Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/g48FjrLPUETlNPulvtc8xyj8K48.roa
File: g48FjrLPUETlNPulvtc8xyj8K48.roa (raw, json)
Hash identifier: EKxmKIv2fLBJS6U0Ro0OTfm8airNaJ2w6GG0eXaf5Lk=
Subject key identifier: 83:8F:05:8E:B2:CF:50:44:E5:34:FB:A5:BE:D7:3C:C7:28:FC:2B:8F
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A1845AB624A3AE290EB4BB71AF8AE4329D
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/g48FjrLPUETlNPulvtc8xyj8K48.roa
Signing time: Wed 28 Oct 2026 21:11:39 +0000
ROA not before: Wed 28 Oct 2026 21:11:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 45.8.44.0/24 maxlen: 24
45.8.45.0/24 maxlen: 24
45.8.46.0/24 maxlen: 24
45.8.47.0/24 maxlen: 24
86.104.220.0/24 maxlen: 24
89.33.247.0/24 maxlen: 24
89.34.110.0/24 maxlen: 24
91.213.11.0/24 maxlen: 24
91.213.188.0/24 maxlen: 24
128.0.44.0/24 maxlen: 24
188.211.238.0/24 maxlen: 24
194.242.46.0/24 maxlen: 24
194.246.38.0/24 maxlen: 24
194.246.84.0/24 maxlen: 24
194.246.100.0/24 maxlen: 24
2a0e:4600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:5a:b6:24:a3:ae:29:0e:b4:bb:71:af:8a:e4:32:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Oct 28 21:11:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=838f058eb2cf5044e534fba5bed73cc728fc2b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:fd:c8:7d:47:db:6f:6e:29:70:cc:7f:a9:
c5:44:b2:3c:14:56:1a:c1:62:fc:51:42:a1:36:42:
97:e2:88:5b:d8:65:dc:9b:44:ec:a8:37:1a:21:4b:
ae:24:ff:d5:63:07:a0:56:28:40:cc:b6:d2:2c:52:
ff:9e:a0:b6:00:2e:f0:75:22:7c:a6:be:f7:65:29:
b0:8e:02:dc:78:75:69:0b:36:8f:dd:94:fd:2c:38:
67:e6:21:21:7e:c3:f5:a7:ee:de:a6:a1:48:d2:fe:
20:93:f0:65:21:b9:5e:c9:be:a7:ed:51:4f:fa:46:
58:54:f9:30:84:d0:9d:51:4d:db:4c:c6:07:80:f9:
7f:6a:08:03:a9:83:e8:18:bc:da:d4:34:9b:3d:dd:
1e:29:6b:8f:19:e3:d7:fe:d2:e5:9a:50:8e:3f:8c:
2e:f6:f8:66:a8:37:81:5e:c8:b0:80:df:1a:9f:b9:
60:65:f2:20:25:ba:d7:59:a4:e1:aa:1d:cd:95:47:
e2:36:6d:9f:60:a6:c8:9c:6a:db:53:0e:16:bc:69:
b5:45:4e:a1:33:8f:bf:db:ed:d0:13:ec:32:d6:cf:
b0:13:26:2f:4f:53:2b:43:f6:b7:3c:55:36:4b:5d:
c0:04:d0:7b:83:65:91:c5:bd:68:9d:b9:70:ad:b3:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:05:8E:B2:CF:50:44:E5:34:FB:A5:BE:D7:3C:C7:28:FC:2B:8F
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/g48FjrLPUETlNPulvtc8xyj8K48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.44.0/22
86.104.220.0/24
89.33.247.0/24
89.34.110.0/24
91.213.11.0/24
91.213.188.0/24
128.0.44.0/24
188.211.238.0/24
194.242.46.0/24
194.246.38.0/24
194.246.84.0/24
194.246.100.0/24
IPv6:
2a0e:4600::/29
Signature Algorithm: sha256WithRSAEncryption
62:04:be:26:99:b7:31:52:85:e1:ee:64:f1:8b:9f:d5:5c:16:
0c:1f:5e:71:49:1e:fd:ca:84:cc:89:63:10:1e:79:86:22:e5:
92:41:cb:e1:9a:6a:1a:c0:96:3a:59:05:21:34:ae:77:69:80:
ba:c4:2d:bf:b9:16:00:fb:28:ae:e9:ce:6a:08:11:c1:13:ff:
ab:a9:4f:b4:6e:14:72:f4:e5:9f:58:d5:ff:a6:cc:eb:7b:8e:
86:07:ea:8b:cf:e7:c7:93:f9:6c:ce:9e:ac:53:f5:11:14:2b:
d0:44:3e:06:e4:32:35:c1:c4:12:a6:39:87:b0:1c:e8:84:a7:
de:97:54:9d:b8:a4:f2:0d:86:48:58:05:e6:4d:a2:4e:50:7e:
62:a8:df:73:d5:95:5d:a5:dc:d4:d8:fc:23:80:76:c4:e8:69:
13:51:28:e0:28:84:a1:25:c8:ec:60:cc:17:fe:ac:43:90:73:
08:d5:df:4e:d9:bf:17:2e:01:b6:ce:ca:3d:61:b1:6d:e3:1f:
4f:eb:af:85:ac:99:7b:6d:33:dc:66:a3:f3:91:38:95:04:e0:
9a:20:a1:ed:0c:49:ad:2c:bd:b2:0f:47:9c:31:dd:57:1a:31:
57:d8:40:18:8e:a0:02:4d:59:0a:5e:bf:1d:1f:f2:93:bc:dd:
ed:92:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:50 2026 by rpki-client