Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa
File: 1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa (raw, json)
Hash identifier: a9i0fGKabjqKLT5yhxSy3PgCaJI26jiufuEnDd1W9OI=
Subject key identifier: D4:61:45:FA:5A:B7:C6:FF:F3:E4:B6:B3:F0:DF:2D:3F:D3:68:14:7D
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019CE1ABFC9E796E4C35BDE82894D68ABC89
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa
Signing time: Thu 12 Mar 2026 10:51:10 +0000
ROA not before: Thu 12 Mar 2026 10:51:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.129.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ab:fc:9e:79:6e:4c:35:bd:e8:28:94:d6:8a:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Mar 12 10:51:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d46145fa5ab7c6fff3e4b6b3f0df2d3fd368147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:b1:52:d7:22:41:64:87:82:d7:f5:8c:b4:
50:56:de:a2:7d:84:d1:83:6b:ac:c3:cc:76:77:17:
47:c5:b4:af:b7:e9:14:bf:71:24:a1:69:73:08:20:
95:53:4a:7d:77:c8:5c:7b:5b:43:e1:ce:05:1a:68:
db:21:53:6d:ae:ce:62:9a:a5:bc:9c:c3:d3:ec:77:
22:55:b5:93:8e:ad:47:d8:89:ef:86:73:92:d7:8d:
b3:6a:33:1c:2e:7d:00:e5:e4:ce:ba:5c:ef:b6:f0:
16:b6:48:7c:17:0f:ee:f1:a9:e1:e3:47:77:99:c0:
a0:09:b6:3c:ca:23:fe:93:10:a9:88:eb:a9:ac:e1:
11:9d:6b:fd:07:15:80:93:78:3d:2b:5e:ce:b3:7f:
36:89:9c:fc:42:04:51:72:0d:23:19:32:74:04:0d:
d3:4c:be:6b:76:ac:61:e1:d1:d6:b3:23:2f:12:ef:
a1:7a:92:a3:40:0d:f7:a2:be:72:b8:ca:76:cf:ab:
05:e9:35:6f:e3:13:44:ab:ec:e0:77:2d:98:c7:7e:
b2:37:d7:bb:79:19:60:7e:57:e1:c1:16:43:2a:8a:
30:0c:3f:c2:f7:38:45:66:6e:da:14:18:ee:42:09:
d1:8d:07:43:8a:1b:6c:f2:93:bd:5d:c0:d8:af:98:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:45:FA:5A:B7:C6:FF:F3:E4:B6:B3:F0:DF:2D:3F:D3:68:14:7D
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.226.0/23
Signature Algorithm: sha256WithRSAEncryption
01:5e:4f:a9:14:a4:6e:0d:2c:4a:6a:89:9c:d1:ac:9c:4e:6d:
1c:a4:b3:81:0a:40:c3:73:40:d7:43:a1:34:32:4f:8f:39:61:
d7:38:b8:f3:29:a6:f4:72:64:13:67:8c:f5:4e:86:86:ab:63:
a5:22:4e:31:ea:60:92:5e:9b:6d:59:72:6e:67:36:64:3e:43:
51:8c:38:b0:89:50:d1:ad:fc:ae:eb:7d:ef:ac:f5:46:33:9d:
99:a6:d7:54:ac:56:a5:6c:27:6e:33:c5:04:f6:c8:7c:14:49:
e3:aa:43:03:ce:d6:40:9d:ed:f1:8c:94:0e:2d:c0:84:96:03:
53:78:4c:9c:2e:06:a1:86:91:0a:7c:12:d7:3d:75:5d:39:34:
18:db:38:d7:42:2e:98:fa:a1:aa:ab:32:c2:5e:66:ab:d7:f5:
1d:7e:b2:fd:20:a5:19:33:bf:74:bc:08:68:44:e6:80:3a:9e:
37:53:46:20:a1:fb:1d:c6:19:0c:40:a9:76:ad:b6:ec:f2:84:
b6:0f:08:e0:a5:89:76:2c:e7:dc:e9:88:cd:ec:2d:fd:2b:58:
40:d6:26:1b:bc:e6:34:d7:64:c7:1e:6b:79:ff:15:65:12:73:
41:99:db:f7:fa:30:cb:64:0f:90:0f:f5:d2:6e:6f:00:b7:f8:
c3:9b:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:46 2026 by rpki-client