Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa
File: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (raw, json)
Hash identifier: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=
Subject key identifier: F4:05:DD:AF:77:BA:50:41:6E:D7:B9:97:B6:EF:53:AF:F4:87:AD:4D
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019F142629B8A0052C06572CDFED09760CD5
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa
Signing time: Mon 29 Jun 2026 16:11:13 +0000
ROA not before: Mon 29 Jun 2026 16:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47600
IP address blocks: 185.45.150.0/24 maxlen: 24
2a13:cac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:26:29:b8:a0:05:2c:06:57:2c:df:ed:09:76:0c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jun 29 16:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f405ddaf77ba50416ed7b997b6ef53aff487ad4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:80:fb:f9:3b:90:fa:a5:c5:4a:9a:a1:28:
c2:1e:73:75:da:ce:3b:f9:72:f3:82:29:b3:74:11:
48:bf:51:ab:6e:ba:83:ab:02:b6:28:64:1d:e3:c6:
9e:fd:9a:fd:d2:0e:7e:ec:04:48:c1:f3:e5:c3:02:
85:56:d3:64:bd:0c:84:de:c9:21:01:fd:4d:c6:92:
7f:ae:4c:45:b0:da:8e:48:ef:d0:c7:5c:fa:c3:69:
18:c3:3e:01:42:84:2c:e4:f0:11:d0:35:11:19:6b:
7d:68:81:0c:b4:cd:32:48:99:ef:39:9c:93:9c:1e:
6e:ba:34:39:88:f2:bb:f0:4e:fe:01:d7:96:be:53:
e3:d0:4d:d2:3f:b6:ef:16:f3:56:0e:b7:32:9e:49:
9e:94:a1:4c:13:42:ae:69:bc:f5:46:e5:32:fe:1f:
e7:98:05:ac:64:76:9e:ea:8b:c9:18:61:f0:3d:40:
54:0a:ad:5a:4e:f0:eb:9a:1d:6c:39:c9:d2:0a:c2:
81:ac:bb:33:f1:d0:36:bd:f9:50:6b:45:88:67:07:
44:a4:a9:3f:15:c8:4a:53:f7:7b:ca:5b:1e:52:74:
59:ba:aa:cc:77:08:e6:b5:3e:8d:2d:bb:0d:88:14:
f2:b1:39:34:7a:a2:d6:56:34:e3:eb:0d:f3:a4:38:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:DD:AF:77:BA:50:41:6E:D7:B9:97:B6:EF:53:AF:F4:87:AD:4D
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.150.0/24
IPv6:
2a13:cac0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:bc:77:44:e5:29:e8:f4:87:c4:2a:99:ca:8d:e1:4c:b7:fa:
6b:47:95:67:0e:5e:e7:a6:bf:30:95:3f:7c:9f:28:97:d8:71:
e6:cf:8f:f8:6c:6f:3d:ea:50:ae:5e:40:6e:d1:68:96:03:71:
d8:77:84:42:58:6a:5e:70:6d:48:71:88:53:8e:f4:8a:7c:e9:
0e:32:36:61:1e:c0:2e:c4:f2:d4:d5:e7:3d:90:24:3b:b7:dc:
4f:7c:44:b6:57:93:46:fa:50:d3:06:4b:23:82:1c:ac:db:fc:
d0:c1:dd:43:df:c4:02:b8:b9:ed:ae:b4:87:46:08:85:ea:09:
9b:25:90:e8:dc:69:cb:6f:59:ef:68:a3:28:da:94:bb:7e:75:
dd:06:01:4b:57:30:ed:4a:02:a9:3d:0a:9d:29:62:41:af:57:
2e:10:2f:98:b8:8c:e2:5d:8e:22:a3:aa:0b:58:ba:4b:ef:d5:
c3:84:50:9d:9a:9d:90:9d:04:19:bb:db:71:dc:fe:28:44:62:
08:22:fe:e6:96:9f:e2:66:18:20:b2:e8:b8:ff:1f:d2:01:45:
ed:aa:b7:d6:77:2f:a5:33:ee:65:a1:1b:62:fc:72:ad:74:5c:
14:d6:7e:57:fc:aa:90:84:34:d7:40:df:2b:3c:20:97:32:5a:
58:36:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:55 2026 by rpki-client