Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa
File: 0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa (raw, json)
Hash identifier: AHBUN3IzppsPqNH2SnhoKLmN14OyJvW6LsX7/a5FGQI=
Subject key identifier: D1:5F:B0:DE:D0:E7:F4:88:BB:C0:47:FF:DC:F2:0F:3D:DF:15:91:45
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019D1C7A6E1191DC5154551FC4DE62EA4D35
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa
Signing time: Mon 23 Mar 2026 20:54:38 +0000
ROA not before: Mon 23 Mar 2026 20:54:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.159.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:7a:6e:11:91:dc:51:54:55:1f:c4:de:62:ea:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Mar 23 20:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15fb0ded0e7f488bbc047ffdcf20f3ddf159145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:1c:ac:2d:0b:80:49:85:fa:90:6f:9f:02:
e9:0f:05:3a:ff:71:bc:d0:1b:b9:a0:3a:4e:1f:c4:
2b:36:5c:0e:04:06:77:3d:f5:39:1f:a9:40:ba:87:
d6:d0:5c:c0:4b:10:c6:40:c1:73:2e:69:66:60:91:
cf:4c:d0:7a:37:78:a6:68:30:01:de:90:8e:06:f7:
b2:0b:80:7e:de:88:5a:9f:42:de:df:f8:81:60:5e:
86:fc:50:65:b4:56:d8:70:c5:46:92:69:c1:0d:4f:
39:94:21:4a:e2:ff:63:0b:5c:64:25:97:6a:d2:1a:
3d:00:71:f2:26:f5:ff:f0:0f:a8:e0:d4:31:ef:98:
c8:a5:29:10:1f:09:2e:3d:95:92:2d:5d:dd:bd:82:
3b:09:96:d4:7c:4f:b8:25:ad:a0:53:f9:f7:cd:42:
af:a1:dc:28:d7:4f:a2:bd:ca:8c:94:4c:fb:b1:b8:
db:cb:62:d2:4c:18:c2:5f:be:7c:fa:f5:5e:3c:46:
bd:37:cf:a8:4a:c1:d2:c4:c3:e6:2a:0b:1f:20:bf:
ae:6c:4c:9b:13:f4:db:f9:f2:df:c3:39:dd:a3:a2:
f7:12:70:14:d1:eb:04:bc:61:22:82:e0:4f:84:b7:
09:ec:b2:ef:bf:63:04:f6:17:96:db:cf:39:0d:ba:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:B0:DE:D0:E7:F4:88:BB:C0:47:FF:DC:F2:0F:3D:DF:15:91:45
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/0V-w3tDn9Ii7wEf_3PIPPd8VkUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.15.0/24
Signature Algorithm: sha256WithRSAEncryption
96:60:3f:f1:26:21:b2:ce:5c:20:13:7a:97:35:88:7e:1b:8c:
fa:ce:ab:bc:45:20:bd:4f:ea:92:b4:f4:54:dd:d1:a1:d3:80:
74:44:d4:f3:f1:ae:48:ca:be:f3:d2:b1:d9:24:87:20:ec:2f:
f2:3d:36:d8:2f:84:77:1a:0b:69:79:70:c7:b6:ca:bf:87:4f:
79:84:00:12:20:77:08:0f:64:c0:05:6b:22:17:0c:c3:4a:c7:
d5:6f:df:e6:1a:f5:37:b7:b5:ee:25:bf:cb:30:94:ed:b4:f3:
72:13:6a:11:01:2f:f4:93:a4:8f:60:8b:b1:b6:3f:ed:c0:e5:
13:84:15:0e:0b:99:74:52:ad:d6:90:33:a5:54:94:83:d8:e6:
69:c8:db:ab:6a:37:61:46:79:0d:65:0f:65:1d:c2:b5:15:71:
7b:1e:b5:63:9a:aa:62:0b:42:f4:f4:b4:ad:a1:7e:5f:4b:4e:
64:e6:26:58:76:15:54:d4:19:4c:36:53:13:c2:ac:37:24:a9:
84:5d:4f:70:1b:14:76:fb:2c:8d:5d:48:0c:47:b8:00:ce:37:
17:03:8a:d6:45:f2:0a:cb:5c:38:42:a9:bc:ba:66:90:94:58:
fa:04:c2:5d:61:54:dc:f9:b7:94:20:37:52:45:19:2b:32:e3:
38:53:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:06 2026 by rpki-client