69:97:aa:08:71:68:68:c5:df:41:23:bc:
da:9e:55:7b:4c:c0:8c:9a:bf:83:0c:53:c6:c6:cc:
a4:86:a0:86:ce:7e:2e:92:36:82:99:f8:4e:61:ab:
4f:25:fd:79:67:0d:43:69:ae:43:62:38:da:04:90:
ff:47:d9:08:f4:25:40:b3:b3:0e:48:1a:25:a2:a7:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:73:5D:52:FC:28:72:68:09:6D:CF:EE:3D:6F:0B:F2:C2:B5:7D
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/InZzXVL8KHJoCW3P7j1vC_LCtX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.52.0/22
Signature Algorithm: sha256WithRSAEncryption
20:79:02:13:dd:83:94:6a:30:2f:4a:ce:e1:0a:40:59:9e:4e:
a5:bf:6e:db:35:22:20:f4:e4:12:97:04:14:e5:3a:32:49:e3:
33:5f:35:be:06:f2:f1:40:ef:c2:82:85:f6:4e:9b:a6:52:5e:
19:27:02:b7:e8:ed:50:09:76:8f:b0:56:0e:c0:47:3a:2a:f9:
5e:69:7e:94:55:90:d7:39:1a:ae:db:76:cb:66:e2:6a:14:c3:
1e:a9:38:4c:47:de:dc:98:3e:17:ca:b0:9d:19:25:0e:66:e6:
86:ba:60:70:c8:a5:3e:a1:96:d3:f1:6c:16:8d:a9:d7:ef:aa:
b7:29:0c:84:67:41:14:d8:8b:63:5a:b7:61:cd:a1:3c:35:ad:
2d:e7:d6:d2:a7:a8:b5:12:c6:7c:7e:c2:57:23:72:fc:a3:e7:
42:51:f4:32:58:a1:55:3c:88:ac:94:dc:bd:29:c2:cb:98:d3:
22:bc:b0:96:13:82:f9:da:cc:f4:a6:7f:b9:ae:12:85:b4:0e:
49:32:c1:e1:bc:10:65:6d:ad:be:5c:8d:0f:a5:05:9f:aa:e6:
50:51:a2:db:b7:e4:e9:c5:d6:13:f4:15:23:2c:ff:94:f3:ee:
0e:e1:d7:e5:70:ea:05:28:a9:77:e1:fc:a6:23:5d:e0:6c:6e:
f5:20:1a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:43 2026 by rpki-client