Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/mhFszU5SEmptr5GI0ZcCS5h2GPE.roa
File: mhFszU5SEmptr5GI0ZcCS5h2GPE.roa (raw, json)
Hash identifier: nvx25tg/A55YxF5P3zlSkrAozJAeP8DAEDZ0+PHZPRw=
Subject key identifier: 9A:11:6C:CD:4E:52:12:6A:6D:AF:91:88:D1:97:02:4B:98:76:18:F1
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019D1F5E2CEEB6B0C558239A8DEFDC4E330D
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/mhFszU5SEmptr5GI0ZcCS5h2GPE.roa
Signing time: Tue 24 Mar 2026 10:22:38 +0000
ROA not before: Tue 24 Mar 2026 10:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.158.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:5e:2c:ee:b6:b0:c5:58:23:9a:8d:ef:dc:4e:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Mar 24 10:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a116ccd4e52126a6daf9188d197024b987618f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:70:5f:36:1d:00:5e:1d:17:f8:8c:43:17:
fa:08:ab:8c:65:a9:cb:b8:32:3a:43:bd:ca:6c:0c:
c0:51:48:a6:09:81:74:f9:5f:f7:df:b6:aa:d7:ce:
30:78:13:90:65:db:f3:13:3d:69:44:26:50:77:ab:
0d:94:87:b4:c3:9a:22:e3:2c:54:c9:77:a2:ca:cb:
a0:fb:be:95:61:3c:6c:5e:7f:2c:16:3a:a2:a8:c5:
56:b7:21:fb:45:73:b3:53:74:bd:fc:87:ce:27:c9:
b2:58:fa:9d:19:78:de:24:d7:ae:4d:84:07:af:a4:
c2:49:a4:00:37:48:84:ff:33:0c:de:be:4c:d8:78:
37:45:7c:6c:61:36:2a:bd:56:45:c3:fb:1c:f4:69:
1e:2e:95:a8:9a:fb:47:a4:53:5c:1b:d8:20:79:9c:
e1:51:e5:33:21:4c:34:50:d2:30:d3:33:c4:d5:8d:
78:93:0d:16:f0:9e:d2:26:8f:5e:57:ec:36:66:9d:
61:d4:c9:88:3e:57:a8:8c:ad:a6:4f:45:cc:ef:3a:
1a:55:2f:36:3a:35:e9:3c:74:fd:76:a6:36:2a:6b:
4d:2e:fa:a7:ba:73:60:db:87:f6:ba:94:b9:cb:63:
9e:f7:fe:0e:22:7d:de:fd:37:3d:42:fc:7b:7c:f2:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:6C:CD:4E:52:12:6A:6D:AF:91:88:D1:97:02:4B:98:76:18:F1
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/mhFszU5SEmptr5GI0ZcCS5h2GPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a3:cc:2b:1d:b0:31:a8:a5:fc:a8:b4:77:65:0c:4f:28:0f:
e8:bb:8f:61:b0:1b:1f:10:06:58:e6:e8:73:9c:d3:96:22:7d:
3e:a2:9f:3c:c2:e7:67:16:83:de:2a:97:2d:77:0a:0e:b6:c8:
0e:6f:7f:3e:4e:33:07:5f:35:f0:0f:b0:17:4f:6c:aa:70:5c:
45:9d:d9:5a:73:61:1e:91:3a:22:b7:97:65:f9:d9:91:34:03:
a4:84:07:be:a6:82:44:63:ac:b6:92:5b:85:0b:f2:61:7b:c0:
c9:ae:eb:2f:cb:16:f4:cd:fe:ae:24:bf:45:85:25:08:48:82:
52:82:00:ad:84:04:1f:77:57:d9:05:6e:61:e0:65:e0:c2:b3:
71:c0:1b:36:6d:f4:c4:e1:05:18:84:84:5b:f1:45:58:78:19:
d9:2e:47:23:34:4e:40:4c:7a:b6:05:33:1f:09:73:f2:fd:ee:
d7:24:92:94:a0:2b:38:d5:0f:07:b1:45:01:d4:75:57:60:d4:
ce:a1:45:a0:54:2e:36:b9:95:17:f8:59:5c:1d:97:31:f1:da:
b7:ab:86:29:e1:e4:9c:8d:66:f9:b2:0d:23:e0:87:59:c1:3a:
81:ab:46:1c:f9:c6:59:c1:db:e1:1a:1c:81:f5:e0:e3:11:0a:
fa:ce:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:33 2026 by rpki-client