Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mTzcSCxpm7gYApAoDUjX2gO7n9s.roa
File: mTzcSCxpm7gYApAoDUjX2gO7n9s.roa (raw, json)
Hash identifier: sVKa96WPI4bXLyvj1lNXogTGlDkJL+Tp5ovZB+WR0mc=
Subject key identifier: 99:3C:DC:48:2C:69:9B:B8:18:02:90:28:0D:48:D7:DA:03:BB:9F:DB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F9102E6FBA1B3319811849BEAAE7D318B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mTzcSCxpm7gYApAoDUjX2gO7n9s.roa
Signing time: Thu 23 Jul 2026 22:05:14 +0000
ROA not before: Thu 23 Jul 2026 22:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.178.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
2a13:a440:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:02:e6:fb:a1:b3:31:98:11:84:9b:ea:ae:7d:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 23 22:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=993cdc482c699bb8180290280d48d7da03bb9fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:87:9a:b8:4a:4a:4e:85:af:b3:26:ac:8e:
70:31:b0:26:65:39:1d:3c:e7:0d:3f:f4:63:fe:6d:
65:fb:7e:2b:90:ed:97:91:ac:54:84:42:a5:35:73:
2d:71:20:e3:b0:8f:65:60:5f:f2:f0:77:d3:2e:16:
f0:1a:d6:08:b0:c6:f7:4a:3f:95:05:8b:a3:2d:88:
ec:34:b1:c0:c1:33:46:aa:a6:e9:f5:ae:e9:5c:98:
8e:97:10:d2:51:cc:36:88:85:de:74:ea:91:4f:aa:
7b:15:48:a4:d5:eb:43:87:ef:49:d2:00:44:68:ac:
8a:83:bd:4e:39:e9:ec:18:bd:fe:65:76:a0:85:25:
f8:ae:e5:4b:ba:b0:87:a7:0d:bc:15:27:51:6e:c1:
51:d7:c1:74:46:7c:c0:e0:e6:16:ff:41:46:8f:71:
00:ee:b5:6b:43:91:0a:e8:b8:70:ac:3e:3e:36:8b:
d7:b4:3f:d8:76:c7:b1:ab:c1:3b:d0:77:34:35:2e:
4d:03:18:3f:3f:59:f6:18:db:4b:ce:0d:6d:d3:92:
de:5f:1f:d7:25:75:b3:79:91:7c:82:78:c3:fa:f9:
f5:5f:e2:6d:b2:c2:47:1a:ca:c8:f8:ce:9f:37:9e:
40:fb:14:6b:bf:40:0e:a2:6a:5e:87:12:6f:b7:09:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:DC:48:2C:69:9B:B8:18:02:90:28:0D:48:D7:DA:03:BB:9F:DB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mTzcSCxpm7gYApAoDUjX2gO7n9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.178.0/24
77.83.203.0/24
IPv6:
2a13:a440:9::/48
Signature Algorithm: sha256WithRSAEncryption
75:f6:19:dd:27:e4:f6:40:e2:a8:a4:1c:e8:3b:c6:76:04:7b:
36:5d:84:36:bd:da:aa:22:87:f3:70:6d:93:6b:77:a0:66:7d:
b7:ed:53:f3:44:57:c9:5e:f8:ef:4d:c3:7b:38:0a:25:73:42:
d8:6e:ad:aa:d2:d2:10:0a:00:6e:3b:d9:71:13:e1:cc:9c:8a:
3e:72:b3:18:bb:d0:3b:8e:4e:09:54:a0:59:27:de:e4:0d:24:
db:fb:3d:0f:da:78:1a:2d:d6:54:c3:52:1b:85:a0:ad:cc:ad:
f6:a4:da:fc:74:24:55:7d:a3:f9:fe:9d:be:a9:44:b9:6a:05:
f7:e8:09:b3:6d:12:99:d7:8e:15:68:3e:bd:92:0a:08:da:cf:
f5:4b:06:3d:0e:cc:9d:59:81:0d:67:5f:db:b5:85:21:4d:68:
a6:49:df:a5:3b:f8:af:c0:bf:62:d9:10:4a:01:5f:fc:9b:19:
92:34:13:33:61:34:b4:29:e4:ed:db:73:d4:1b:90:59:c8:4f:
53:96:e2:18:43:f2:75:48:0f:38:60:17:e7:de:12:c9:c7:20:
be:22:96:8a:a5:c6:12:c9:f3:3c:1d:8d:42:eb:f8:a3:a0:6f:
89:c6:28:72:ed:a8:7a:08:81:64:a2:20:94:53:18:58:a5:c1:
48:01:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:54 2026 by rpki-client