Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sQf6IK5FHk3Au1xATQSqBGjBt3Q.roa
File: sQf6IK5FHk3Au1xATQSqBGjBt3Q.roa (raw, json)
Hash identifier: xoq0jOoDwQuAunETFsnRk7KpXL6i+eQqm5DGW96MaRo=
Subject key identifier: B1:07:FA:20:AE:45:1E:4D:C0:BB:5C:40:4D:04:AA:04:68:C1:B7:74
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A0CF4642DBE6E9CF3E4FE5016D039D697C
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sQf6IK5FHk3Au1xATQSqBGjBt3Q.roa
Signing time: Wed 23 Sep 2026 17:18:03 +0000
ROA not before: Wed 23 Sep 2026 17:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218654
IP address blocks: 45.152.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:46:42:db:e6:e9:cf:3e:4f:e5:01:6d:03:9d:69:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Sep 23 17:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b107fa20ae451e4dc0bb5c404d04aa0468c1b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:cc:54:44:c6:97:c7:6c:34:02:99:69:29:
2e:b3:a4:dc:65:fc:b9:d9:10:41:14:78:1a:e0:ac:
5c:59:d3:2e:e4:c9:61:59:d5:12:6d:1e:3c:bd:d6:
68:78:bb:af:00:1c:c5:aa:56:3f:e4:72:13:03:71:
a1:c6:5e:27:0b:83:54:44:f1:79:8d:11:ec:21:9b:
b3:0a:a2:d0:80:14:fa:6c:4c:89:42:5d:80:59:43:
4c:78:be:58:4c:67:13:14:8c:7f:c6:7f:c1:1b:6e:
49:2e:d2:1b:0c:90:07:10:aa:57:c7:68:13:68:a8:
65:12:e1:aa:89:81:7d:76:2c:0d:35:93:44:f1:ee:
97:c5:40:73:e3:a7:6e:af:a7:cd:a3:57:72:f0:04:
c5:08:4a:92:84:5a:44:63:90:ee:cb:76:b4:94:33:
72:37:87:9f:3c:58:b0:b1:b9:b8:6b:7f:6c:2a:cd:
4e:1e:bc:52:46:6e:b4:a4:62:66:c8:fb:a0:71:98:
b0:fc:11:ee:63:7f:b1:4c:72:17:dc:97:4a:20:87:
07:f7:d5:42:b1:e6:3f:4b:17:10:1a:8a:5e:42:72:
3f:a3:79:15:6e:2c:5c:0b:96:c6:4f:22:08:4d:e9:
4b:b7:75:74:5e:22:b8:d3:cb:ed:4e:99:5f:e7:df:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:FA:20:AE:45:1E:4D:C0:BB:5C:40:4D:04:AA:04:68:C1:B7:74
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/sQf6IK5FHk3Au1xATQSqBGjBt3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.167.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e8:73:bb:c1:51:ec:f5:80:18:b1:96:1b:fa:7d:f4:95:d0:
7d:7a:f7:4e:16:cd:ba:a9:be:6a:31:f8:0a:9f:82:c1:e6:ad:
34:98:f2:7e:ae:67:73:b7:59:06:ec:3c:6d:5f:ec:b8:70:c0:
3c:e6:95:40:f1:d0:73:cd:d6:b8:6b:9a:79:64:c8:5a:bc:e3:
9d:1a:9e:7b:8b:af:9b:1b:87:76:96:35:b3:b5:42:af:fb:8c:
9d:94:47:d1:43:91:8a:88:26:ab:20:23:12:82:1b:5d:a4:ec:
b6:7a:e8:8a:bd:03:f9:e7:f2:00:f6:46:5f:2e:b4:ba:e4:66:
d7:dd:3b:6c:11:15:e4:60:9e:41:88:e0:58:6d:3d:50:74:d4:
d3:86:62:41:22:a4:b7:07:d5:85:eb:ed:b1:c2:e1:fd:4e:b7:
aa:7c:da:6d:42:c3:b7:f3:75:3b:27:d5:10:76:08:2f:26:90:
23:8c:f6:19:e3:9f:94:15:7f:c1:91:ca:27:6f:da:a1:19:45:
15:61:5a:96:fd:f2:b9:ae:6d:19:87:36:0d:ac:b7:cd:ba:14:
c7:c3:6a:33:ae:25:82:23:47:01:a7:9c:11:17:a8:a2:f2:2a:
f6:44:0a:68:6f:99:1c:0a:db:e8:e2:aa:db:37:f1:0b:79:49:
d6:d0:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:12:56 2026 by rpki-client