Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/3iAx3NVyYTkVE6jFLux9MKHx_Xw.roa
File: 3iAx3NVyYTkVE6jFLux9MKHx_Xw.roa (raw, json)
Hash identifier: vJNYI3LfXKyj+5e+zAR9OK/bqEKxrpJhkmOkx2duqqM=
Subject key identifier: DE:20:31:DC:D5:72:61:39:15:13:A8:C5:2E:EC:7D:30:A1:F1:FD:7C
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01A1CA34BCFF1E799AA9E7D7C8B929DAC1CA
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/3iAx3NVyYTkVE6jFLux9MKHx_Xw.roa
Signing time: Wed 11 Nov 2026 10:43:36 +0000
ROA not before: Wed 11 Nov 2026 10:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.158.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:34:bc:ff:1e:79:9a:a9:e7:d7:c8:b9:29:da:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Nov 11 10:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2031dcd57261391513a8c52eec7d30a1f1fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:00:a2:67:33:f8:b3:66:c9:94:51:95:1f:
08:0d:81:6d:3e:55:42:26:30:e7:ac:5a:ce:0c:58:
e0:db:53:ce:9a:74:27:62:e9:51:17:f0:ab:0a:a2:
5c:54:33:c5:b8:85:8c:0b:95:0e:f9:f7:1d:e8:b8:
69:0c:7b:b0:f4:4a:01:58:eb:06:59:74:d8:88:61:
52:d2:d7:eb:71:80:c5:db:db:82:b3:18:5c:6f:a1:
db:c4:d5:6c:d3:9f:93:db:7d:30:f5:6e:ae:f5:0e:
46:67:43:97:c5:70:aa:c2:ef:75:a0:6a:61:a5:0f:
04:ca:a8:a9:f4:bc:1c:cf:72:47:9c:a6:4f:7d:3f:
46:fe:b0:75:3e:2e:1b:a4:dd:9a:0f:76:ae:0e:04:
c6:62:af:4a:ba:ac:81:05:48:da:f3:90:f7:57:3e:
ea:84:d2:73:d4:ac:84:66:a7:24:68:92:ff:43:41:
f8:9b:9c:cc:df:34:6f:6f:48:57:d2:fc:ba:3c:c4:
e3:2e:58:2d:23:e9:3c:88:5b:9c:94:56:de:ed:58:
1a:c1:8a:8b:b3:56:a8:36:b6:4b:28:81:81:f6:3e:
09:7b:05:db:80:3e:6e:3d:77:9e:dd:41:8c:a4:7e:
8d:5e:46:b4:b6:c1:0d:62:6e:74:c4:73:5f:99:11:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:20:31:DC:D5:72:61:39:15:13:A8:C5:2E:EC:7D:30:A1:F1:FD:7C
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/3iAx3NVyYTkVE6jFLux9MKHx_Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/23
Signature Algorithm: sha256WithRSAEncryption
80:d8:f5:2d:6b:b1:c6:2d:30:27:6e:c0:fa:6f:eb:b5:09:fc:
af:12:f5:16:53:ee:ea:b6:79:d2:b8:22:ec:c3:94:53:3c:41:
f0:db:95:e1:88:9b:47:85:3a:07:60:3c:7e:31:e0:56:f0:35:
1b:67:db:f1:fa:f4:ab:b3:1d:c2:ce:f9:87:9b:a7:86:79:c4:
f5:1d:dc:b8:d2:a4:47:6a:da:6c:b6:2c:f7:95:8e:60:8b:17:
0a:1c:63:6c:6e:b8:3b:72:38:19:f2:9b:7c:db:02:d8:97:fe:
c8:55:1a:32:6c:8d:a9:12:f6:ee:0f:b1:b3:73:05:81:ef:58:
cd:ac:30:c5:47:3b:41:da:ec:63:9f:e2:bc:cc:05:20:f7:b4:
fb:f8:d3:f8:50:4a:a5:7e:48:57:5b:44:b5:48:68:b5:19:7d:
e1:dc:e8:bd:47:de:08:c1:2c:06:77:57:d1:37:92:72:e6:46:
23:72:f5:56:49:3c:2f:7f:34:b8:75:e5:ef:4b:c7:2c:f1:9f:
33:6d:c4:e5:0e:8a:dd:35:5c:9c:e0:27:7b:79:2b:8f:f8:a7:
ae:75:a1:a6:86:0e:a6:d6:9d:ce:8e:c3:60:2b:c3:09:c1:87:
6f:66:32:c3:55:b5:33:37:2b:ac:a0:c0:f9:61:d4:4c:fa:28:
8f:32:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:51:32 2026 by rpki-client