Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/jwSgudfTgoD0rYPgWs2QdsgCaFY.roa
File: jwSgudfTgoD0rYPgWs2QdsgCaFY.roa (raw, json)
Hash identifier: T7RwlJl15rnyYrYfOU8otSAOkH0fOifwVGS8FpasWE8=
Subject key identifier: 8F:04:A0:B9:D7:D3:82:80:F4:AD:83:E0:5A:CD:90:76:C8:02:68:56
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F23688785094E3ADFB053E341B0D07259
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/jwSgudfTgoD0rYPgWs2QdsgCaFY.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209516
IP address blocks: 45.86.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:85:09:4e:3a:df:b0:53:e3:41:b0:d0:72:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f04a0b9d7d38280f4ad83e05acd9076c8026856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:67:1a:e5:5d:1e:e0:eb:f5:0e:d1:54:eb:
76:ec:de:8e:e9:9d:cd:57:a2:78:09:bc:4b:35:79:
10:a1:70:3d:90:47:c9:ed:74:5f:ae:4b:eb:14:87:
5f:97:f5:21:6b:bb:9f:64:2c:6f:47:68:88:a3:63:
89:87:9d:4f:05:c7:35:c5:30:d4:56:bf:02:d5:c5:
38:91:93:63:93:1f:92:94:7e:d7:32:8a:3d:82:73:
91:55:85:47:f3:e6:9d:38:bd:11:f7:13:47:da:4e:
b7:25:f7:d5:a9:c5:43:b8:06:96:1d:81:6c:67:c4:
37:86:ac:dd:74:47:56:20:ad:1b:ee:0b:b9:c4:7f:
7f:1d:46:37:71:ab:1a:58:40:77:85:ed:fa:0c:4d:
27:d6:35:48:dc:32:a8:1b:13:1c:c7:0c:6a:de:a3:
e7:b9:28:57:86:2a:12:92:3c:0a:2b:2b:a4:d6:d9:
0e:63:89:2b:19:9c:ed:61:c8:37:60:bb:bf:61:24:
b1:99:d0:5f:3c:c3:a8:09:91:e5:42:92:15:90:96:
9e:aa:81:8a:4c:60:e5:78:58:d8:9a:65:60:24:01:
f5:32:0c:45:37:69:00:1c:3a:e9:3d:51:b8:3d:5b:
8c:b7:4c:81:eb:6c:08:e9:76:8f:db:4a:ec:c3:cb:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:A0:B9:D7:D3:82:80:F4:AD:83:E0:5A:CD:90:76:C8:02:68:56
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/jwSgudfTgoD0rYPgWs2QdsgCaFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.33.0/24
Signature Algorithm: sha256WithRSAEncryption
31:16:8c:31:2f:91:0a:f0:4f:87:bf:9d:a9:ad:8e:bf:02:c1:
5a:a4:19:70:76:d8:70:36:59:a7:19:a3:d7:8e:78:f9:07:fc:
b9:fe:e8:33:a5:01:aa:72:de:2a:2c:6d:13:55:f8:6c:48:aa:
7d:3e:71:9a:dd:b1:7b:00:8f:bc:75:48:10:41:a3:41:b8:87:
b6:33:79:55:0b:7c:03:41:b8:17:43:5d:17:a1:94:8b:d4:ae:
ad:40:84:a9:0c:d8:75:4e:b0:cb:c1:36:21:b2:de:7d:0b:f0:
82:12:d7:29:71:34:df:c0:f5:f4:07:c4:74:48:7f:e8:32:4d:
d4:03:ab:62:91:3e:6f:83:01:2e:0f:f6:cc:9f:ed:9f:02:d3:
d7:5a:7e:53:64:e3:17:fb:30:55:b4:3d:e1:50:8f:bd:a8:fa:
98:a3:dc:5c:18:98:d9:3e:bc:a7:7c:8b:ab:09:68:36:bd:31:
a1:7b:01:42:00:1e:6c:e5:70:61:fd:46:f2:28:06:04:9a:a3:
46:86:62:88:aa:37:5b:1b:82:f1:d4:a1:62:15:dd:45:58:47:
9c:49:f9:78:ce:00:df:58:93:0a:33:a9:95:ee:a9:2e:e2:12:
96:0f:6e:e7:a9:19:9d:b2:74:09:68:e0:66:f6:c7:55:e8:db:
ca:43:5e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:42:49 2026 by rpki-client