Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7uUkarpoLSKXZb8KKU7nGbdWub4.roa
File: 7uUkarpoLSKXZb8KKU7nGbdWub4.roa (raw, json)
Hash identifier: hF20KKlkDu1aUaMBzEWT8eh/FFNRjKjjLp20EJvOzNk=
Subject key identifier: EE:E5:24:6A:BA:68:2D:22:97:65:BF:0A:29:4E:E7:19:B7:56:B9:BE
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019D21F504CD92472F6480C444C241D97461
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7uUkarpoLSKXZb8KKU7nGbdWub4.roa
Signing time: Tue 24 Mar 2026 22:26:38 +0000
ROA not before: Tue 24 Mar 2026 22:26:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 45.145.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:f5:04:cd:92:47:2f:64:80:c4:44:c2:41:d9:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Mar 24 22:26:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eee5246aba682d229765bf0a294ee719b756b9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:ec:f2:97:bb:93:98:7c:6a:42:23:a1:d0:
a6:fe:31:42:12:a5:b0:eb:56:73:86:b6:40:30:ed:
28:93:d1:b0:4f:4a:82:d7:99:9d:48:98:46:4e:84:
87:fe:e3:5f:76:d1:81:61:8b:d1:a6:7f:f7:16:0f:
86:2a:59:88:cc:27:39:cd:36:a2:a8:01:28:93:40:
6f:bb:a9:04:4d:af:10:ae:2d:13:f5:57:cd:3a:b4:
44:f5:7f:dd:e1:6a:5a:9f:8f:0f:a4:33:8b:17:69:
e6:d9:ca:4c:af:b8:61:e1:ce:59:d0:44:c2:8a:70:
38:f0:e4:19:b0:b5:ec:db:06:0f:6b:01:b5:e0:54:
ab:8d:29:11:20:21:bd:2d:ec:d0:4a:5f:2d:92:94:
bd:fe:ba:63:2c:00:f0:36:bb:2d:26:32:82:31:ad:
c4:dc:ae:51:b1:62:42:bf:1e:a9:75:f0:cd:f5:da:
dd:06:d1:b2:e0:f5:d1:f6:b0:91:eb:10:cf:28:b1:
60:57:e4:10:c0:41:78:41:15:ef:b2:e8:7d:7d:1d:
75:2e:73:82:b4:30:6f:ec:54:63:98:54:5d:19:56:
4c:8c:1b:ea:4e:92:08:57:49:83:16:8f:9f:08:71:
f0:12:12:9b:f4:ec:b4:76:37:1f:fa:c3:af:f5:68:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:24:6A:BA:68:2D:22:97:65:BF:0A:29:4E:E7:19:B7:56:B9:BE
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/7uUkarpoLSKXZb8KKU7nGbdWub4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:db:d6:6a:aa:39:62:a7:15:8a:5d:01:be:9a:7f:aa:6e:b8:
a0:9e:83:9b:b2:5a:07:ba:e7:46:7d:70:23:46:75:c3:ea:32:
f7:81:b0:da:2b:e3:97:91:f1:1e:85:5d:cc:25:4b:04:84:80:
90:33:53:1c:19:58:83:45:d0:a8:d6:22:5e:9a:81:85:cd:76:
89:0b:31:6c:3f:e4:e5:68:db:f7:39:fa:61:1e:e6:61:ed:87:
ec:89:59:c3:a5:4e:02:be:4e:89:f9:0b:7b:8a:99:aa:fe:a5:
09:dd:ee:0f:61:64:49:9f:4b:86:40:7c:e3:7a:6c:31:e6:de:
6b:0b:26:54:ba:74:74:f7:73:af:c3:90:39:44:d2:fa:c4:1d:
e2:d4:11:39:74:09:ca:06:1c:d6:c7:57:a4:f5:29:3f:c8:56:
72:67:8e:a5:b3:f0:a6:cb:6b:16:1c:24:93:05:81:b6:76:59:
cc:c0:43:7d:b5:cd:49:ef:c8:b8:35:1d:39:0f:9d:7c:bc:5b:
ee:52:e3:99:3f:72:78:42:92:07:37:5e:4f:8e:4c:a4:1d:33:
64:32:fe:b2:70:72:01:ed:2c:86:5d:5e:a8:04:5a:dc:17:43:
a9:81:63:17:f6:d6:fc:93:20:53:8c:42:14:92:74:bc:68:42:
51:d8:95:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0h9QTNkkcvZIDERMJB2XRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYwMzI0MjIyNjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU1MjQ2YWJhNjgyZDIyOTc2NWJmMGEyOTRlZTcxOWI3NTZiOWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Hs8pe7k5h8akIjodCm/jFCEqWw
61ZzhrZAMO0ok9GwT0qC15mdSJhGToSH/uNfdtGBYYvRpn/3Fg+GKlmIzCc5zTai
qAEok0Bvu6kETa8Qri0T9VfNOrRE9X/d4Wpan48PpDOLF2nm2cpMr7hh4c5Z0ETC
inA48OQZsLXs2wYPawG14FSrjSkRICG9LezQSl8tkpS9/rpjLADwNrstJjKCMa3E
3K5RsWJCvx6pdfDN9drdBtGy4PXR9rCR6xDPKLFgV+QQwEF4QRXvsuh9fR11LnOC
tDBv7FRjmFRdGVZMjBvqTpIIV0mDFo+fCHHwEhKb9Oy0djcf+sOv9WiRGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7lJGq6aC0il2W/CilO5xm3Vrm+MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvN3VVa2FycG9MU0tYWmI4S0tVN25HYmRXdWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGZMA0G
CSqGSIb3DQEBCwUAA4IBAQB+29ZqqjlipxWKXQG+mn+qbrignoObsloHuudGfXAj
RnXD6jL3gbDaK+OXkfEehV3MJUsEhICQM1McGViDRdCo1iJemoGFzXaJCzFsP+Tl
aNv3OfphHuZh7YfsiVnDpU4Cvk6J+Qt7ipmq/qUJ3e4PYWRJn0uGQHzjemwx5t5r
CyZUunR093Ovw5A5RNL6xB3i1BE5dAnKBhzWx1ek9Sk/yFZyZ46ls/Cmy2sWHCST
BYG2dlnMwEN9tc1J78i4NR05D518vFvuUuOZP3J4QpIHN15PjkykHTNkMv6ycHIB
7SyGXV6oBFrcF0OpgWMX9tb8kyBTjEIUknS8aEJR2JWG
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:34 2026 by rpki-client