Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FHTQDrKIVdnhC7nkwJkNPRzdcVY.roa
File: FHTQDrKIVdnhC7nkwJkNPRzdcVY.roa (raw, json)
Hash identifier: RiDlvR7JvvFCe7WmIdJmByYgdrgtvrZxXXcIlwpNd0U=
Subject key identifier: 14:74:D0:0E:B2:88:55:D9:E1:0B:B9:E4:C0:99:0D:3D:1C:DD:71:56
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FFB83868BE2524D55B07AE1CCFD2AABBA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FHTQDrKIVdnhC7nkwJkNPRzdcVY.roa
Signing time: Thu 13 Aug 2026 14:25:28 +0000
ROA not before: Thu 13 Aug 2026 14:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6698
IP address blocks: 45.14.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:83:86:8b:e2:52:4d:55:b0:7a:e1:cc:fd:2a:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 14:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1474d00eb28855d9e10bb9e4c0990d3d1cdd7156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:a0:7a:59:c0:9b:a6:f2:8f:1c:7a:ca:df:
82:63:be:06:2c:bf:f4:b0:35:56:bc:d4:4e:cd:f8:
ab:15:d5:09:9d:60:17:f5:9c:ec:55:53:4c:ad:8c:
be:c9:b2:5d:80:29:b3:8e:66:33:8c:56:a5:56:cd:
d4:a0:eb:84:5f:87:73:18:88:66:8b:62:dc:bd:5a:
8a:de:cc:1b:33:47:70:c0:55:8a:44:a9:03:34:79:
b9:3e:f1:2d:fb:55:a6:a9:5f:b4:f5:1f:66:7d:f0:
54:1e:09:da:10:64:0e:b4:06:a7:ad:92:a3:64:90:
c1:d7:43:22:f2:3b:f2:9a:ee:b0:33:63:67:b6:66:
0f:8c:11:bb:31:69:b3:02:fe:fc:51:fd:35:14:a0:
ee:f6:b5:c9:60:c1:f6:24:13:b2:fa:9a:d8:a2:11:
96:4c:4f:ed:9d:5e:eb:2b:96:38:30:de:9a:65:e8:
81:d9:f2:a8:9e:19:bf:9f:d8:71:dc:ab:9f:6e:a7:
d5:ed:24:99:fd:1c:be:73:b3:8c:6c:9d:69:9b:6c:
67:f3:d4:b5:f9:0f:6d:bc:a0:12:94:3a:17:12:12:
7c:a5:cf:46:e9:6b:62:67:e2:54:e1:5c:9f:88:93:
58:76:4c:27:3b:cf:b8:7f:9f:e5:07:29:37:68:ac:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:D0:0E:B2:88:55:D9:E1:0B:B9:E4:C0:99:0D:3D:1C:DD:71:56
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FHTQDrKIVdnhC7nkwJkNPRzdcVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
75:76:68:b1:77:be:4d:7c:1f:05:9f:e5:7e:a9:fd:fc:91:68:
aa:f4:c7:7d:d6:91:e6:7c:3f:f7:a0:fe:0d:83:45:6e:a7:ae:
f0:ac:92:10:4a:70:a4:e1:b4:f5:0d:85:bc:3b:90:3e:3e:7a:
3f:1c:31:b9:86:a2:db:2d:0e:76:de:3c:ce:3f:94:ae:42:6e:
2c:85:be:6c:c4:81:18:77:fd:8d:96:c1:b3:bd:52:31:a5:0c:
77:2c:12:a8:70:04:73:c7:0c:5c:2b:88:47:9d:56:cc:6d:1d:
68:ca:55:cf:34:b2:7e:11:33:4b:ff:94:a9:3c:b6:82:cb:7c:
18:80:46:db:18:9b:65:e3:f0:bb:58:e8:d9:d9:ed:28:3a:ee:
2a:9a:23:f8:4f:5a:87:a3:e1:ab:3c:aa:ba:98:8f:cd:60:c0:
f8:6a:d9:df:48:60:e6:2a:61:d7:76:9f:17:2e:60:ed:1d:73:
ad:8c:eb:a5:e5:f8:49:fa:11:b4:62:84:15:9b:5a:7b:29:7a:
98:e9:e9:b1:18:91:61:48:30:d2:04:27:ec:36:09:aa:7b:2b:
9d:a2:70:43:0e:96:b4:86:04:a1:34:17:51:cb:25:c1:98:38:
4c:b5:15:06:53:bc:7c:fd:a4:3a:38:b2:1a:04:ad:fa:02:31:
ad:26:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:19:48 2026 by rpki-client