Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ffEiQR1LyFgGfUaIi9dASuQXufk.roa
File: ffEiQR1LyFgGfUaIi9dASuQXufk.roa (raw, json)
Hash identifier: iUbnCacgMGbeVLnZnCqMlitjLfWTM9zmDkofZinq+ag=
Subject key identifier: 7D:F1:22:41:1D:4B:C8:58:06:7D:46:88:8B:D7:40:4A:E4:17:B9:F9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0CC56AD9EA7B53F562184B2C825FD8595
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ffEiQR1LyFgGfUaIi9dASuQXufk.roa
Signing time: Wed 23 Sep 2026 03:37:07 +0000
ROA not before: Wed 23 Sep 2026 03:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64150
IP address blocks: 45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:56:ad:9e:a7:b5:3f:56:21:84:b2:c8:25:fd:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 23 03:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7df122411d4bc858067d46888bd7404ae417b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:8a:ef:61:c8:47:60:9c:f2:fc:59:c8:d9:
47:8e:0c:2e:db:ae:65:19:40:e9:d8:67:f4:df:fe:
8a:f5:b0:43:c1:17:9b:ca:b8:b3:24:3f:1d:f5:d4:
2e:a6:01:9b:1b:ab:97:75:ac:4f:4c:2f:4c:cf:b5:
37:01:d8:82:e7:7c:ee:72:7b:3c:ac:81:dc:90:76:
11:28:fa:fb:8d:3a:8c:30:bc:9a:2c:4c:2b:ef:8c:
2e:f2:ec:2a:6c:fb:77:b1:3d:12:d9:5c:cf:78:6a:
46:71:b6:21:82:1e:60:44:c8:e4:18:55:57:a7:03:
9a:57:6b:f0:de:77:8c:09:37:6e:7a:de:c3:69:22:
37:8d:21:d4:0f:b1:02:ac:31:79:a4:df:59:be:d3:
dd:f8:67:ea:0a:f6:5f:c5:40:cb:8b:0f:87:f5:6d:
da:58:ea:bd:f0:eb:68:7a:ff:3d:e1:fe:e7:0c:ef:
d5:58:56:e4:e3:17:b3:17:06:96:1c:b1:e2:f8:ab:
54:38:58:ad:c5:18:1b:86:d3:e6:2a:43:96:99:a8:
e9:15:9a:57:db:cd:b0:28:38:0c:88:85:10:9a:30:
67:35:5b:82:58:dc:d6:d7:ee:69:08:21:d1:25:e1:
62:f7:04:fb:71:cc:fe:b2:8b:b9:55:6e:54:47:aa:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F1:22:41:1D:4B:C8:58:06:7D:46:88:8B:D7:40:4A:E4:17:B9:F9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ffEiQR1LyFgGfUaIi9dASuQXufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.56.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:56:ae:cf:0e:75:86:ab:c4:61:82:36:c0:d7:b7:a1:3b:10:
0d:47:c8:fa:51:cc:11:7a:81:e2:43:f0:36:a8:6f:71:a5:ab:
15:7a:14:af:b6:fd:4f:ea:7f:f2:aa:f3:15:be:e1:44:87:71:
a7:f3:8b:9c:03:7a:ad:ee:80:21:76:8f:29:34:88:11:f6:64:
01:8d:e0:d3:05:28:eb:42:8c:bd:32:13:ec:9d:14:1b:fa:c0:
d9:86:91:f3:fe:f2:2c:d2:15:e8:66:2a:90:cb:77:c7:79:f9:
58:d7:18:79:fe:08:c9:7d:8c:c6:5b:67:f8:c4:cb:e4:2b:92:
fd:9d:a0:b2:68:53:e9:0a:d0:5b:c0:88:2e:7e:61:64:25:d5:
8c:57:cc:23:62:9c:15:0c:05:8c:4c:0a:8e:7d:4f:2b:30:fd:
f0:25:d9:b7:03:78:17:71:2e:e9:9a:53:9f:b8:15:d8:75:57:
b2:d2:c8:56:60:39:18:dc:e1:1f:c8:3e:5b:25:f0:68:4a:a1:
35:b1:76:69:9d:b8:27:88:59:0a:30:3a:41:e8:23:94:2a:ae:
ce:83:34:21:8f:53:f8:50:d8:66:17:0b:34:74:cf:dd:fb:28:
fe:33:00:ca:58:c9:52:ae:81:0e:80:75:fa:be:ef:33:cd:de:
df:e9:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:51 2026 by rpki-client