Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-VlFshiw1Baye32ykbQY5dLfzOU.roa
File: 1-VlFshiw1Baye32ykbQY5dLfzOU.roa (raw, json)
Hash identifier: OQlTzGPATqvfuQ3vyB/9AME1HYd347awAmIwKuoJKwQ=
Subject key identifier: F9:59:45:B2:18:B0:D4:16:B2:7B:7D:B2:91:B4:18:E5:D2:DF:CC:E5
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1DCC2C25DD73B75B7B7AB8CED2472B971
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-VlFshiw1Baye32ykbQY5dLfzOU.roa
Signing time: Sun 15 Nov 2026 01:11:53 +0000
ROA not before: Sun 15 Nov 2026 01:11:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 163.245.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:c2:c2:5d:d7:3b:75:b7:b7:ab:8c:ed:24:72:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 15 01:11:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f95945b218b0d416b27b7db291b418e5d2dfcce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:87:e9:18:a3:18:43:00:7c:81:77:9e:a7:
2a:44:5b:99:d8:ee:74:e8:b3:2c:74:5b:46:5a:2d:
e6:e7:9d:53:80:19:9a:3f:c0:d8:0f:79:96:07:b3:
fd:31:9d:05:16:aa:6b:fa:17:28:9a:c8:ec:15:ba:
06:d2:78:84:69:d8:80:70:5e:c0:9a:57:45:11:9a:
68:fc:c8:5d:1b:0f:f7:80:ba:d9:db:24:aa:a8:76:
82:14:19:be:f1:8f:7a:c6:8f:3e:9a:0b:79:31:ba:
f8:fc:16:37:fb:d9:b8:70:e7:b9:38:1b:a2:eb:f9:
79:48:4d:36:f8:9f:ba:3c:a5:e3:80:40:08:89:af:
59:40:d7:11:33:e9:bc:36:59:cd:e2:c3:2e:30:7a:
65:7c:cb:c9:3d:62:d2:91:8c:f4:a2:85:31:b2:66:
6d:94:e6:4c:9f:3b:d3:e8:69:38:d5:ed:f5:3e:e5:
f4:80:a0:6d:16:06:72:bb:f9:b1:e4:fe:fd:1d:b0:
55:2c:ec:1d:c2:08:d1:ea:15:05:5c:71:ea:2e:e1:
b0:df:b0:00:42:b9:d6:0d:d0:71:b4:9d:5e:13:9a:
f2:51:54:85:02:6c:00:48:8c:cb:4f:75:7f:a7:4f:
11:40:89:7d:c6:20:7d:13:1e:e4:6b:e1:07:ff:44:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:45:B2:18:B0:D4:16:B2:7B:7D:B2:91:B4:18:E5:D2:DF:CC:E5
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/1-VlFshiw1Baye32ykbQY5dLfzOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a7:0c:62:04:d8:2e:68:55:4f:e6:a1:48:d3:c2:3b:38:b8:
0c:e1:54:e7:e3:2e:11:5d:15:42:3e:83:61:dd:2c:41:73:01:
89:5e:5b:b6:5e:20:94:83:6f:dc:33:ef:84:37:97:b8:48:fa:
bb:a6:f3:70:4f:ae:b5:f9:90:3f:df:7e:54:9c:21:9c:33:a0:
5b:e6:7d:50:9e:a5:e2:50:5d:bf:ba:76:d9:ff:7d:35:76:2b:
fb:52:4b:b5:c6:63:70:b0:17:c6:74:25:a6:ff:05:a7:c6:94:
c4:f5:ec:02:22:b6:86:40:66:13:67:20:7a:ea:e3:57:1a:81:
70:44:5c:18:e4:2c:1a:4b:00:25:0c:1e:b4:a9:26:82:ff:f0:
03:e7:13:a8:47:7d:ea:cd:ff:4c:d2:c4:2d:0f:e2:3f:21:25:
d0:16:44:04:9a:53:71:8a:20:9b:73:02:7d:57:1e:df:ce:24:
2e:ef:e7:c3:5e:82:99:6f:f6:7d:b7:35:5a:34:76:82:55:94:
98:75:f5:d0:f9:6a:54:9e:c6:a7:58:ff:94:89:a6:7c:16:cd:
7c:5a:fd:fa:c1:7f:b6:79:88:48:83:39:dc:dc:04:c2:a9:88:
cd:65:3f:ba:82:53:ec:ba:0e:48:3c:ca:fe:72:b9:88:a0:98:
ab:0b:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:36:33 2026 by rpki-client