Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-nXKdM4f5Oyd2oc-QrYPPW3vW4Q.roa
File: 1-nXKdM4f5Oyd2oc-QrYPPW3vW4Q.roa (raw, json)
Hash identifier: NDOtJTFf+o+qYP+gDjM2OOAKtkA5ceugUSfKopjNTFA=
Subject key identifier: FA:75:CA:74:CE:1F:E4:EC:9D:DA:87:3E:42:B6:0F:3D:6D:EF:5B:84
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019EABBF271871A51921AFE80D901F3AFC3A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-nXKdM4f5Oyd2oc-QrYPPW3vW4Q.roa
Signing time: Tue 09 Jun 2026 09:38:11 +0000
ROA not before: Tue 09 Jun 2026 09:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1152
IP address blocks: 145.116.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:bf:27:18:71:a5:19:21:af:e8:0d:90:1f:3a:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jun 9 09:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa75ca74ce1fe4ec9dda873e42b60f3d6def5b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:f8:07:c3:f1:22:9f:3c:09:89:4d:19:06:
4c:0f:e7:33:ba:96:97:f4:72:ff:8b:8a:8a:91:d2:
2b:39:7c:c2:32:6f:f7:cc:ac:5f:b1:15:1a:51:2c:
c9:ff:2e:de:eb:12:c4:f7:e3:2e:10:6a:ed:ab:8e:
d5:f7:d3:4f:83:03:9d:34:21:59:41:df:a2:d5:cf:
f8:9f:1f:bf:e8:3e:26:44:3c:d6:fb:13:d5:ad:67:
05:1e:00:6c:c6:b5:2f:10:f5:b6:8a:5e:89:a6:ca:
1d:79:ef:46:c0:a1:d0:fb:b3:50:46:4d:19:39:3f:
41:d8:42:43:ae:d1:05:8d:d4:ea:b7:7a:e0:8e:ef:
ca:37:1c:3f:5f:9e:42:17:40:4d:8a:b1:2e:46:39:
8f:f3:13:b8:8e:e6:36:6d:5b:59:a4:cb:0f:3d:08:
33:7e:ae:d6:13:5f:0f:e2:21:2c:11:b7:e2:db:0e:
b1:64:61:9e:8c:29:b6:8c:4f:eb:23:30:f2:78:fe:
a9:4c:9c:f9:f4:81:e4:6f:3f:94:5a:a8:cc:75:64:
79:06:07:9e:a3:bd:c6:d4:4b:95:42:d8:b4:e5:16:
a8:5f:64:10:59:dc:49:41:40:6d:6e:65:20:17:4f:
d9:1b:d3:4a:c7:09:b8:25:c9:62:11:ee:fc:44:b2:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:CA:74:CE:1F:E4:EC:9D:DA:87:3E:42:B6:0F:3D:6D:EF:5B:84
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/1-nXKdM4f5Oyd2oc-QrYPPW3vW4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.116.4.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:c4:53:db:9b:0b:77:14:21:4c:17:1e:da:95:cc:98:a3:92:
42:21:99:e8:bc:9e:ed:5c:86:cf:2c:87:5f:93:37:b7:74:e8:
cf:00:df:ee:f9:a0:35:41:68:e1:72:e7:6d:54:b9:8b:f2:cd:
4e:ab:94:53:fc:cb:eb:ae:eb:62:41:83:1b:96:cc:85:11:7f:
6d:e6:b3:d5:fe:42:b6:4d:6d:7d:88:f5:b6:80:44:e9:1d:af:
e7:7b:35:84:05:94:de:19:32:54:5f:92:d2:1e:78:e0:92:c3:
70:d5:35:70:6c:50:00:6c:12:fe:27:92:cc:95:ac:0b:37:c1:
49:ba:ab:11:65:b5:27:81:b1:2e:ce:12:8e:7a:ad:d1:f6:8d:
30:e2:aa:0f:1b:6b:44:e4:1a:57:65:6e:c6:d9:ac:8e:b6:85:
49:15:6d:6d:69:bf:a1:2b:a4:e6:08:43:9e:99:d4:e0:14:4e:
9e:90:3b:d3:4a:ec:47:44:64:06:49:9d:d1:ea:74:b5:a4:7f:
51:e7:b8:3d:f0:9a:8e:85:1c:0d:41:5c:8f:3f:7d:48:b4:ff:
d5:4e:ef:ab:14:de:3a:3a:60:0d:34:83:00:44:dd:86:57:60:
5a:2e:39:2c:0e:ba:62:16:7c:0b:9c:c6:80:f3:c3:56:d0:e9:
64:1a:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:46 2026 by rpki-client