Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kznzYxIUd-Lz7Z2ehp8xwdKSPxw.roa
File: kznzYxIUd-Lz7Z2ehp8xwdKSPxw.roa (raw, json)
Hash identifier: Xkti13dKYOAlspKe837C6yxpqErtzF6riAvbQ1IYguE=
Subject key identifier: 93:39:F3:63:12:14:77:E2:F3:ED:9D:9E:86:9F:31:C1:D2:92:3F:1C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F841630D98D9C3B44495D1AEA60CB86F6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kznzYxIUd-Lz7Z2ehp8xwdKSPxw.roa
Signing time: Tue 21 Jul 2026 09:51:14 +0000
ROA not before: Tue 21 Jul 2026 09:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 45.131.3.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:16:30:d9:8d:9c:3b:44:49:5d:1a:ea:60:cb:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 21 09:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9339f363121477e2f3ed9d9e869f31c1d2923f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:d6:15:db:1f:08:fe:cc:77:ea:83:ec:51:
84:4e:78:a9:34:36:be:9b:94:12:2e:29:f3:5d:a7:
dd:1b:4a:d3:5e:aa:a2:c2:1b:93:7a:e1:19:8f:c7:
25:e5:55:08:9e:4e:97:dd:bb:ae:31:f0:0b:97:09:
bf:6d:93:4a:65:58:13:7d:77:75:46:a9:06:02:c1:
e5:8b:cd:31:91:cb:0f:f2:30:33:cb:13:56:e0:ac:
c2:0c:8d:4d:f6:0a:1e:a9:42:03:a5:2d:41:01:40:
98:f5:45:17:49:77:2f:06:6f:35:f8:bc:f6:47:d8:
cc:66:fc:6f:72:18:5e:c3:de:7a:1d:4f:e6:f0:f9:
dc:9e:b7:10:46:51:6f:2e:ce:9f:45:ec:fe:fb:31:
e1:3f:a5:64:cf:01:15:af:20:35:fa:13:18:97:2c:
13:50:8a:3c:3e:05:a6:14:34:b0:e1:3c:8d:89:0e:
7e:ab:61:b3:24:db:c7:e0:cf:f1:d3:c5:43:bb:47:
4e:e5:7f:27:3b:c2:f0:ae:0c:76:73:b1:e5:c6:09:
4b:30:47:fb:09:de:cd:54:7e:4e:12:75:bd:a5:44:
5d:a0:5e:85:71:70:b3:37:c4:93:0c:91:04:35:de:
81:07:40:74:a5:10:21:8b:7d:c1:8e:bc:1a:3a:de:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:F3:63:12:14:77:E2:F3:ED:9D:9E:86:9F:31:C1:D2:92:3F:1C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/kznzYxIUd-Lz7Z2ehp8xwdKSPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.3.0/24
45.141.149.0/24
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ca:d7:3a:6a:eb:bd:01:cf:6f:46:e5:a1:a1:82:62:86:79:
44:fa:91:37:84:bf:4b:e2:1e:46:5d:94:3b:0f:7b:55:28:20:
55:42:b7:14:0f:89:52:d9:53:87:32:78:bb:a4:d0:5a:26:d6:
64:a6:24:fc:e7:71:c7:a4:74:98:3a:48:e8:b0:67:4f:f6:09:
18:40:6b:5c:c8:9a:3d:71:a8:10:02:a1:7e:ed:23:cb:f5:9e:
9b:49:8f:d5:ea:2c:24:53:ec:f4:3c:09:81:b3:14:59:d3:22:
42:2b:cc:6b:a5:81:1e:a2:75:41:ab:dc:0d:7b:a7:47:8a:42:
16:8e:cb:0e:83:38:92:97:60:61:0f:43:9b:93:bb:96:08:80:
5a:ca:46:b6:ca:b1:81:78:d8:8a:9e:45:b2:4a:50:e2:bd:01:
bf:42:be:86:e7:b5:01:09:4a:3b:00:fe:10:fe:12:a7:e8:0d:
1c:94:ec:e2:7d:6d:f1:a5:40:ff:eb:ad:2a:c9:d9:bd:02:bd:
ee:13:75:fe:12:ac:70:e1:08:53:bb:af:3e:c4:57:18:f4:4b:
bf:ae:d8:f4:0a:52:07:85:a2:1d:24:43:85:3f:91:bc:3e:9c:
98:22:fd:1a:d5:39:63:2a:7e:20:c9:f4:95:e3:fe:4a:0c:6e:
21:2c:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:15 2026 by rpki-client