Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/vJbwHPz8RQ4zs2gU1mqro7zoibU.roa
File: vJbwHPz8RQ4zs2gU1mqro7zoibU.roa (raw, json)
Hash identifier: sBjiZn8iplUkAmpK3IUiwbDEIQyYz8gkgjFlOTL9wqQ=
Subject key identifier: BC:96:F0:1C:FC:FC:45:0E:33:B3:68:14:D6:6A:AB:A3:BC:E8:89:B5
Certificate issuer: /CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Certificate serial: 019F23687EC8391E20C156BC6C1D09621BD0
Authority key identifier: B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/vJbwHPz8RQ4zs2gU1mqro7zoibU.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39328
IP address blocks: 45.67.180.0/22 maxlen: 24
45.84.48.0/22 maxlen: 24
185.154.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7e:c8:39:1e:20:c1:56:bc:6c:1d:09:62:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4504d28e67a21ec96d95b27463ec0303fe1762c
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc96f01cfcfc450e33b36814d66aaba3bce889b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:48:09:64:ab:3e:6e:0e:64:6b:e4:1a:e9:
7c:a9:ef:e0:1e:cf:d0:f8:bf:be:c2:ef:7c:13:74:
ef:bf:1c:d6:95:5d:2a:51:ec:42:76:4f:ea:74:53:
1c:a8:9d:b2:a4:28:97:74:af:1e:a0:84:24:20:b1:
fe:f2:01:8b:d0:10:87:6b:14:4c:65:30:d2:64:d2:
d2:16:2f:ed:b6:98:a5:2c:87:89:f6:50:3f:91:16:
4b:7f:ff:3d:8b:28:b5:68:c2:bc:75:e2:63:f6:d5:
0e:24:f4:5f:47:c8:a9:1b:2c:5b:27:8e:3d:bd:fe:
53:70:53:a5:58:15:72:6d:fc:a7:14:0c:ab:ba:ce:
67:37:18:db:ed:c4:02:ad:be:83:63:7e:b1:fb:10:
f8:03:d8:0e:b8:8e:b6:8a:45:44:dc:ac:7a:3b:ae:
f4:f6:fd:65:38:51:65:a1:70:e5:61:5c:9d:44:14:
12:9e:c0:ab:e9:d9:8d:7c:49:c2:58:c7:4d:b2:d3:
53:3e:de:ac:4a:60:50:79:56:5e:c8:50:f2:4e:e3:
ba:08:d9:b0:e9:e3:90:48:69:93:c2:4e:6f:ca:2e:
d7:7f:9c:c2:e3:84:dc:6c:62:48:62:37:fe:22:74:
7c:01:2f:08:76:42:96:d3:94:8e:f8:31:71:94:1e:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:F0:1C:FC:FC:45:0E:33:B3:68:14:D6:6A:AB:A3:BC:E8:89:B5
X509v3 Authority Key Identifier:
keyid:B4:50:4D:28:E6:7A:21:EC:96:D9:5B:27:46:3E:C0:30:3F:E1:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/vJbwHPz8RQ4zs2gU1mqro7zoibU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/tFBNKOZ6IeyW2VsnRj7AMD_hdiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.180.0/22
45.84.48.0/22
185.154.252.0/22
Signature Algorithm: sha256WithRSAEncryption
40:0f:55:0e:45:46:1a:c4:5d:d1:0d:1c:b6:1c:ca:d8:71:13:
47:5e:d5:ee:43:59:d6:5b:0d:87:07:9e:2e:fe:23:1e:9d:cb:
bb:dd:78:8c:00:1b:1f:26:58:81:1f:84:a9:d7:fd:10:ad:01:
50:0e:00:8d:da:7d:ec:62:95:6a:e1:fa:27:a1:85:74:6a:97:
1b:88:fa:96:aa:ae:c5:ff:be:58:cc:87:12:3c:6d:31:8a:77:
c0:91:5c:ac:fd:77:bc:65:7c:29:76:b7:e9:3b:32:6b:37:c7:
fc:86:5f:b5:27:0b:3e:9e:ba:7c:a6:14:25:7c:fc:ec:cd:fc:
fb:26:2d:2f:b1:e1:f3:64:34:2c:db:58:0e:0e:b2:0b:fd:98:
07:54:b0:df:78:f4:2d:35:be:00:64:bc:08:28:8c:bf:06:b3:
4a:4e:df:a8:7c:46:c1:07:36:37:c2:58:96:ca:b9:a2:f5:45:
04:47:ed:5d:db:04:e3:b2:23:fc:d1:7e:ad:44:b4:57:9b:c8:
d7:cd:14:33:0c:d8:99:61:0b:e4:52:2f:08:f9:05:75:90:4e:
81:4c:6e:92:b0:24:57:d8:9d:d8:91:69:bc:71:fe:5b:07:6e:
66:28:ad:e1:5b:2e:e2:f8:47:35:e1:bf:8c:d8:1c:99:a3:b4:
11:ae:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:20 2026 by rpki-client