Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/d1FmpnCLtN9xWz258z_vo0evfQY.roa
File: d1FmpnCLtN9xWz258z_vo0evfQY.roa (raw, json)
Hash identifier: 99ktEN8EQTUBIhZ9BGIWGyL3Ti91GsDxlW00ORFmRCI=
Subject key identifier: 77:51:66:A6:70:8B:B4:DF:71:5B:3D:B9:F3:3F:EF:A3:47:AF:7D:06
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F750E3A8375605BEC0ADE3A3E8F197124
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/d1FmpnCLtN9xWz258z_vo0evfQY.roa
Signing time: Sat 18 Jul 2026 11:48:14 +0000
ROA not before: Sat 18 Jul 2026 11:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51559
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:0e:3a:83:75:60:5b:ec:0a:de:3a:3e:8f:19:71:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 18 11:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=775166a6708bb4df715b3db9f33fefa347af7d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:ea:a1:62:9f:82:a7:e7:b1:34:f1:fe:c9:
f6:23:5d:7f:ea:5e:dd:62:42:5d:3d:55:e4:f9:a5:
24:dc:01:c6:04:74:b2:77:21:39:54:af:fe:37:93:
94:07:af:56:c3:36:4b:38:a1:2f:3d:fd:a0:7f:04:
d9:c3:55:55:95:89:7d:0c:73:76:e2:a1:e4:8c:48:
e7:d8:2e:5a:4a:c4:6f:45:13:06:62:68:fc:e9:06:
e4:d6:09:65:ba:8a:70:e4:a9:98:53:6c:33:c5:7e:
1b:2a:5a:7b:75:5c:b5:a7:15:47:3a:45:c7:77:03:
3b:b5:08:14:f1:7a:25:58:a9:4c:9a:96:0a:69:bc:
99:e4:7a:87:dc:6a:a5:c8:50:22:08:af:1c:6b:48:
c9:a7:c1:21:42:df:20:ab:9c:6d:ab:c1:0b:4a:f0:
1d:e5:34:d8:06:cf:34:32:7f:49:04:ea:49:8e:78:
98:ac:0a:78:e5:ad:14:11:63:58:85:ec:c3:9d:98:
b2:fe:1a:66:90:d3:93:71:6e:72:1a:1e:4d:5e:82:
45:e9:11:3b:61:0d:79:c5:2c:93:50:2b:26:7a:d2:
fd:00:3a:f6:e6:b6:b3:e5:a4:d1:2d:36:94:71:c2:
c4:d4:69:c4:89:41:42:78:48:b0:32:12:8d:ab:5c:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:66:A6:70:8B:B4:DF:71:5B:3D:B9:F3:3F:EF:A3:47:AF:7D:06
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/d1FmpnCLtN9xWz258z_vo0evfQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:53:e3:6c:69:0f:aa:ec:65:26:37:76:e6:05:d4:59:ba:ca:
e0:98:08:0f:4f:0e:2d:7c:ea:23:cc:8a:0b:71:29:b3:93:2b:
22:ec:2d:bf:be:ab:df:9b:89:7a:85:1a:26:3c:bc:e6:61:d4:
22:12:4f:7c:e5:74:cf:d9:b7:51:ad:4a:91:8c:65:fb:77:a0:
f8:11:9e:98:02:cb:54:80:a1:ae:90:4f:fa:1d:7c:f1:46:d7:
aa:b7:c9:e5:61:bb:90:1e:af:f1:9d:fc:84:20:53:cb:ad:73:
9b:f8:ef:63:ff:f1:04:ef:2d:39:6d:0d:b2:a3:49:c6:2d:3d:
1b:e1:a4:01:c0:98:b1:c3:2a:bf:12:04:b1:b3:04:0a:18:ff:
14:66:48:ea:7e:f4:92:dc:a2:6c:81:a1:34:88:b2:6e:17:17:
3e:23:c4:82:aa:c6:fb:ec:14:e9:9f:62:d9:66:29:40:8b:47:
1b:40:87:f1:74:12:34:b6:f4:32:a2:0d:81:b7:4a:e1:7f:a6:
e0:2e:18:f6:a7:71:03:63:17:a6:cc:92:d6:83:b1:06:0f:30:
fd:a6:16:2d:e4:69:48:ee:d4:e1:95:d4:56:1f:e4:c6:c9:11:
2c:0c:e3:09:31:8d:fd:1a:5a:f2:bc:57:fc:15:8a:a3:f3:54:
ec:6a:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:22 2026 by rpki-client