Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/slKxpxUkmNVndEhzM3jrW-WL5AM.roa
File: slKxpxUkmNVndEhzM3jrW-WL5AM.roa (raw, json)
Hash identifier: meW2as+rSxLDtB+aCwzkCq1sWZZokr1CrQhOnNBfgg4=
Subject key identifier: B2:52:B1:A7:15:24:98:D5:67:74:48:73:33:78:EB:5B:E5:8B:E4:03
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23688F44A9F98A74805FAB399C143A12
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/slKxpxUkmNVndEhzM3jrW-WL5AM.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199458
IP address blocks: 45.8.179.0/24 maxlen: 24
45.159.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:44:a9:f9:8a:74:80:5f:ab:39:9c:14:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b252b1a7152498d5677448733378eb5be58be403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:09:a5:70:e3:86:3d:03:83:71:2c:45:d8:
1e:e6:2a:92:c2:b0:b4:b0:13:c8:5e:3b:e7:52:7f:
9e:66:9f:1e:cb:8f:a7:9f:5e:6a:a3:d7:59:83:ae:
f0:67:98:9a:97:83:73:31:6f:c0:58:14:ca:f5:25:
94:b7:58:10:8a:5c:7e:a1:89:bb:61:51:5b:87:43:
80:ed:37:d6:6d:40:69:cd:64:ee:22:46:ae:ba:63:
99:f1:db:29:de:8a:05:19:16:63:89:76:49:e6:c6:
33:6d:a7:15:ce:d8:2a:63:ed:06:e2:2c:1a:34:7e:
69:7c:b7:85:e3:e2:66:c1:1c:0a:6e:83:06:8a:5e:
11:3a:a0:0c:0e:3d:fa:fe:87:83:e2:65:ec:fd:ee:
c4:53:b2:7a:91:ac:92:5b:6b:f5:82:4f:51:99:18:
19:b3:4b:fc:65:98:ac:f1:da:d8:f7:2c:43:06:44:
d5:52:a0:55:13:95:f0:9f:a3:f3:24:12:ff:4c:34:
18:87:4e:14:20:ad:6b:14:ae:e6:69:87:f5:52:ce:
9a:29:80:33:f7:a5:d9:68:76:fe:82:fe:7d:8d:23:
c7:76:6c:d4:84:c5:47:e0:e8:5f:44:77:b7:35:5c:
63:87:25:38:51:4a:d5:fb:73:eb:b6:12:81:f2:48:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:B1:A7:15:24:98:D5:67:74:48:73:33:78:EB:5B:E5:8B:E4:03
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/slKxpxUkmNVndEhzM3jrW-WL5AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.179.0/24
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:ac:39:b6:78:72:31:bf:f3:02:94:5c:92:40:c3:ba:fd:69:
bd:35:f9:1a:6e:13:b1:c8:75:50:ae:0d:5f:6a:90:07:f7:dc:
60:5e:34:f7:83:08:a3:56:09:98:3b:7a:71:54:76:61:cd:50:
f2:df:0e:96:d3:ac:af:a0:ba:0a:16:a6:c8:f7:97:98:ca:13:
33:2d:3d:dd:0a:1f:18:a7:59:63:08:5d:1f:00:f2:8b:a1:8f:
2a:6c:b5:eb:a0:cf:bf:50:58:e4:42:93:a9:7c:7c:bc:23:d8:
9f:6a:ce:ee:6b:41:26:11:6b:d0:6b:8d:29:39:49:d2:f9:f5:
b8:06:dd:4c:68:71:f2:76:49:23:ab:28:17:44:55:12:6f:dd:
91:44:e4:5e:67:1a:91:e7:96:f8:b2:4d:d1:be:9c:a8:21:9b:
f8:60:98:a9:71:b9:69:1a:d5:e7:b1:aa:d5:76:73:08:fb:bd:
5e:9a:10:67:71:1c:48:f6:1d:0b:5e:27:00:31:81:65:bb:91:
83:96:1e:f8:e0:29:6d:24:ef:bc:b9:43:3d:a9:bc:de:04:4b:
b4:5a:11:76:52:69:86:1f:42:cb:4d:44:f3:6e:73:28:d9:48:
30:aa:34:7f:3b:30:a5:7c:6b:b4:4e:b8:1d:50:84:23:e1:7f:
b7:6e:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:32 2026 by rpki-client