Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/rF8hKKPYi1_6uvshddsJC7FpHcU.roa
File: rF8hKKPYi1_6uvshddsJC7FpHcU.roa (raw, json)
Hash identifier: gfmH90XdvGauAKsUY5JnJuPZCvFmZV8GXH8tq56hdGk=
Subject key identifier: AC:5F:21:28:A3:D8:8B:5F:FA:BA:FB:21:75:DB:09:0B:B1:69:1D:C5
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CD789FC55BD423BC6B05C77B826D
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/rF8hKKPYi1_6uvshddsJC7FpHcU.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211858
IP address blocks: 45.67.82.0/24 maxlen: 24
2a10:c704::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:78:9f:c5:5b:d4:23:bc:6b:05:c7:7b:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac5f2128a3d88b5ffabafb2175db090bb1691dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:23:fa:5d:fd:b2:d9:0a:2d:ba:71:c4:04:
8a:f8:59:a1:b2:ab:90:e7:6d:8e:0b:e9:91:f8:f7:
60:a9:21:8a:44:88:3d:81:ee:1c:28:3e:2c:90:e1:
9d:9f:95:76:62:07:f9:54:40:22:1a:1b:45:04:d4:
45:7b:fd:2f:64:2e:3a:13:eb:4a:55:d6:2d:7b:4f:
97:3f:8c:25:3d:8c:b2:4a:1e:1e:af:26:ac:b5:d3:
2e:cf:97:fb:66:8d:94:f0:e6:7a:7a:92:4d:e0:39:
23:e8:f3:d7:8c:7d:1e:1b:fc:db:eb:cc:7a:f6:02:
5e:ef:9a:00:4b:96:20:2f:3a:1f:f7:d5:89:f5:ab:
4c:76:7f:b9:e1:43:c1:3d:91:e3:17:b3:9b:66:43:
c0:f7:3a:58:7d:b9:9a:77:5e:cb:2d:a3:4a:57:0f:
8f:96:4d:dc:00:7c:00:76:f3:9a:1c:6f:3a:8d:b7:
4b:7c:08:3c:a8:61:8f:d1:18:d7:cb:d7:5f:2a:ce:
1a:3c:87:c0:22:fc:1f:a6:ff:b8:cb:f6:61:3c:40:
01:ee:b6:f0:8c:fa:f7:6d:16:71:ab:21:86:73:15:
bb:03:4d:40:19:32:39:44:42:90:e5:09:92:d7:d9:
aa:b8:73:e4:90:89:12:0a:a3:4c:9f:08:7f:3f:14:
d1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:21:28:A3:D8:8B:5F:FA:BA:FB:21:75:DB:09:0B:B1:69:1D:C5
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/rF8hKKPYi1_6uvshddsJC7FpHcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.82.0/24
IPv6:
2a10:c704::/32
Signature Algorithm: sha256WithRSAEncryption
07:d2:95:cf:63:56:7f:3c:c2:a7:cc:83:42:f5:b2:7f:69:f1:
eb:b5:06:8b:77:01:9f:6a:97:22:88:e0:07:5f:cc:93:b3:f6:
e5:78:98:d0:f5:01:db:77:27:95:c2:23:b9:ea:5a:42:06:0e:
4f:a0:db:a1:34:48:94:1e:23:8e:48:3f:bb:82:8f:c4:e5:1b:
bb:c4:de:72:89:cf:1f:85:e4:8c:e6:bc:a5:97:44:86:86:aa:
59:a6:f2:0a:2a:7f:ed:9f:ae:3a:c6:a4:bf:0e:11:8e:3f:25:
ee:c4:8c:2f:6b:3b:9e:be:5e:cd:15:33:1e:6b:d4:03:be:0b:
cd:5d:66:fb:43:39:de:62:94:55:07:b3:b7:6f:96:58:bd:5f:
27:9c:9f:25:cd:01:96:69:89:a0:75:d0:95:13:a5:7d:b9:05:
ce:e6:8d:72:51:20:12:38:bd:a8:4e:15:56:5d:a5:1f:d2:7d:
52:9b:c1:6f:6f:cb:a9:66:cc:52:f7:fc:f9:9e:cf:b7:35:12:
2e:53:f3:d9:f0:ce:04:8a:af:e6:d2:aa:9c:7f:3d:aa:15:74:
53:7c:eb:1f:e7:1f:f5:8e:0f:1b:fa:1f:9c:4d:20:5c:39:da:
2e:6f:a4:86:cd:9d:dd:77:60:1e:80:f5:71:d6:93:05:27:f9:
b3:7a:3a:7e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaM14n8Vb1CO8awXHe4JtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Y2VmNmMxYzJkNGQ1ZDdlMjZlYTU5MzRjZTE4M2IyOThm
MjliZmMwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzVmMjEyOGEzZDg4YjVmZmFiYWZiMjE3NWRiMDkwYmIxNjkxZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbsj+l39stkKLbpxxASK+FmhsquQ
522OC+mR+PdgqSGKRIg9ge4cKD4skOGdn5V2Ygf5VEAiGhtFBNRFe/0vZC46E+tK
VdYte0+XP4wlPYyySh4eryastdMuz5f7Zo2U8OZ6epJN4Dkj6PPXjH0eG/zb68x6
9gJe75oAS5YgLzof99WJ9atMdn+54UPBPZHjF7ObZkPA9zpYfbmad17LLaNKVw+P
lk3cAHwAdvOaHG86jbdLfAg8qGGP0RjXy9dfKs4aPIfAIvwfpv+4y/ZhPEAB7rbw
jPr3bRZxqyGGcxW7A01AGTI5REKQ5QmS19mquHPkkIkSCqNMnwh/PxTRkwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKxfISij2Itf+rr7IXXbCQuxaR3FMB8GA1UdIwQY
MBaAFFnO9sHC1NXX4m6lk0zhg7KY8pv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvckY4aEtLUFlpMV82dXZzaGRkc0pDN0ZwSGNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALUNSMA0E
AgACMAcDBQAqEMcEMA0GCSqGSIb3DQEBCwUAA4IBAQAH0pXPY1Z/PMKnzINC9bJ/
afHrtQaLdwGfapciiOAHX8yTs/bleJjQ9QHbdyeVwiO56lpCBg5PoNuhNEiUHiOO
SD+7go/E5Ru7xN5yic8fheSM5ryll0SGhqpZpvIKKn/tn646xqS/DhGOPyXuxIwv
azuevl7NFTMea9QDvgvNXWb7QzneYpRVB7O3b5ZYvV8nnJ8lzQGWaYmgddCVE6V9
uQXO5o1yUSASOL2oThVWXaUf0n1Sm8Fvb8upZsxS9/z5ns+3NRIuU/PZ8M4Eiq/m
0qqcfz2qFXRTfOsf5x/1jg8b+h+cTSBcOdoub6SGzZ3dd2AegPVx1pMFJ/mzejp+
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:41 2026 by rpki-client