Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa
File: UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa (raw, json)
Hash identifier: slGaHxdN7Oqozliq50gNi9OxqgfS+8LclDE77QIbzI0=
Subject key identifier: 51:C5:C5:8F:0C:A1:69:64:FA:8C:99:33:A1:0A:92:F2:D1:56:29:07
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019F934A17612696564ED3FC3465F8EEFE27
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa
Signing time: Fri 24 Jul 2026 08:42:14 +0000
ROA not before: Fri 24 Jul 2026 08:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208123
IP address blocks: 45.159.40.0/22 maxlen: 22
45.159.40.0/24 maxlen: 24
45.159.41.0/24 maxlen: 24
45.159.42.0/24 maxlen: 24
45.159.43.0/24 maxlen: 24
2a0f:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:4a:17:61:26:96:56:4e:d3:fc:34:65:f8:ee:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jul 24 08:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51c5c58f0ca16964fa8c9933a10a92f2d1562907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:6b:a7:7a:02:a2:d3:ce:5b:d8:1a:a0:90:
65:1b:15:46:a8:5b:d2:2e:80:91:88:a9:e6:08:3a:
83:20:35:0e:a6:91:1c:75:e2:bd:8c:08:5a:4f:5e:
3f:36:a9:51:e5:e7:b6:ce:39:85:23:90:f4:dc:d0:
c2:ba:c7:c9:5f:00:ae:36:b6:7f:52:72:47:9f:6a:
2f:33:93:d4:ae:ca:98:0e:36:f5:26:cc:d9:6f:3d:
f3:7f:41:54:ca:65:4e:f0:4a:f1:41:4c:3d:a4:6d:
53:7a:91:e7:3f:2e:3c:7d:6e:19:17:b7:54:6a:61:
55:f2:db:87:7b:f4:8a:6e:a8:ab:7f:5f:eb:69:85:
c0:f2:d5:82:97:57:b6:e7:1d:f6:a1:39:37:90:64:
2a:34:e8:61:77:8d:66:21:6a:bf:b8:3b:56:6c:03:
26:a7:9d:4a:1a:de:47:70:ab:92:4c:d7:38:ae:23:
d3:b6:22:4f:80:19:91:d4:62:d6:1a:79:f4:a1:98:
a7:df:1a:1b:c3:01:b9:b1:42:80:71:3e:c8:ae:83:
1d:e0:51:08:a6:18:bd:c2:9e:2d:a1:49:bd:ad:dd:
d0:b2:c7:fc:20:52:ce:7b:f5:4e:3e:35:28:2f:f4:
a0:2c:5a:e5:13:28:f8:6b:88:aa:8b:a2:7e:d9:ff:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C5:C5:8F:0C:A1:69:64:FA:8C:99:33:A1:0A:92:F2:D1:56:29:07
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.40.0/22
IPv6:
2a0f:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
2c:90:45:53:cc:76:13:c5:55:b1:35:37:61:bc:8f:1e:79:15:
7e:1f:62:c0:ef:d6:ae:3b:fd:f5:b7:31:b8:38:ef:1a:cb:2c:
94:32:61:fb:6c:d2:a8:73:95:21:78:c0:ac:2c:2d:7f:d9:c6:
c6:4b:9f:72:1d:88:5e:47:14:a1:56:f7:51:a9:e4:e4:08:55:
a1:63:82:4e:49:ba:ee:1b:a4:91:27:fe:20:b2:61:7d:4d:cb:
5d:da:5e:3a:59:75:e1:ad:1b:b4:93:6a:26:aa:d0:c8:43:7f:
08:cf:3a:57:d5:29:98:28:ae:83:fb:b0:67:01:19:a2:44:ab:
5e:c5:3f:70:27:f4:7b:82:b3:f6:8a:38:a1:ba:bb:67:68:c8:
48:8e:5f:e7:1c:01:0c:11:98:e5:4c:ef:e2:af:86:45:17:ac:
cd:f6:94:08:da:c5:c9:84:0d:f7:85:41:bf:77:34:99:5f:d6:
8e:8a:26:a8:a3:fe:eb:d8:db:68:56:da:87:59:bd:bb:3d:58:
8e:48:07:98:dd:a0:59:b0:23:0a:c4:9b:de:99:45:da:90:5f:
84:71:e3:7f:4f:46:6e:1d:68:4b:3d:b3:74:d6:91:4a:36:03:
73:34:5b:d4:94:f1:16:4d:92:72:e1:ac:4a:1d:af:6e:3c:9c:
f1:70:4c:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ+TShdhJpZWTtP8NGX47v4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjYwNzI0MDg0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM1YzU4ZjBjYTE2OTY0ZmE4Yzk5MzNhMTBhOTJmMmQxNTYyOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtVrp3oCotPOW9gaoJBlGxVGqFvS
LoCRiKnmCDqDIDUOppEcdeK9jAhaT14/NqlR5ee2zjmFI5D03NDCusfJXwCuNrZ/
UnJHn2ovM5PUrsqYDjb1JszZbz3zf0FUymVO8ErxQUw9pG1TepHnPy48fW4ZF7dU
amFV8tuHe/SKbqirf1/raYXA8tWCl1e25x32oTk3kGQqNOhhd41mIWq/uDtWbAMm
p51KGt5HcKuSTNc4riPTtiJPgBmR1GLWGnn0oZin3xobwwG5sUKAcT7IroMd4FEI
phi9wp4toUm9rd3Qssf8IFLOe/VOPjUoL/SgLFrlEyj4a4iqi6J+2f9VeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFHFxY8MoWlk+oyZM6EKkvLRVikHMB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvVWNYRmp3eWhhV1Q2akprem9RcVM4dEZXS1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ8oMA0E
AgACMAcDBQAqD26AMA0GCSqGSIb3DQEBCwUAA4IBAQAskEVTzHYTxVWxNTdhvI8e
eRV+H2LA79auO/31tzG4OO8ayyyUMmH7bNKoc5UheMCsLC1/2cbGS59yHYheRxSh
VvdRqeTkCFWhY4JOSbruG6SRJ/4gsmF9Tctd2l46WXXhrRu0k2omqtDIQ38IzzpX
1SmYKK6D+7BnARmiRKtexT9wJ/R7grP2ijihurtnaMhIjl/nHAEMEZjlTO/ir4ZF
F6zN9pQI2sXJhA33hUG/dzSZX9aOiiaoo/7r2NtoVtqHWb27PViOSAeY3aBZsCMK
xJvemUXakF+EceN/T0ZuHWhLPbN01pFKNgNzNFvUlPEWTZJy4axKHa9uPJzxcEz4
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:54:34 2026 by rpki-client