Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/IxM7jrIYQ0fDcM0dTV8GBbA5qnY.roa
File: IxM7jrIYQ0fDcM0dTV8GBbA5qnY.roa (raw, json)
Hash identifier: 7A/l1bf5UgIF3cr0ZZ6tcxEAdgV09T2Abt15BqBCTBY=
Subject key identifier: 23:13:3B:8E:B2:18:43:47:C3:70:CD:1D:4D:5F:06:05:B0:39:AA:76
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019F660EFFBCAAB160FF80BB250C5579F3A3
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/IxM7jrIYQ0fDcM0dTV8GBbA5qnY.roa
Signing time: Wed 15 Jul 2026 13:54:46 +0000
ROA not before: Wed 15 Jul 2026 13:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 45.15.104.0/23 maxlen: 23
45.15.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:0e:ff:bc:aa:b1:60:ff:80:bb:25:0c:55:79:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jul 15 13:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23133b8eb2184347c370cd1d4d5f0605b039aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:65:26:dc:8a:51:ad:11:2a:b1:42:e5:d9:
0c:a6:6b:7b:45:58:67:2b:16:31:9f:a1:48:e4:8b:
13:74:5a:57:40:58:23:f3:00:d7:45:9d:67:19:db:
5c:0a:4b:6c:33:29:97:52:d7:33:d4:bb:60:c1:09:
57:58:35:58:b1:ef:86:17:3d:ea:3e:c0:f7:4c:57:
2d:be:65:81:4d:2f:9e:cd:a8:b3:f5:cd:57:eb:ca:
77:a7:88:dc:3a:3a:12:64:c2:71:59:26:05:20:c8:
b3:b9:30:77:d3:5b:7f:1c:15:a2:76:ef:94:40:5c:
37:b4:54:11:9b:76:ae:04:bb:30:4f:57:d1:b8:3c:
1f:b4:43:b9:75:a9:5a:07:91:34:9a:97:a6:99:df:
71:06:54:29:68:3f:0d:fd:c6:2c:5d:60:80:1b:48:
ec:57:43:b7:cb:54:72:c9:2e:42:a2:40:2e:f7:0b:
94:f7:37:17:8f:73:5d:c5:ae:24:7d:dc:48:77:66:
fa:f5:4a:e1:4d:9b:3d:0c:43:53:37:00:85:fe:66:
ec:35:42:f7:cf:c4:2d:55:02:7d:41:df:d2:da:3d:
ac:bc:3b:7e:9b:72:32:67:9b:c2:1e:25:53:5a:c6:
3a:98:c6:fe:47:8d:cf:c9:7a:32:42:09:2c:92:fc:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:3B:8E:B2:18:43:47:C3:70:CD:1D:4D:5F:06:05:B0:39:AA:76
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/IxM7jrIYQ0fDcM0dTV8GBbA5qnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.104.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d2:03:3d:6f:98:1a:a9:57:59:4d:82:91:c7:d4:7f:d2:5e:
27:17:c3:01:a2:da:28:27:e0:f3:23:ae:02:52:07:b8:2a:ee:
ce:cc:e4:5b:1c:a8:0d:78:d7:ec:1f:51:7c:0a:d8:12:6f:66:
7c:f4:4e:48:f1:c0:8b:4f:43:c7:17:5d:52:e7:10:0c:64:2d:
64:43:24:8a:a4:b4:28:06:89:54:fb:ee:5b:90:47:84:67:f4:
21:f4:85:af:52:9b:0f:eb:b1:6d:e9:8f:9d:f3:03:c4:13:ab:
fe:e3:5b:d8:59:dc:e9:b2:5d:10:f8:58:27:9c:38:20:d5:f5:
24:9e:d5:73:1d:1b:07:56:27:d4:cf:06:95:80:e4:08:a5:8b:
3b:72:ba:2d:61:50:11:ed:47:56:e2:ca:04:c5:15:6e:a7:0d:
50:31:66:2b:63:60:6e:73:30:a1:a4:4d:bc:1e:e9:a2:95:06:
d9:15:8f:fd:3a:c1:11:f1:32:bf:16:f2:9a:33:23:2e:e0:57:
47:12:42:f9:51:e8:94:98:6a:65:50:fd:e6:1e:24:61:65:4a:
27:cf:b6:14:87:b3:b3:a2:25:89:a9:75:0f:18:9f:51:0b:6c:
b8:81:80:99:7f:ca:ef:62:9d:b7:0d:25:ce:bb:70:0b:e1:b9:
12:4d:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:11 2026 by rpki-client