Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/25iXnLadAUQvZLvjcnpRlmHVWu8.roa
File: 25iXnLadAUQvZLvjcnpRlmHVWu8.roa (raw, json)
Hash identifier: lPg100YwnRklmy9H5YnYx0ixVO02LvQJJAmc2CYmnuQ=
Subject key identifier: DB:98:97:9C:B6:9D:01:44:2F:64:BB:E3:72:7A:51:96:61:D5:5A:EF
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F40882046CDE6E7B8431E744F8D440750
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/25iXnLadAUQvZLvjcnpRlmHVWu8.roa
Signing time: Wed 08 Jul 2026 07:01:30 +0000
ROA not before: Wed 08 Jul 2026 07:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 45.141.148.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:88:20:46:cd:e6:e7:b8:43:1e:74:4f:8d:44:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 8 07:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db98979cb69d01442f64bbe3727a519661d55aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:9e:16:ec:5c:2b:14:6d:a2:de:69:21:b8:
a6:f0:25:84:ab:04:7e:64:43:89:93:85:cc:80:33:
2a:74:03:6d:f7:1d:01:eb:65:ac:00:40:58:af:20:
82:2f:1b:df:1f:3b:10:c7:2a:03:52:d8:19:f7:21:
92:27:ce:5a:36:1f:2d:12:13:7b:29:c9:f2:5a:c2:
9d:eb:e6:5e:79:24:3a:d5:c6:28:55:15:ef:62:28:
d2:51:a0:6f:86:ac:cb:40:91:ab:11:d2:9d:04:aa:
4d:c9:7a:ef:a5:84:44:48:ab:da:c9:17:4c:92:47:
65:53:ba:55:30:52:ab:ab:25:9c:0f:55:ef:f6:5d:
17:60:2f:49:66:6a:49:ef:22:06:e1:fb:94:be:ee:
40:a5:09:2e:84:e6:e9:bb:22:ae:0a:01:de:0a:1f:
3d:99:89:1d:c0:bf:56:be:74:6a:97:4a:8a:e7:8e:
f5:cc:e7:32:21:9e:60:b3:32:83:bf:67:97:b4:ac:
60:aa:05:2e:09:ad:07:b6:09:cd:c6:9c:d7:bd:cc:
ba:a3:0a:6c:97:78:ad:9c:84:c7:2c:fd:47:a6:34:
75:5d:71:8e:81:ab:b4:0e:ea:2b:bc:77:91:99:4d:
1b:0c:1f:4f:61:be:ca:c1:25:bd:d5:3d:71:11:26:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:98:97:9C:B6:9D:01:44:2F:64:BB:E3:72:7A:51:96:61:D5:5A:EF
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/25iXnLadAUQvZLvjcnpRlmHVWu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.148.0/24
194.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ba:84:16:7a:d3:f3:7d:eb:b4:42:64:88:ee:83:fd:43:ac:
d1:ed:4b:3a:74:c8:1f:51:bf:a0:c2:fa:f1:0b:7e:04:ea:a1:
e3:b0:58:58:ba:35:7f:19:52:e9:21:a1:6a:cb:0b:29:f5:d7:
3c:e0:b7:69:0b:f5:46:6d:c6:94:0b:6a:e7:09:f1:88:ae:8c:
1f:78:71:02:6a:a2:d7:df:39:d4:22:37:29:ee:f1:fc:ad:65:
75:25:3e:2d:ba:c9:a4:19:8e:e0:36:f4:d9:62:85:a8:25:d2:
35:8e:42:92:2a:30:48:0f:4f:91:01:80:b8:05:07:29:3b:97:
e0:82:fb:f7:74:5d:75:14:b9:09:57:a3:43:11:41:72:2a:bc:
05:17:22:7c:af:94:6d:15:b8:b4:57:70:a5:bd:f7:cd:5d:74:
76:8a:bd:8f:c1:a8:dc:8f:0f:b8:59:21:07:f8:41:ef:09:46:
c7:63:66:9a:06:6f:d4:5a:6a:6e:d8:bc:f4:19:a5:1c:80:51:
4f:35:e9:75:8f:74:1e:e0:86:2e:74:78:7f:3c:bd:af:47:42:
94:8f:e2:1c:aa:91:dc:f8:c1:cd:14:ae:7b:97:31:40:de:20:
17:d3:4b:26:e2:d9:07:4f:ff:bb:37:82:98:54:2c:9c:08:1d:
c0:06:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:50 2026 by rpki-client