Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa
File: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (raw, json)
Hash identifier: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=
Subject key identifier: 7D:6F:0F:2E:A5:7A:FE:F3:62:4F:03:34:5E:5B:C0:67:4A:0F:12:88
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 019D20EA99079B60DDD9A7720F0DDBCDBEBC
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa
Signing time: Tue 24 Mar 2026 17:35:38 +0000
ROA not before: Tue 24 Mar 2026 17:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:ea:99:07:9b:60:dd:d9:a7:72:0f:0d:db:cd:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Mar 24 17:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d6f0f2ea57afef3624f03345e5bc0674a0f1288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:e1:77:75:f4:09:92:82:fb:ab:e2:16:b0:
f4:6e:a5:c6:ba:3e:78:bb:dd:46:d2:36:a9:00:97:
e1:ab:29:c8:37:73:62:81:ba:9d:ba:8c:6e:12:e8:
c8:fa:13:2d:0d:94:5d:50:9c:1f:3b:9e:1a:ff:90:
17:b3:a1:f2:6d:69:06:24:a2:70:d9:75:e3:89:cb:
d4:79:b0:0c:aa:d6:ed:00:f4:44:a4:57:1b:dd:b4:
fa:0b:d9:71:af:32:d3:0e:30:1b:c6:24:be:83:2d:
e6:5e:af:f9:c3:29:4a:91:72:eb:c4:2e:a5:36:64:
00:54:d9:6a:6d:5f:8f:c2:79:87:0c:49:ae:a8:f2:
09:f0:82:fb:5e:59:e7:eb:63:b1:bc:2a:8c:bc:0e:
51:eb:b0:a3:9e:ea:a1:e9:72:64:ca:14:fb:26:49:
df:c9:57:c5:1c:d0:3a:2a:ee:f3:28:c2:bc:5b:ff:
bb:06:3a:28:b0:31:f4:3d:02:63:20:1e:2e:06:52:
09:5e:1a:1f:55:df:0f:52:20:83:84:80:19:4e:8e:
38:bc:46:46:05:77:9b:b8:58:31:a0:7e:18:57:08:
5c:5a:24:07:77:f7:8b:ef:16:d0:58:74:dc:85:ef:
91:8b:67:a9:95:a1:5e:6a:76:d6:4f:1d:3a:93:2d:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:0F:2E:A5:7A:FE:F3:62:4F:03:34:5E:5B:C0:67:4A:0F:12:88
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
25:27:b1:db:36:db:12:f1:0c:56:22:a8:38:97:48:e2:5f:0a:
83:06:1b:75:34:79:f7:2e:a1:ee:c7:aa:20:d8:46:59:76:9e:
a3:d6:73:fe:77:cd:70:fb:6c:7d:fc:9e:74:ce:28:74:d8:e9:
5a:7b:ed:c0:07:a1:e2:72:a7:ca:f5:72:5b:06:94:40:6f:13:
58:96:5c:da:7d:1c:75:c3:71:59:03:31:3e:8a:09:cd:0b:39:
88:45:bb:27:18:7f:fa:b9:c3:a9:4b:32:e4:3e:10:b5:92:3c:
d2:ba:08:58:a1:8f:48:21:10:9d:74:e9:f2:41:c2:b1:9a:ac:
5d:fe:8b:24:5f:21:b3:d5:11:63:c1:27:9d:05:05:ec:0f:07:
59:44:8f:fc:98:5d:a3:36:7c:23:88:a7:2b:82:ca:a1:33:a8:
ad:78:04:8e:d3:64:f5:ca:35:59:ba:b2:4d:a9:71:7f:f8:98:
cb:db:58:69:f5:21:c0:f3:90:9e:8a:9d:f2:49:80:30:85:08:
34:8b:20:d4:16:0d:80:47:6d:3c:9d:33:a8:db:2f:ed:f8:b8:
ca:2e:37:17:3f:b1:55:f8:d1:6e:3a:42:22:52:fc:3e:dc:96:
d0:d7:eb:39:68:71:de:a6:d9:fc:ba:9d:8c:94:63:02:9f:9c:
a8:da:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:41 2026 by rpki-client