Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/1DLo26SW3RxP503TL1JHns0NU8I.roa
File: 1DLo26SW3RxP503TL1JHns0NU8I.roa (raw, json)
Hash identifier: OS503Q3stIleem4kEzlsVyVPsit/jhabxYiInNJDr0U=
Subject key identifier: D4:32:E8:DB:A4:96:DD:1C:4F:E7:4D:D3:2F:52:47:9E:CD:0D:53:C2
Certificate issuer: /CN=0cc581c34696cce2db349ca40b486fb39c7a6bed
Certificate serial: 019F2368CD0954CA08C415B5CA4F916DDB40
Authority key identifier: 0C:C5:81:C3:46:96:CC:E2:DB:34:9C:A4:0B:48:6F:B3:9C:7A:6B:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/1DLo26SW3RxP503TL1JHns0NU8I.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208654
IP address blocks: 45.85.148.0/22 maxlen: 24
2a0e:c680::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:09:54:ca:08:c4:15:b5:ca:4f:91:6d:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc581c34696cce2db349ca40b486fb39c7a6bed
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d432e8dba496dd1c4fe74dd32f52479ecd0d53c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:c3:99:82:09:e6:6a:bc:a7:a7:f8:ba:24:
15:08:48:73:d6:4f:af:03:f3:11:49:42:e4:85:0f:
64:be:f8:2f:a3:ec:ec:09:03:df:73:68:ee:bc:02:
e6:84:23:67:0b:84:8f:28:ad:a3:a0:d9:2e:40:2f:
56:2a:ca:b7:ea:65:b5:cb:83:3b:8a:5d:0a:1f:97:
04:7c:46:48:b7:45:7b:76:5e:07:33:73:a5:b4:78:
ee:5b:eb:cf:80:99:0f:23:bd:89:a2:fe:77:d2:76:
93:f4:ca:68:ec:b8:11:0f:71:f2:89:4e:35:5d:c0:
ae:c5:c3:1e:28:f4:13:4a:25:c3:00:71:67:5a:a5:
41:09:c1:d8:7e:1b:32:12:9c:17:67:c5:8a:ea:95:
80:9a:32:f5:09:c1:fd:a8:1d:3e:e2:e0:a8:c6:d8:
98:4a:0b:8d:f5:de:17:32:50:2c:cd:80:fc:38:37:
a4:75:99:3e:38:6a:0c:4b:61:5d:33:d5:d5:36:92:
62:b4:d3:9f:fd:54:5e:85:6c:83:cf:16:9f:5a:f8:
2b:8c:fd:44:9d:bd:07:cb:62:80:6b:a5:2e:11:fd:
84:a3:39:85:14:c4:95:84:58:47:1d:6b:f9:ea:72:
bc:6f:ce:08:7e:a4:2e:4f:89:f5:42:cb:54:61:9c:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:E8:DB:A4:96:DD:1C:4F:E7:4D:D3:2F:52:47:9E:CD:0D:53:C2
X509v3 Authority Key Identifier:
keyid:0C:C5:81:C3:46:96:CC:E2:DB:34:9C:A4:0B:48:6F:B3:9C:7A:6B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/1DLo26SW3RxP503TL1JHns0NU8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.148.0/22
IPv6:
2a0e:c680::/32
Signature Algorithm: sha256WithRSAEncryption
b8:56:f2:37:05:e0:2e:8e:3b:de:82:d4:78:9e:d2:a0:0c:13:
61:bf:94:60:61:9e:be:77:b7:d8:75:92:93:32:6b:3b:70:27:
af:dd:70:cf:19:bc:59:6b:c4:d8:b1:e4:94:f4:64:c8:a8:bc:
6e:1e:57:2a:4d:57:ed:13:d9:88:71:ff:f8:4f:88:e1:f0:57:
38:35:d1:67:e5:69:96:5e:f7:41:67:27:5d:d8:dd:de:4f:d0:
32:13:cd:81:4c:03:fb:3a:59:d2:a6:0a:3b:97:b2:19:19:d5:
46:83:19:52:cc:9b:20:5e:7d:49:9f:28:ba:2b:9b:72:16:4c:
76:44:e9:94:a1:dc:e0:8f:ad:c0:5b:40:ce:2f:56:99:d3:f5:
67:20:47:83:45:a2:aa:80:b2:9b:d8:0e:98:10:99:08:ae:66:
a4:32:33:a4:07:ee:34:d8:01:ca:96:36:de:57:13:2f:05:62:
ac:7e:8c:ff:6e:2b:5b:df:34:7b:02:5b:b8:77:5b:01:f8:9e:
bc:3c:71:6c:f1:2b:72:37:a1:45:81:47:0e:63:4e:e9:38:6f:
41:dc:c9:95:c4:d0:bf:24:db:7d:00:d3:9e:e4:78:48:2d:f5:
81:cf:b0:c0:c4:65:91:2c:26:19:06:d7:d0:af:05:d7:f6:c1:
29:dc:d4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:45 2026 by rpki-client