Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/lP7WRV4DBHaBiFhgVQ8GxRCPL3U.roa
File: lP7WRV4DBHaBiFhgVQ8GxRCPL3U.roa (raw, json)
Hash identifier: CL19j4yZ+wm/iNSjIoJvD6BS1OHxIwZScSQL4ivhtkY=
Subject key identifier: 94:FE:D6:45:5E:03:04:76:81:88:58:60:55:0F:06:C5:10:8F:2F:75
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019E032B946A77F1974E015D62E54A3EDAD3
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/lP7WRV4DBHaBiFhgVQ8GxRCPL3U.roa
Signing time: Thu 07 May 2026 16:00:48 +0000
ROA not before: Thu 07 May 2026 16:00:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200181
IP address blocks: 45.43.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:2b:94:6a:77:f1:97:4e:01:5d:62:e5:4a:3e:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: May 7 16:00:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94fed6455e03047681885860550f06c5108f2f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:ff:b9:83:76:f7:58:88:2f:75:1c:13:c8:
85:90:63:65:cd:b8:67:a9:13:6b:8e:e8:4e:e2:00:
27:51:3d:16:0d:a8:9f:40:bd:26:e0:6e:a7:a0:f7:
ef:39:a1:86:00:6f:52:b6:33:a7:05:ac:15:a3:eb:
b3:12:37:97:ff:56:59:97:0a:5f:7b:f3:d8:27:d2:
a0:b5:18:35:13:3e:cf:07:56:82:c5:c0:48:cb:6f:
b2:f1:40:50:70:fb:37:ce:61:d9:f8:72:4e:bf:37:
a9:58:6a:7a:fe:87:e2:78:35:15:22:0f:5e:76:b4:
a7:ef:c3:92:7e:31:84:70:a9:74:e9:83:96:e1:a2:
a3:22:a2:7b:75:27:73:b7:11:91:7b:b7:73:0a:31:
9a:ee:3a:f4:ee:b8:c5:4c:36:40:18:a2:f1:7e:04:
6d:8e:f6:10:0a:82:8d:1e:e2:11:36:6b:74:80:60:
f3:0b:4b:35:d8:14:bd:66:34:f8:4b:13:0d:c1:17:
75:4a:f1:45:3c:2a:17:c6:eb:ab:98:e4:3c:94:e2:
57:b1:b2:b8:ae:48:c7:7d:bf:80:c1:21:ad:b7:7b:
36:be:45:e0:cc:51:2b:f3:fe:f2:68:ee:21:18:ec:
b7:34:21:9c:e6:d7:70:12:04:8f:fa:01:ec:30:19:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:D6:45:5E:03:04:76:81:88:58:60:55:0F:06:C5:10:8F:2F:75
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/lP7WRV4DBHaBiFhgVQ8GxRCPL3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8d:08:f2:b2:2a:1c:1d:47:67:1f:99:24:47:d3:90:68:bc:
15:98:b2:e8:e5:ff:87:67:77:61:56:03:87:4d:b9:69:fa:a0:
39:d2:a1:34:bb:6a:c6:3d:d1:4b:ba:d5:28:77:f2:e1:e3:32:
ea:98:44:f0:fe:18:b7:6c:dd:43:f1:b4:5e:ff:4a:ce:5f:2c:
7a:3f:c0:43:d1:d0:d1:ca:7a:58:cc:89:72:fe:e7:09:3b:d4:
64:a0:26:de:1e:27:af:68:40:ca:b8:1f:ef:f4:26:f5:22:61:
c8:78:b7:09:56:52:d2:0c:6b:af:25:f7:48:cb:f0:44:a7:bc:
85:d2:de:df:39:ea:c8:24:52:b7:49:15:7f:89:bc:75:49:9c:
f2:c4:cd:bc:33:ce:3a:36:da:38:8b:58:af:8e:d2:73:9f:1a:
16:3c:10:15:10:bb:39:b4:a7:83:9e:de:3b:ad:8e:02:2e:05:
97:7a:96:26:57:59:3e:f3:43:bb:c5:32:16:9c:31:6f:0a:91:
ce:6e:f1:af:13:42:2d:d8:dd:4c:6b:c8:f7:93:e8:75:ce:02:
9a:4c:3f:1c:29:6c:fa:b9:57:fd:be:9f:39:89:6e:d7:79:84:
36:37:c4:cc:68:da:53:0b:23:86:17:6f:55:9c:95:75:46:b6:
6a:6b:60:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4DK5Rqd/GXTgFdYuVKPtrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjYwNTA3MTYwMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGZlZDY0NTVlMDMwNDc2ODE4ODU4NjA1NTBmMDZjNTEwOGYyZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+//uYN291iIL3UcE8iFkGNlzbhn
qRNrjuhO4gAnUT0WDaifQL0m4G6noPfvOaGGAG9StjOnBawVo+uzEjeX/1ZZlwpf
e/PYJ9KgtRg1Ez7PB1aCxcBIy2+y8UBQcPs3zmHZ+HJOvzepWGp6/ofieDUVIg9e
drSn78OSfjGEcKl06YOW4aKjIqJ7dSdztxGRe7dzCjGa7jr07rjFTDZAGKLxfgRt
jvYQCoKNHuIRNmt0gGDzC0s12BS9ZjT4SxMNwRd1SvFFPCoXxuurmOQ8lOJXsbK4
rkjHfb+AwSGtt3s2vkXgzFEr8/7yaO4hGOy3NCGc5tdwEgSP+gHsMBn2NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJT+1kVeAwR2gYhYYFUPBsUQjy91MB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvbFA3V1JWNERCSGFCaUZoZ1ZROEd4UkNQTDNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALStKMA0G
CSqGSIb3DQEBCwUAA4IBAQAsjQjysiocHUdnH5kkR9OQaLwVmLLo5f+HZ3dhVgOH
Tblp+qA50qE0u2rGPdFLutUod/Lh4zLqmETw/hi3bN1D8bRe/0rOXyx6P8BD0dDR
ynpYzIly/ucJO9RkoCbeHievaEDKuB/v9Cb1ImHIeLcJVlLSDGuvJfdIy/BEp7yF
0t7fOerIJFK3SRV/ibx1SZzyxM28M846Nto4i1ivjtJznxoWPBAVELs5tKeDnt47
rY4CLgWXepYmV1k+80O7xTIWnDFvCpHObvGvE0It2N1Ma8j3k+h1zgKaTD8cKWz6
uVf9vp85iW7XeYQ2N8TMaNpTCyOGF29VnJV1RrZqa2Di
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:51 2026 by rpki-client