Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/kIMbXdJtsDQKax2xphZaFN7nTGo.roa
File: kIMbXdJtsDQKax2xphZaFN7nTGo.roa (raw, json)
Hash identifier: 0ama1VpnrdgMASVoDbU/VZGJ8RaYQqmTeKUTSxZsyFA=
Subject key identifier: 90:83:1B:5D:D2:6D:B0:34:0A:6B:1D:B1:A6:16:5A:14:DE:E7:4C:6A
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019D16556A84E286246B872873DCCA5B46A4
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/kIMbXdJtsDQKax2xphZaFN7nTGo.roa
Signing time: Sun 22 Mar 2026 16:16:29 +0000
ROA not before: Sun 22 Mar 2026 16:16:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 45.158.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:55:6a:84:e2:86:24:6b:87:28:73:dc:ca:5b:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Mar 22 16:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90831b5dd26db0340a6b1db1a6165a14dee74c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:8d:6b:80:71:5e:e6:cf:b3:13:2f:38:23:
a3:dd:54:1c:f2:25:07:8c:71:35:d5:e9:83:3f:b6:
ab:d7:02:66:68:dc:09:00:f3:bd:a1:26:ca:43:ad:
48:0b:f0:ca:b0:5e:47:d5:ee:1e:19:4c:fd:27:2f:
17:40:07:87:44:2b:e3:53:2c:e4:94:e4:9e:07:c1:
19:a5:fc:f9:d6:11:01:6e:13:49:a0:d4:27:e8:f5:
90:fa:3c:c0:5d:f8:e4:88:e9:4d:a8:cc:f2:2e:2f:
29:54:a6:b3:03:44:30:a4:34:8d:3b:1a:08:b6:f1:
02:0c:db:63:59:21:7c:3b:d9:8f:9d:bb:be:90:a1:
71:15:9b:fa:6a:73:ad:a0:30:80:19:c6:d7:81:a8:
6b:0b:df:72:87:fb:82:52:74:43:4a:8b:38:cc:73:
49:10:0f:16:b4:c2:7c:22:9f:42:86:b4:87:50:a4:
5d:c5:75:a1:4c:30:5e:38:8c:93:97:9e:6b:68:e3:
fc:e6:1b:a9:ec:b8:94:73:57:21:a5:09:75:14:8e:
fe:46:bf:a7:ea:11:22:6b:73:ea:a7:19:1e:58:25:
19:db:22:82:75:3c:14:56:5c:9a:b0:0a:0d:53:03:
6e:04:1c:69:ce:e8:a8:5b:57:3e:6f:56:73:c0:e4:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:1B:5D:D2:6D:B0:34:0A:6B:1D:B1:A6:16:5A:14:DE:E7:4C:6A
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/kIMbXdJtsDQKax2xphZaFN7nTGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:9b:e1:b2:64:b2:fc:e2:19:2e:b9:cb:0a:f2:aa:f9:2c:06:
66:d6:53:e8:31:9e:09:7d:dd:83:40:02:30:4e:8b:8e:63:b2:
0f:cd:56:33:67:94:10:64:29:83:e4:83:7b:9c:f6:27:6b:fc:
dd:91:25:9d:67:ac:d3:16:71:40:36:ce:19:3c:de:b9:60:69:
57:00:87:c8:14:73:71:d2:2a:37:e7:4e:30:3d:ab:6e:b8:b5:
58:6d:46:78:3c:c6:50:12:ff:8b:7c:ec:76:ff:03:dd:81:99:
20:c5:77:3e:a6:cb:1b:bd:f3:e7:8a:62:78:59:82:0d:9d:9b:
db:de:ca:c7:f3:55:14:f6:29:66:4f:42:a4:cc:c7:42:26:92:
ac:12:a3:fc:e9:7f:89:27:b5:5d:84:ce:1e:4c:f7:f0:73:fb:
af:4e:30:9d:c3:b6:f1:88:94:81:cb:35:2c:fb:a3:b3:98:93:
68:25:bc:00:5d:97:ba:db:19:f8:3f:8c:c3:ad:73:61:96:af:
d2:33:c5:07:1e:57:ab:cd:48:4f:08:7c:2e:ba:1d:a4:2e:c3:
2b:b4:04:91:e6:b2:fb:81:2d:4a:cf:5d:d0:cd:81:91:77:e7:
4f:80:0e:2b:29:01:e6:7b:54:e4:ec:70:d7:3a:da:1f:6b:7e:
8c:29:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:10 2026 by rpki-client