Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EnUvjP-IlK1TjhIK9PapivGlbHI.roa
File: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (raw, json)
Hash identifier: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=
Subject key identifier: 12:75:2F:8C:FF:88:94:AD:53:8E:12:0A:F4:F6:A9:8A:F1:A5:6C:72
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F23685321A56A5305C535EE6EA118FB21
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EnUvjP-IlK1TjhIK9PapivGlbHI.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202808
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:53:21:a5:6a:53:05:c5:35:ee:6e:a1:18:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12752f8cff8894ad538e120af4f6a98af1a56c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:fc:bc:d0:70:0f:da:82:57:1a:40:fd:99:
70:b7:bc:fa:a7:f5:fa:6a:e8:42:e5:61:ba:cb:e2:
26:df:f4:05:70:b3:61:75:39:fd:28:51:17:49:be:
6a:a9:d6:30:84:1c:b0:ca:73:35:15:01:24:ee:5f:
3a:dd:d4:ca:69:e8:08:6c:95:2c:3c:90:5b:4a:b2:
dc:0b:27:72:80:97:54:54:c6:80:45:63:23:96:bf:
bd:b1:62:78:34:c2:36:4c:9c:d1:c9:1b:54:76:ea:
7c:aa:97:02:da:2e:01:68:42:54:04:e8:b7:51:ae:
85:8b:c8:18:ce:ef:c7:22:06:95:3d:b8:ad:41:84:
c7:19:7a:42:0a:19:a7:83:7d:fb:e8:ae:26:54:0e:
38:e9:c1:c7:50:aa:5e:cb:37:a2:78:1a:ff:2a:a5:
3e:c9:c0:ab:0d:77:7c:46:7b:57:64:74:59:99:c4:
d8:73:1f:8e:09:ae:2e:c3:89:27:ec:b9:06:d2:77:
bc:23:28:03:38:72:35:dc:28:84:1b:56:c1:34:2c:
20:cd:d3:66:03:34:60:a3:ad:98:ae:06:31:09:3b:
3f:64:de:d5:02:03:b5:da:f2:bf:90:20:d1:09:d0:
e6:d0:6a:ab:00:d8:84:f7:39:36:bd:13:13:1f:6a:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:2F:8C:FF:88:94:AD:53:8E:12:0A:F4:F6:A9:8A:F1:A5:6C:72
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/EnUvjP-IlK1TjhIK9PapivGlbHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:15:07:cd:aa:5c:c6:2c:38:fd:8b:c5:3e:66:8c:02:fe:1a:
58:e3:cc:5f:7e:9a:c4:bc:7c:da:8e:bf:30:ee:cf:b8:95:8a:
74:5c:b8:70:a0:1e:44:20:2b:09:a0:55:0c:e8:5c:f0:ee:d8:
2c:2a:e3:9d:34:1c:cb:d4:bd:3f:e9:2c:07:95:66:55:7c:e4:
6a:8e:08:64:93:f9:91:2a:5f:2d:61:4e:c5:fb:6b:37:d1:6b:
34:9a:de:96:2c:ea:50:9f:7b:4c:03:e0:2d:0f:b9:b7:03:30:
9f:3d:5a:5f:37:dc:26:90:1a:47:27:c4:30:fe:70:8a:3d:65:
a3:38:47:9c:95:9f:22:36:cb:49:ac:52:d8:6d:3b:2d:71:87:
d8:16:64:13:6f:b3:82:b0:c1:75:6e:e2:a3:3a:64:42:bd:5f:
38:e7:df:f9:de:33:28:d1:ef:9b:83:42:b5:59:ad:82:5f:b9:
c7:65:6e:1c:eb:63:9f:fb:39:18:42:06:27:7c:45:d7:8b:5d:
f1:2a:aa:74:75:00:98:f3:bb:a5:b7:2d:ca:27:0f:1d:ed:b7:
e0:3e:7e:0a:bc:75:77:c5:39:49:34:aa:c3:66:74:2a:4e:79:
a4:ad:07:15:c3:63:53:10:47:c6:34:0d:9d:f4:40:cd:bc:76:
0b:11:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:35 2026 by rpki-client