Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa
File: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (raw, json)
Hash identifier: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=
Subject key identifier: 45:ED:D9:78:E6:B7:88:FC:49:D5:41:8E:AF:5B:36:DC:E4:28:84:E6
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 019F23685FF0262FF9D39EAB43BD41BF3962
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142594
IP address blocks: 167.104.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5f:f0:26:2f:f9:d3:9e:ab:43:bd:41:bf:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45edd978e6b788fc49d5418eaf5b36dce42884e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:de:92:4f:9b:c1:68:51:18:65:c4:f0:c5:
d6:6a:34:fb:d9:7b:28:9a:e9:d1:1d:dc:ff:f0:c3:
ce:f6:da:99:3b:73:94:2c:35:e4:7d:c3:38:1e:79:
86:c1:8d:79:1a:4c:38:0a:cc:50:db:6a:b4:a9:f5:
3e:9d:51:d9:06:b9:65:bb:8c:5c:89:97:95:5a:1f:
86:ca:a3:b1:bc:d4:45:e7:e6:fa:fb:93:74:c2:2c:
2b:75:6d:16:e2:d5:23:5e:ef:59:70:ab:30:3e:3c:
f0:bd:1e:ff:00:ce:5b:19:db:f2:8f:13:9d:78:65:
e7:44:49:f9:46:5a:8b:fd:99:41:47:12:75:c0:81:
1a:98:5f:5c:59:38:d6:84:49:d3:b4:ea:43:74:00:
d9:05:31:8e:57:b0:09:cf:74:82:81:37:19:73:a1:
ba:21:b2:90:96:1a:79:98:67:95:03:d6:a8:4e:d7:
7c:6f:64:d7:02:ef:c3:f9:47:bb:c1:dd:6b:99:5a:
a0:13:03:39:28:b8:98:18:38:a2:f0:39:23:47:6c:
8c:1f:41:3f:6c:cf:f9:e5:41:26:1b:ca:da:40:4b:
bd:54:bd:3d:a1:80:91:7d:2e:c0:7b:90:2e:84:19:
a0:08:c9:45:c8:ee:4e:4f:8d:fc:29:fd:ae:a3:a9:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:D9:78:E6:B7:88:FC:49:D5:41:8E:AF:5B:36:DC:E4:28:84:E6
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.200.0/24
Signature Algorithm: sha256WithRSAEncryption
25:76:f0:12:a7:3d:b1:e5:4a:0f:e5:93:42:e7:b8:3e:44:f4:
55:04:7e:54:ab:80:60:55:c3:68:aa:4a:85:40:60:e5:75:4c:
24:1e:86:cc:74:90:23:51:26:99:9c:32:99:d9:d1:a5:29:eb:
77:44:3d:3e:c6:d9:d1:30:b8:0e:f1:e2:dd:6d:20:e3:63:72:
dd:cd:bb:ff:74:d4:7c:34:b8:2b:2a:de:61:47:dd:cc:8b:c2:
15:d1:71:e9:ca:b6:62:f9:10:08:4a:db:8a:a9:b6:66:66:09:
e0:7c:82:5c:58:a0:f3:52:54:05:ab:56:53:85:6c:79:0c:45:
08:4a:65:8c:a8:e7:ea:84:3f:40:37:dd:15:f1:df:67:8f:a1:
b1:91:1f:ee:fd:73:c5:d9:9d:e6:2c:03:0b:a4:04:b5:6e:60:
86:fa:38:3d:a7:87:9d:ba:d6:cc:67:47:62:17:79:d9:d7:d7:
81:82:35:c8:91:c6:a0:ea:97:31:7d:07:39:6e:ac:8d:4f:de:
0e:3d:7e:77:f2:48:eb:12:d5:ba:4c:21:2b:d2:8b:76:ae:93:
3b:18:69:93:ce:40:f3:78:f8:73:4a:5c:0b:14:ba:e8:e4:a6:
a2:8c:7a:39:5b:9d:36:45:d3:59:57:85:8c:8e:c2:9f:3a:89:
ff:8b:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:37 2026 by rpki-client