Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa
File: QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa (raw, json)
Hash identifier: A3a8EDhaNeBDQqGUsr5v16oyEecMADL0gGFhKmTivEo=
Subject key identifier: 41:E1:4E:E1:62:16:2A:FD:A0:82:FC:43:30:1D:08:21:8D:9F:7E:15
Certificate issuer: /CN=1898a256044256395c6a8459113d649a829af8e2
Certificate serial: 019F236889C4B6A3CFB28995E86AFBD4C87F
Authority key identifier: 18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25506
IP address blocks: 45.154.222.0/24 maxlen: 24
45.154.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:c4:b6:a3:cf:b2:89:95:e8:6a:fb:d4:c8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1898a256044256395c6a8459113d649a829af8e2
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e14ee162162afda082fc43301d08218d9f7e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:06:d0:28:09:83:3f:1f:3d:9f:52:b0:fd:
2f:bd:2d:f3:2b:b0:c5:e6:b8:11:2c:04:23:93:b8:
4a:a2:d9:0a:e5:a2:3b:4d:f7:1b:be:6a:6a:1c:42:
08:27:3c:56:43:4d:1d:fb:df:d3:57:5a:fa:be:bb:
a4:7d:36:d2:77:3a:ce:e6:0c:b5:7b:f8:6d:5e:d5:
28:3c:e6:c5:11:68:34:2c:da:4d:a0:4a:71:61:35:
b7:3b:18:46:88:01:2a:bd:30:ee:66:ea:52:fe:57:
5b:a6:8f:01:ff:6a:33:cd:9e:1d:5c:da:9b:24:a6:
0c:1d:b2:0c:04:74:9c:11:76:cc:d3:7a:da:80:7c:
4f:44:19:da:1a:e2:16:d8:c4:15:7f:58:5e:d4:80:
0a:16:b3:51:c5:01:2a:cd:9c:b1:24:f3:1c:30:64:
1b:ae:ab:31:f9:71:7a:00:26:56:40:ec:05:b6:2c:
91:b2:a8:6f:9b:c3:a0:9b:8c:47:75:24:25:e6:db:
ac:c5:1c:dc:39:dd:90:33:52:29:a0:8f:8c:8b:3f:
52:4b:eb:03:03:fb:93:87:ce:e0:9d:02:04:85:60:
fa:fd:54:ac:f8:fd:98:39:dc:e3:2b:02:3b:79:db:
a1:e1:5b:9b:e8:a6:fb:42:37:79:68:17:a3:d3:cd:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:4E:E1:62:16:2A:FD:A0:82:FC:43:30:1D:08:21:8D:9F:7E:15
X509v3 Authority Key Identifier:
keyid:18:98:A2:56:04:42:56:39:5C:6A:84:59:11:3D:64:9A:82:9A:F8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiiVgRCVjlcaoRZET1kmoKa-OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/QeFO4WIWKv2ggvxDMB0IIY2ffhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/GJiiVgRCVjlcaoRZET1kmoKa-OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.222.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:8a:30:4a:f1:b7:fd:a8:16:06:c5:d6:4a:a9:71:4a:5a:1a:
9c:b1:3f:5f:02:04:2c:52:61:9a:41:45:57:c7:f7:c1:e8:52:
0e:51:fc:36:78:27:37:6e:d9:d7:5a:f2:fc:b5:23:3c:f0:a5:
09:9e:7f:45:2f:7c:da:48:54:b3:1c:ab:06:9f:de:d0:31:bb:
27:9f:9f:01:49:5c:41:8e:dd:e2:cd:56:41:21:a5:17:cd:9e:
2f:0e:57:2a:f7:8e:e0:e3:c0:d5:c2:8d:54:76:6c:a9:70:63:
e1:65:70:e3:66:90:cc:ad:38:e0:93:9a:63:2a:11:d8:44:0e:
cf:63:b7:0c:2a:07:f5:22:f2:5c:28:d9:bc:ce:64:3d:f4:99:
fb:b7:4e:e7:d7:87:85:83:e0:74:35:12:e4:b9:fe:88:29:89:
02:1a:86:dc:8e:9c:52:85:9d:8a:4c:bb:4e:64:f1:0c:24:b8:
fd:59:5d:59:92:bd:a5:49:d7:00:71:17:66:3c:05:02:67:ca:
df:20:03:b9:3c:bf:7f:d7:92:19:9f:92:5a:16:16:b4:41:48:
15:8c:6b:25:7a:fd:61:0c:fb:99:bb:a8:fd:6b:e0:36:ef:8f:
03:04:18:43:10:b1:7a:86:65:23:77:1e:b4:24:41:e4:37:d0:
35:2e:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:24 2026 by rpki-client