Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa
File: 1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa (raw, json)
Hash identifier: XxYQOLtcDO+kKRh93RlmwzW/qtvNS82kdLybB49Wy7E=
Subject key identifier: D4:65:1C:9A:BF:E1:E2:D2:12:57:36:C2:02:F3:26:FC:3B:48:D9:97
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F74FDBF30887FBD0D8CD178E94A18CE98
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa
Signing time: Sat 18 Jul 2026 11:30:14 +0000
ROA not before: Sat 18 Jul 2026 11:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219287
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:fd:bf:30:88:7f:bd:0d:8c:d1:78:e9:4a:18:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 18 11:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4651c9abfe1e2d2125736c202f326fc3b48d997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:7f:aa:63:99:e3:61:62:b9:a4:6c:ab:9e:
77:91:73:c9:ae:97:19:cd:f8:b0:35:de:16:92:9c:
42:6e:02:2a:79:83:5e:70:d6:cd:5c:2f:03:95:8f:
18:70:3e:c5:23:64:bc:a4:bf:2d:0a:20:8a:36:8c:
5c:10:b5:b3:5f:73:54:df:36:de:d1:cc:e6:c2:7f:
0e:23:a4:ff:89:ee:a7:b7:2b:93:3e:58:86:e7:f2:
8d:ee:b5:ae:6f:b8:97:1a:7b:4f:c4:c5:26:69:5c:
79:5c:ca:41:a4:92:7a:06:1e:3b:3a:86:14:38:24:
f7:21:6f:f3:57:9c:c8:96:3f:7a:a7:ec:43:d5:0f:
0f:74:08:02:bf:21:08:9f:18:d6:85:4d:4c:36:e9:
02:4f:94:de:e0:bb:f6:4f:99:ef:19:10:69:3f:ed:
82:93:5a:cb:a9:95:1b:6d:3a:02:9d:85:d0:40:16:
0f:74:90:79:84:25:9d:d2:20:3c:c3:84:6d:b8:ed:
fc:40:bb:e9:cd:1f:d6:a9:39:92:cf:46:ac:94:ae:
a0:20:78:1e:a0:4e:5f:97:1f:42:3d:4f:8a:4d:28:
70:c5:43:3e:c3:a9:96:52:c9:9a:e3:e9:22:00:03:
99:7e:15:a4:69:8b:a2:97:37:51:42:db:d8:f2:c3:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:1C:9A:BF:E1:E2:D2:12:57:36:C2:02:F3:26:FC:3B:48:D9:97
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1GUcmr_h4tISVzbCAvMm_DtI2Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7e:b6:65:16:f4:49:fa:75:b1:08:95:f2:35:b0:0c:0d:82:
b7:a1:11:09:d1:b3:13:8d:c1:76:b1:5d:33:34:7d:85:af:79:
3b:f5:2f:bd:18:7f:62:0c:82:bf:c1:df:a7:6e:f2:0f:93:3f:
28:89:47:75:06:20:53:78:b2:3d:b7:18:53:6f:9a:ad:e5:f5:
40:b7:bc:07:04:61:9b:52:8a:cb:bd:fe:35:60:6a:89:be:4e:
c5:58:9d:5e:e0:1e:ad:24:15:62:6f:17:e3:b9:df:a0:bb:1e:
e3:31:7d:52:65:61:b6:b5:2c:57:59:f3:98:12:a6:c7:66:1b:
11:67:d7:1b:6a:c8:bc:ff:4d:0d:43:43:a0:98:0f:6a:27:58:
8a:cb:01:e1:50:be:68:71:b4:86:66:d8:00:d7:b7:60:e6:38:
cf:ee:1c:98:7c:5f:95:c5:4b:a8:e1:ae:1d:1f:d6:5c:4c:10:
e5:7d:ad:fd:b3:65:4e:27:98:82:65:f4:ea:b0:4b:bc:1d:e5:
2d:0e:40:68:85:07:6c:24:09:ce:c7:d7:06:ab:df:c5:e1:2a:
4f:b7:74:b1:d2:49:b0:1b:20:69:1b:b5:68:13:03:a6:6b:ab:
0f:57:ba:dd:01:0f:50:58:04:99:f6:b4:61:db:27:1a:4e:63:
47:bd:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:34 2026 by rpki-client