Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa
File: 3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa (raw, json)
Hash identifier: nBPyAA0DKhBkjVysZ8vABPe+cEvgn6LLEUpiFGRroy0=
Subject key identifier: DD:A4:87:9F:F8:FC:46:D1:63:3E:4C:46:C7:97:A2:23:42:F9:CD:76
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019CE7392CAC7619EE01775F2BD8760CE63E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa
Signing time: Fri 13 Mar 2026 12:43:29 +0000
ROA not before: Fri 13 Mar 2026 12:43:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213570
IP address blocks: 45.74.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:39:2c:ac:76:19:ee:01:77:5f:2b:d8:76:0c:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 13 12:43:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dda4879ff8fc46d1633e4c46c797a22342f9cd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:1a:cd:6a:ef:8a:f7:2e:61:7e:2a:af:e9:
55:01:56:7c:9f:c6:a2:1b:e4:15:4a:96:61:3c:96:
8a:39:49:a5:97:a3:ad:97:a4:80:0b:cd:eb:f4:47:
0b:81:1b:10:0a:b4:a5:43:a7:fd:ce:b7:2f:d7:f7:
39:c3:4b:84:dc:19:e9:09:d3:33:95:14:50:92:4a:
cd:9f:1a:e1:12:88:63:7f:12:49:d1:47:5c:50:6f:
f2:b1:9a:a0:23:b3:d0:5a:87:ea:23:2f:54:79:90:
85:19:34:0b:5e:f6:95:cc:f8:97:eb:45:f9:7f:33:
2a:53:0c:8e:27:f1:c2:e9:87:f8:a2:82:1d:27:c5:
c4:03:9c:04:1e:f9:43:57:cd:d1:fc:79:af:14:28:
1e:97:8e:88:cd:70:0a:d5:82:7f:1d:fc:5c:7a:5c:
2b:f3:ca:0e:0d:28:53:69:10:b0:61:c9:e0:e5:d8:
73:7e:3e:5b:3a:d6:df:de:88:dd:01:b9:8f:bc:1e:
08:41:6f:92:0f:79:0e:96:11:b9:63:fe:2c:ca:72:
67:21:9e:dc:6c:1b:09:a1:6e:28:89:c4:11:47:c8:
d1:c5:4c:d8:62:d1:97:94:c4:8e:90:a5:5c:cb:f8:
14:31:89:fd:3e:7c:e0:08:3d:35:96:b3:9d:8d:55:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:87:9F:F8:FC:46:D1:63:3E:4C:46:C7:97:A2:23:42:F9:CD:76
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3aSHn_j8RtFjPkxGx5eiI0L5zXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.243.0/24
Signature Algorithm: sha256WithRSAEncryption
22:71:f8:ff:e5:8b:52:81:83:4d:11:72:a5:49:40:87:03:d3:
f2:ba:2e:69:43:91:47:b9:18:38:f7:58:34:94:df:7d:22:83:
41:39:6d:bb:fe:ed:52:28:f1:4d:7c:f1:42:69:4d:9e:7a:4f:
a1:7d:14:f8:ac:39:3e:24:af:e0:a6:4d:19:ce:f0:d0:36:20:
b6:b1:6f:22:72:97:51:6e:dd:73:94:99:9b:f0:f5:ae:ea:9c:
9c:a4:c8:68:61:2a:f2:26:11:cd:e7:ce:01:7d:4d:0c:23:ee:
d1:86:11:a6:80:c0:95:8f:08:e1:b2:89:57:51:39:68:23:fd:
3c:af:e7:76:47:bc:ba:4c:ab:a7:82:a6:b3:99:2a:62:cc:f3:
e0:f3:9f:f7:67:01:ed:86:2b:2e:f1:86:61:bc:3a:ce:2c:c2:
f0:8b:15:29:eb:05:da:90:bc:b3:f9:88:ed:72:d0:7f:2c:20:
ff:86:fc:89:b3:ad:5c:95:5b:b8:22:0f:6e:a2:06:b0:27:50:
30:b0:dd:3b:69:5f:b6:5b:0e:85:cf:41:30:db:be:b2:82:54:
12:61:1b:f8:41:08:39:e2:c5:f3:0f:71:71:3e:e9:b7:c9:fa:
84:f8:c6:4a:0e:c3:71:b2:bc:db:73:b6:3a:03:e7:d8:d7:f9:
43:b1:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:52 2026 by rpki-client