Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/U1VMNdLcH6EGpfEiEAMjvjp0-co.roa
File: U1VMNdLcH6EGpfEiEAMjvjp0-co.roa (raw, json)
Hash identifier: venH5NkohIRH0FUb7+mIIfdvhDxYdZexsn9c3WtFFFU=
Subject key identifier: 53:55:4C:35:D2:DC:1F:A1:06:A5:F1:22:10:03:23:BE:3A:74:F9:CA
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 019FE7D9CEA2B6E89513BFBC978BC0952324
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/U1VMNdLcH6EGpfEiEAMjvjp0-co.roa
Signing time: Sun 09 Aug 2026 18:47:18 +0000
ROA not before: Sun 09 Aug 2026 18:47:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:d9:ce:a2:b6:e8:95:13:bf:bc:97:8b:c0:95:23:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Aug 9 18:47:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53554c35d2dc1fa106a5f122100323be3a74f9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:13:d1:29:4b:5d:18:b6:f7:49:39:d6:b3:
44:25:32:05:cb:d3:1a:92:2f:13:52:46:b2:14:06:
5f:64:8a:f2:9c:b1:0d:49:5a:54:3e:34:65:39:05:
a2:3b:a7:0e:0a:0f:40:7a:17:20:f6:a3:3d:44:05:
f9:1d:61:d2:34:27:d5:b1:0e:c8:40:28:fa:0d:05:
3a:e0:78:46:05:e5:5e:8d:da:6c:75:53:b3:4d:cc:
0c:35:2e:7a:f0:90:7a:1f:35:06:b7:53:4a:96:49:
b4:b4:9b:e5:10:b9:f1:eb:3d:ec:0c:81:00:6f:ab:
8f:93:73:be:fb:7b:62:e6:a7:50:53:43:f2:84:1f:
27:1d:8d:0c:9b:29:a3:b2:c3:4e:47:b3:08:fb:5f:
64:05:48:71:50:b8:30:d7:b2:63:f0:8a:6c:f3:2b:
dc:2e:d5:0a:a7:08:0d:bc:31:c0:4f:2c:2d:b9:48:
dd:f7:e8:52:4a:ec:95:58:a1:77:27:89:32:b4:70:
c1:5c:79:9e:83:0a:15:7b:1b:aa:2f:8d:8d:71:74:
72:d9:f8:96:59:8c:c3:45:46:14:08:cc:05:39:b3:
3d:0c:d2:da:a9:d0:5a:a7:a0:b9:fd:e6:34:3a:0a:
8b:44:66:7d:d0:ab:29:18:e3:13:7a:fe:8b:d2:2c:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:4C:35:D2:DC:1F:A1:06:A5:F1:22:10:03:23:BE:3A:74:F9:CA
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/U1VMNdLcH6EGpfEiEAMjvjp0-co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
29:77:44:d3:b2:3a:85:68:85:23:59:ae:94:88:b1:2f:47:eb:
63:be:eb:47:29:26:06:40:20:f0:88:8d:9f:7f:12:d6:79:69:
2b:71:69:5e:5b:8f:5f:33:b0:86:c4:d7:62:c4:b2:1e:e3:93:
5b:e9:97:2f:a1:9d:40:dc:75:15:c9:b0:a8:1e:58:1e:20:ed:
9c:3f:1f:b1:20:86:73:89:f3:49:64:bb:64:56:79:53:3a:b9:
0c:ab:08:f5:0f:9f:70:12:54:7b:fe:b4:c1:fb:c8:d6:00:16:
d2:c3:2a:83:a7:59:75:8e:d6:8d:23:1b:e9:a5:a9:6f:d6:e1:
7d:51:e7:12:72:7d:42:e2:9d:57:b6:75:1b:64:44:ce:4b:a9:
02:1d:9a:a4:73:81:43:4c:f9:0d:67:49:c8:20:21:ac:f9:de:
28:08:f2:d4:14:bc:c6:1b:e4:3a:31:50:fd:9d:d7:08:98:29:
bf:b1:3f:da:f3:33:56:d4:22:d7:13:1c:45:8a:4e:f5:99:45:
8b:ba:e1:17:b8:83:69:61:ca:ff:7f:a5:32:60:ae:72:88:ee:
4d:55:92:e4:fa:fd:0a:8e:1c:c5:d9:5e:9f:a6:3f:db:fa:51:
a5:0f:df:a0:0e:57:26:2b:92:1f:2d:44:5e:ad:84:b9:99:47:
22:55:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:30:04 2026 by rpki-client