Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/03W6VIAGhvyNDCUkYDcMfOL6fUI.roa
File: 03W6VIAGhvyNDCUkYDcMfOL6fUI.roa (raw, json)
Hash identifier: LtqyJHshXdxCIRk8umeeTouLrWS/Lb07cUMG6sTNxpw=
Subject key identifier: D3:75:BA:54:80:06:86:FC:8D:0C:25:24:60:37:0C:7C:E2:FA:7D:42
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23688CDE858686B5D89E441919B7F34E
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/03W6VIAGhvyNDCUkYDcMfOL6fUI.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58612
IP address blocks: 45.142.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8c:de:85:86:86:b5:d8:9e:44:19:19:b7:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d375ba54800686fc8d0c252460370c7ce2fa7d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:26:11:27:22:c9:67:25:11:86:f1:1a:28:
18:c2:c8:70:ec:e7:aa:05:ac:64:d7:27:42:bb:08:
3b:78:e3:05:f0:71:19:87:01:f0:39:7e:58:7c:6e:
fe:2e:24:41:a8:74:0e:5e:12:ca:11:42:48:5c:fd:
c8:e3:e1:06:fd:fe:c2:11:75:76:72:44:cc:df:11:
8f:ee:49:bf:db:cd:3c:8f:5a:bf:66:90:72:3a:59:
b7:3e:f0:c9:85:06:9d:38:89:88:60:53:a6:b0:11:
99:ec:6d:4a:07:ea:fa:46:54:77:ba:65:cd:76:ef:
8e:43:50:58:23:2a:31:96:a1:1c:a8:6b:ba:a2:b6:
4e:3e:65:62:f9:27:30:11:20:cf:c6:b5:76:8c:d6:
96:65:4f:9a:99:b7:59:74:97:e3:e4:8e:48:41:45:
18:33:d9:78:64:be:9b:e6:cd:9a:67:f8:b2:d8:f1:
e9:e4:30:fd:8d:f7:76:e4:61:de:d8:02:e5:ed:be:
83:89:1c:01:71:c8:ad:2a:d8:a6:02:0f:75:5a:15:
12:9a:fd:05:4d:b1:58:9c:34:96:78:bd:42:1f:39:
6c:67:f4:d1:ea:fb:cd:fc:8e:a8:4e:19:27:84:b3:
ca:63:b8:ce:6c:e5:a0:fa:a8:c3:c3:db:3b:c3:e1:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:BA:54:80:06:86:FC:8D:0C:25:24:60:37:0C:7C:E2:FA:7D:42
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/03W6VIAGhvyNDCUkYDcMfOL6fUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.1.0/24
Signature Algorithm: sha256WithRSAEncryption
20:86:6b:4a:8f:63:21:78:04:4a:b0:e1:0c:b8:78:93:98:78:
73:16:06:b0:25:6a:41:84:36:85:9e:84:b6:36:d0:00:0a:c2:
0e:44:2b:46:97:5a:f6:00:90:a2:35:5c:e6:ca:60:de:89:0a:
de:f4:60:a9:cf:1e:ad:ac:69:7c:e7:c0:99:5d:5b:93:6a:3c:
f9:72:86:40:bf:79:a6:48:cb:75:0b:c7:b8:a1:59:a4:f0:86:
2a:61:a5:31:d3:ac:35:5e:ce:71:ee:02:7f:d7:24:f8:e6:2e:
1f:7f:5c:73:fb:e4:21:5b:d1:9e:d1:c6:40:17:04:d3:bb:1b:
76:8b:94:aa:ed:83:cb:60:b9:4a:20:8c:cd:53:15:74:44:5b:
a7:3b:7f:b7:91:32:f8:44:eb:c3:bb:f0:a1:bc:f7:47:62:d8:
8e:a2:45:87:36:46:18:9f:11:f8:f6:0a:c3:6b:0a:64:76:1f:
a3:25:d3:f5:39:23:03:3b:c3:a1:2d:02:e2:c2:41:74:e7:39:
7c:d8:0d:98:52:95:f4:c8:8c:49:9d:e4:05:30:14:48:80:bb:
18:e2:2d:04:b4:4b:7e:10:f9:0a:39:45:27:d8:9d:a9:aa:2e:
e2:56:a4:26:b9:bf:2d:0d:c9:cc:5d:ec:67:57:ec:40:87:37:
5b:20:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:27 2026 by rpki-client