Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/TvCc8hiaFr_fyTkA3xR5fpUcGas.roa
File: TvCc8hiaFr_fyTkA3xR5fpUcGas.roa (raw, json)
Hash identifier: UnT1U41d5wNEoKIQI+DCazeV1J5PMCLRMSXba/1mdHY=
Subject key identifier: 4E:F0:9C:F2:18:9A:16:BF:DF:C9:39:00:DF:14:79:7E:95:1C:19:AB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A19C885A936478415D5DDAB7D043B6E119
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/TvCc8hiaFr_fyTkA3xR5fpUcGas.roa
Signing time: Mon 02 Nov 2026 13:52:24 +0000
ROA not before: Mon 02 Nov 2026 13:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44714
IP address blocks: 45.74.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:88:5a:93:64:78:41:5d:5d:da:b7:d0:43:b6:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 2 13:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ef09cf2189a16bfdfc93900df14797e951c19ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:ba:30:22:be:df:d6:1a:05:92:ab:92:9a:
f1:5a:5c:b5:2d:1d:99:80:4b:be:36:e7:bc:4b:a0:
44:5a:06:49:be:cc:93:74:7a:19:7a:30:7b:a8:fb:
b9:98:2f:15:d3:39:49:07:62:7d:99:7c:b0:61:b2:
13:ff:42:76:ef:2d:80:77:fe:40:c9:92:f9:3d:b2:
9a:f2:14:fa:ba:bb:91:c2:1d:e7:13:29:48:bb:8a:
1a:47:48:8f:ca:f0:5b:8d:02:ed:7a:2b:c3:06:e7:
ae:08:2f:16:2f:2e:35:de:f5:d9:be:45:15:31:7c:
b0:50:6f:83:87:76:90:c7:55:86:c9:ed:9c:f6:73:
b1:3b:35:08:d9:4d:fc:28:c5:b0:d6:21:ec:c2:77:
1a:53:ec:f2:3f:c6:95:33:06:8b:19:b2:fb:40:c2:
cb:82:5c:46:b6:80:2e:0c:f2:c0:43:6b:e3:b0:11:
ec:a5:e0:ac:fb:07:1f:27:34:9e:81:fb:0a:eb:72:
3e:4e:af:1f:b5:71:8e:26:35:d4:72:ab:c6:19:64:
5d:3f:fd:3c:bc:dc:79:1b:ae:bf:40:30:bd:34:1b:
c3:11:ce:32:52:29:d9:59:ad:e2:fb:d3:f3:6e:c1:
42:28:84:73:49:a4:3a:97:72:b0:53:db:c9:cb:e4:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:9C:F2:18:9A:16:BF:DF:C9:39:00:DF:14:79:7E:95:1C:19:AB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/TvCc8hiaFr_fyTkA3xR5fpUcGas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:1c:1a:64:73:b8:67:2c:56:b8:55:d9:3c:4d:23:a6:d2:
8b:3b:cd:7e:c9:66:e0:da:5e:09:f4:8d:de:3c:a9:8c:6c:73:
af:14:3f:86:0a:42:4e:fb:b3:a8:ae:31:02:ca:d4:40:47:80:
17:c7:29:42:b6:05:56:9c:ce:bb:97:9f:fc:ba:12:4f:f0:5d:
3b:2f:d2:1f:69:20:75:b5:ec:7e:93:0e:db:c3:50:5a:7d:45:
5d:50:a5:e2:48:5c:4a:f2:2e:9e:3f:d1:db:e4:17:f7:ea:6b:
51:bb:b1:ab:3c:bb:94:45:46:78:65:4a:db:20:1e:01:a5:b2:
d3:63:bc:2c:48:5c:e9:60:8b:b8:68:fd:6e:fe:0e:d2:e4:78:
3a:47:37:77:ad:b9:b3:7f:f7:2b:e4:59:2b:c6:16:4a:4a:ff:
d4:59:71:53:c7:62:81:df:4d:cb:62:b5:db:c7:74:4e:be:13:
b4:17:a1:41:cc:c7:96:4c:76:f0:10:b1:3a:96:15:b0:18:36:
c5:25:d5:7b:3d:2c:7b:ef:65:f1:d5:86:ae:5c:51:ff:2d:61:
8c:03:36:ce:8c:1b:8c:94:3c:eb:d0:d3:0e:d1:e3:f0:f9:68:
57:97:09:6b:20:ae:ac:4e:80:5e:c9:81:d6:df:35:84:80:a7:
e3:46:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:33 2026 by rpki-client