Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa
File: dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa (raw, json)
Hash identifier: 1GDsLoNQgKVVMmHWMkg7eDdC4aDMTFzDQuH8RxzRAzI=
Subject key identifier: 74:52:3F:D7:15:64:AC:A2:00:D9:E5:45:43:AE:D6:26:0E:A9:3D:6E
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019DAB188F1588FD60BA6CC9737F226CE031
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa
Signing time: Mon 20 Apr 2026 13:33:26 +0000
ROA not before: Mon 20 Apr 2026 13:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200023
IP address blocks: 45.151.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:18:8f:15:88:fd:60:ba:6c:c9:73:7f:22:6c:e0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Apr 20 13:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74523fd71564aca200d9e54543aed6260ea93d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:c5:01:60:b5:74:ce:1e:97:da:51:39:a9:
3d:d8:3d:d9:bd:6c:2a:d2:12:36:34:54:28:d1:e3:
65:4d:4f:fb:2b:49:07:c4:a7:1e:25:e7:b0:f7:37:
90:21:de:99:2c:4c:e4:69:d3:57:4f:b5:f1:4c:6f:
c0:78:23:cd:d7:fd:8a:71:d5:8d:4b:3a:c7:75:bb:
15:92:2b:f8:b3:4e:c9:af:2e:3e:9f:19:4d:fe:19:
e0:96:7f:4f:c1:8e:f7:cf:5a:fa:f9:30:91:ec:7b:
d0:b1:e7:e3:bf:73:d1:1a:01:12:9a:2b:bc:04:81:
85:11:6a:98:90:f5:c6:9c:5f:9f:88:03:5e:21:ba:
2a:41:03:ee:c8:1f:21:9a:42:da:0a:b2:28:14:bd:
65:4d:e1:4b:81:31:25:ff:72:38:7e:2a:28:e1:a3:
22:20:45:6d:fa:fd:24:70:cf:0d:ce:de:8e:58:e8:
4a:c8:7a:44:5e:da:da:5b:97:c0:37:dd:73:27:36:
2f:5a:bf:ca:9b:2f:23:01:c9:b8:4a:47:ce:0d:ec:
1e:78:03:58:4e:0f:ee:80:56:30:8e:58:a8:5a:d4:
71:08:bc:1f:18:6e:ab:35:01:4b:a0:55:92:2c:57:
c9:92:17:85:a2:88:52:9d:e6:38:97:5c:b1:4c:f8:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:3F:D7:15:64:AC:A2:00:D9:E5:45:43:AE:D6:26:0E:A9:3D:6E
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/dFI_1xVkrKIA2eVFQ67WJg6pPW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:aa:c4:a4:ca:9c:86:c5:02:3c:64:da:f1:32:e8:05:86:f2:
12:e9:46:80:aa:03:31:6d:b7:bc:f3:83:b4:9e:16:45:5c:63:
45:16:30:c2:70:0f:1e:09:7f:b0:a8:cc:3a:4e:e3:a5:b6:d4:
b6:38:55:bc:90:84:25:64:89:64:d9:7a:1b:b7:ee:c1:92:a3:
53:a2:7c:7e:c0:64:74:c8:a0:02:84:8f:50:7b:c0:ac:c0:4d:
02:ca:2c:5f:36:11:19:02:77:2d:dc:9a:7b:af:c5:b5:31:2a:
a6:38:58:eb:ea:e0:0b:2d:4d:ea:1d:cb:1c:78:d5:b4:24:5a:
e1:89:83:31:0e:70:89:cc:5f:06:18:d2:26:4d:22:d3:24:8f:
5b:0b:6c:32:01:4f:3a:a8:69:71:e7:cb:ae:a7:f6:91:96:da:
6d:22:dd:a6:f8:48:48:c0:7f:72:f7:b3:3f:60:bc:f0:63:f5:
d5:48:36:e8:b4:e7:8e:cf:5a:4e:c0:96:51:41:f7:6a:9e:11:
fd:fc:74:79:7a:f5:c1:aa:4b:2c:2a:2f:5c:f3:18:1f:3f:1c:
80:ab:78:48:0d:e9:19:25:9f:c3:41:b0:89:75:26:93:2d:50:
4e:20:b4:01:a4:ff:0d:91:f2:03:55:a3:e8:4c:7c:c5:84:70:
de:a5:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:52 2026 by rpki-client