Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/4dlunOG4UAEe-ftd2u-PbHxSrQc.roa
File: 4dlunOG4UAEe-ftd2u-PbHxSrQc.roa (raw, json)
Hash identifier: NOv4IHB1bAsZDm7lNUntBnwOt8270EfmBqRJp4QQC9Q=
Subject key identifier: E1:D9:6E:9C:E1:B8:50:01:1E:F9:FB:5D:DA:EF:8F:6C:7C:52:AD:07
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 019FDCA0751CE21DD648EAB0BF05EFF6F447
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/4dlunOG4UAEe-ftd2u-PbHxSrQc.roa
Signing time: Fri 07 Aug 2026 14:28:51 +0000
ROA not before: Fri 07 Aug 2026 14:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:a0:75:1c:e2:1d:d6:48:ea:b0:bf:05:ef:f6:f4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Aug 7 14:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1d96e9ce1b850011ef9fb5ddaef8f6c7c52ad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:6c:8e:7e:46:16:63:97:3b:f8:92:e2:1a:
4e:37:26:27:aa:8a:28:10:f4:ef:96:c4:4f:cb:eb:
12:3c:51:dc:e8:08:1c:40:e7:5f:73:b2:c0:dd:c9:
51:b8:05:ed:61:f0:2c:bf:d7:ec:9e:3d:45:37:19:
c7:2a:68:52:a0:61:7a:2f:98:41:6f:c0:50:24:0a:
c8:a4:70:c5:ed:b3:d9:37:ef:81:e3:29:05:5a:8e:
68:8c:89:f2:eb:af:9e:5b:b8:08:9c:03:c4:f9:2a:
c5:02:b5:d3:f8:79:65:51:8f:6c:7d:8a:b0:6b:6c:
a4:5e:6b:e5:5d:0d:9f:33:cf:7e:29:9d:73:a4:54:
36:f5:eb:53:cf:12:f0:b6:75:ee:7c:6a:10:cc:bc:
9d:b5:78:0c:a2:12:b5:77:1b:e8:d0:7e:66:16:41:
a4:f8:f1:8a:d7:cc:a8:2c:58:60:86:81:39:fb:38:
2d:97:62:53:d9:45:97:10:0a:81:db:f3:7a:dd:4c:
bf:94:89:e0:b3:ef:1e:cb:59:8d:b1:dd:59:76:72:
66:39:8a:6b:b0:dc:29:69:b9:f8:05:af:6e:37:71:
02:b4:d3:fd:c9:10:df:1a:ee:07:aa:cd:98:0c:85:
9c:7f:b3:1c:ae:f2:0b:34:5a:b1:f8:73:08:0e:9e:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:6E:9C:E1:B8:50:01:1E:F9:FB:5D:DA:EF:8F:6C:7C:52:AD:07
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/4dlunOG4UAEe-ftd2u-PbHxSrQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4f:6f:95:2a:f5:0f:06:e6:6e:00:d7:1d:85:9d:5b:71:fb:
e8:53:fc:40:f6:2e:e3:fe:68:7c:68:c8:87:cb:70:02:de:7a:
92:9f:07:f8:35:81:fd:99:12:5a:f5:33:4d:92:fc:a3:82:b2:
39:e1:05:89:cb:63:5d:1a:5f:a9:ef:87:f7:fb:88:77:2a:49:
0c:b6:c8:0a:79:b1:2a:88:fd:4d:0f:c2:5b:1d:93:14:21:2c:
1a:6a:60:59:29:f1:6e:51:06:13:fe:0f:af:52:68:bb:d7:5f:
f1:e6:47:0e:23:45:15:b3:79:43:ce:83:7e:e2:5f:4a:80:88:
b8:8b:20:7d:75:d2:a7:90:a7:f3:22:ca:09:12:fa:bb:8d:dd:
37:ff:76:71:94:df:26:59:2b:b8:78:d8:5c:d6:76:17:c6:43:
37:54:ea:a8:d2:92:15:3c:32:46:3d:69:7b:d9:58:80:1d:65:
5c:85:f3:ae:68:53:69:14:0a:62:16:cb:4d:73:a7:b2:df:31:
94:d6:18:5b:6a:50:0f:3d:04:6c:95:54:84:67:42:86:c9:71:
85:21:43:13:20:12:ba:3e:11:41:87:ec:d4:dd:8b:96:12:82:
fc:db:e0:0c:ae:72:b8:d4:e1:b1:12:fc:81:a5:81:32:f1:ca:
46:3a:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:54 2026 by rpki-client