Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/40crvbD7s15kOjaTEKWJGe0wNk8.roa
File: 40crvbD7s15kOjaTEKWJGe0wNk8.roa (raw, json)
Hash identifier: zSlzfn4N6fictPrTOk8i1+52sk6ZQiqhsWB2GBDN75w=
Subject key identifier: E3:47:2B:BD:B0:FB:B3:5E:64:3A:36:93:10:A5:89:19:ED:30:36:4F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1D5A5C6CA652ED4D826BB7D4C00175FA4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/40crvbD7s15kOjaTEKWJGe0wNk8.roa
Signing time: Fri 13 Nov 2026 16:02:53 +0000
ROA not before: Fri 13 Nov 2026 16:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218499
IP address blocks: 45.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:a5:c6:ca:65:2e:d4:d8:26:bb:7d:4c:00:17:5f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 13 16:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3472bbdb0fbb35e643a369310a58919ed30364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:dd:c0:95:1f:8a:03:6d:72:15:d2:37:39:
e5:10:ce:f7:50:3a:70:c4:bb:b8:7c:a2:b9:05:75:
41:cd:4d:77:06:51:12:55:52:95:6f:76:f7:e9:37:
19:58:e7:2e:83:e0:83:d3:92:b9:ec:c3:53:29:67:
a8:ce:e9:56:2e:9a:e0:97:d1:18:24:f5:c4:17:f7:
9a:b3:07:0d:21:54:6d:fc:55:86:c1:ea:8b:3e:63:
21:2a:dc:f3:8d:fd:42:6f:83:c3:2a:18:cc:56:cf:
17:5b:42:a2:3b:f9:7d:3f:98:c8:f3:58:2b:99:4b:
b2:dc:6d:7a:cf:9a:bf:b3:be:c7:fe:a3:a4:ff:60:
8a:a2:28:62:e0:c8:b9:50:0a:4e:a6:e1:08:1e:5b:
ec:1a:f2:00:98:e9:d9:81:34:a3:27:75:9b:c8:f3:
f2:fc:fb:bc:1a:f7:6c:f5:e5:ab:a1:50:cb:f6:b1:
d3:5d:a0:e3:f6:a2:0f:90:39:dd:17:0f:d8:a5:7e:
a7:e9:88:05:71:20:07:6b:00:86:3e:3f:ba:62:f6:
23:ac:c8:ad:99:20:db:82:5a:db:ad:ec:c0:d4:70:
3c:b1:ce:00:9a:b1:d3:4f:f0:0c:24:dd:67:a9:74:
65:7b:49:cf:15:49:b6:bf:4f:f7:f2:c7:3c:84:8d:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:47:2B:BD:B0:FB:B3:5E:64:3A:36:93:10:A5:89:19:ED:30:36:4F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/40crvbD7s15kOjaTEKWJGe0wNk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a5:5d:e5:d0:20:fd:c5:cc:4a:71:57:d9:1a:1a:3e:72:1d:
41:04:5d:dc:07:c7:d7:ed:46:ec:b6:ac:bc:30:12:bc:79:66:
de:fc:80:2e:89:f2:42:4b:2d:67:84:70:7c:01:7c:e0:a5:53:
65:48:63:13:ad:a8:2a:8e:ff:1c:f2:bf:03:8a:1d:f4:9b:1d:
f1:03:3e:9e:4d:75:d4:c0:28:24:3f:be:f4:ba:b8:0f:33:45:
fd:88:6c:5b:14:05:d2:d2:38:3a:2c:53:f6:f7:41:a8:4f:99:
bf:fe:e5:48:70:37:41:ef:f0:9e:7a:bc:d9:bc:d6:7b:a5:e3:
da:6b:2b:af:0d:53:68:03:08:fa:21:07:eb:f3:39:f2:20:e6:
cc:64:61:8a:a4:fe:1c:7f:43:ae:4e:1b:18:2f:63:b6:f0:13:
f7:71:0e:a2:85:84:c0:92:2a:57:80:d8:2b:48:60:89:7a:6c:
e1:7a:f4:40:ee:68:f2:f1:3e:19:09:87:25:cd:fd:67:ca:bb:
00:ba:11:f1:45:a1:1b:6c:9c:84:85:60:d4:d9:13:3c:a4:3f:
70:8b:01:3c:c7:76:92:3c:19:60:39:20:37:fe:4a:82:a6:85:
d6:1f:7d:ba:1c:06:ba:1e:02:68:81:dc:61:4a:fc:48:4a:9d:
a0:ca:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:32 2026 by rpki-client