Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rxsOsAfQCfpnPygBJXkmNU9TrA0.roa
File: rxsOsAfQCfpnPygBJXkmNU9TrA0.roa (raw, json)
Hash identifier: BzGan6UkCmSqoT0RpnvMGKr4jj9Z7q6ZylCSqpz2CVY=
Subject key identifier: AF:1B:0E:B0:07:D0:09:FA:67:3F:28:01:25:79:26:35:4F:53:AC:0D
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 019F23683744713E9EADA47675AFDEDCFBB6
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rxsOsAfQCfpnPygBJXkmNU9TrA0.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214171
IP address blocks: 45.144.16.0/24 maxlen: 24
45.144.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:44:71:3e:9e:ad:a4:76:75:af:de:dc:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af1b0eb007d009fa673f2801257926354f53ac0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:e5:c7:04:8c:c1:5a:70:98:47:b7:d4:5a:
24:b4:cd:64:30:20:dc:6d:9d:79:22:b4:42:d3:56:
8a:e1:84:1d:17:99:e6:3e:44:8c:03:60:b0:b7:dd:
40:11:3f:f2:19:8d:70:8e:56:40:4b:c9:10:a1:0b:
38:b7:db:ba:09:b2:b1:42:d6:b1:ab:d0:f2:c0:92:
2d:ec:66:78:d9:1c:7c:2d:e4:c4:5f:3e:20:da:1d:
9e:ce:93:26:8b:85:36:0a:b2:e6:27:3c:da:4e:b0:
da:96:8b:a7:8b:d2:ad:48:e1:c1:53:bd:70:ee:96:
5c:9d:0c:31:cc:2d:6f:31:30:60:1e:0a:da:f0:7f:
fa:82:74:53:ec:82:13:f9:a2:9a:c1:78:98:62:ef:
44:e6:3f:3e:a1:11:6f:b0:cf:8a:aa:bd:4e:30:10:
c5:e3:9e:5a:09:6d:f8:20:58:eb:62:0d:61:c2:b5:
f7:0f:5c:fd:60:2e:b0:b3:3c:cc:75:3f:9d:0e:ef:
63:cc:0c:17:7b:f8:e1:1d:01:88:35:f5:1c:9d:b5:
4c:a6:6a:74:76:b3:71:32:03:80:7a:2f:15:8f:8a:
f4:e4:c7:1c:dd:74:b1:96:a2:fc:84:65:06:a4:92:
d1:a1:1e:79:9d:fe:5a:85:e8:ac:19:18:86:b2:33:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:0E:B0:07:D0:09:FA:67:3F:28:01:25:79:26:35:4F:53:AC:0D
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/rxsOsAfQCfpnPygBJXkmNU9TrA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.16.0/24
45.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ec:cb:79:b4:9b:ed:a9:b5:03:1f:fc:2f:18:c0:c3:e3:7d:
7c:01:81:76:6e:96:be:34:22:13:43:fe:1a:46:e7:d2:36:80:
4d:95:cc:22:9b:aa:f2:a4:b7:26:20:2f:04:16:cd:39:18:bc:
79:92:14:dc:a7:c5:13:0a:b9:ac:4a:6a:f2:9c:15:73:86:47:
90:6b:17:50:df:20:5a:6a:ab:69:20:3a:ba:8a:b9:93:cc:10:
32:96:53:d2:65:7a:a5:ff:4b:ee:f7:23:91:22:1b:bb:23:71:
21:c9:b8:2a:c6:16:a8:3a:93:2c:68:51:43:f9:bd:d9:90:99:
fe:dd:3a:3c:8e:ad:84:ff:7b:ee:93:63:fd:29:c6:e4:ef:21:
00:c5:96:93:70:83:f9:b1:5e:60:21:67:11:3b:53:e6:73:67:
87:cf:bf:dd:3d:19:f0:1e:f4:27:99:4b:46:67:7e:e9:f5:07:
27:dd:96:e9:30:df:ed:62:fe:c1:a8:3d:c3:2a:ee:49:e0:64:
bc:f6:3d:3c:f4:e5:24:fd:b8:0c:52:f8:71:0a:1a:d3:7e:be:
18:2b:a8:a0:93:e1:8c:36:34:da:e2:0b:64:96:cf:b8:67:ec:
1c:72:26:b2:3b:4c:29:0c:e0:92:58:60:41:56:d8:fa:fd:00:
68:b8:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:12 2026 by rpki-client