Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa
File: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (raw, json)
Hash identifier: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=
Subject key identifier: 8B:E7:FE:18:53:56:EC:45:98:EE:E6:30:FC:38:DD:1C:F2:D9:20:47
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019FC6C5BDB16D586454CD06F512B65E4A58
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa
Signing time: Mon 03 Aug 2026 08:37:55 +0000
ROA not before: Mon 03 Aug 2026 08:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214941
IP address blocks: 45.10.151.0/24 maxlen: 24
45.143.98.0/24 maxlen: 24
185.148.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:c5:bd:b1:6d:58:64:54:cd:06:f5:12:b6:5e:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 3 08:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8be7fe185356ec4598eee630fc38dd1cf2d92047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:b5:98:ab:eb:d2:56:48:81:26:35:5c:af:
e9:98:55:de:0e:71:56:17:8d:eb:8c:06:40:4e:2e:
64:18:cb:a2:a8:f3:f5:be:47:ff:24:86:22:11:0f:
f7:34:12:34:6a:91:20:ac:81:e6:67:e1:76:71:cf:
c6:a1:76:66:f8:00:65:27:67:a0:a8:ce:22:67:23:
db:d5:7f:dc:49:c5:44:65:97:67:55:71:4a:86:30:
9e:48:a7:ee:b4:40:ad:76:3e:a3:24:0c:db:26:5c:
c6:0b:9c:69:d1:f5:90:d9:42:4f:90:61:51:73:c5:
7b:f2:99:d3:b6:dd:7b:c9:24:cf:67:e0:68:8d:c1:
08:5d:87:f6:88:24:2c:79:2c:f4:8d:71:8b:3b:6e:
07:0d:c1:f8:b5:e5:04:a3:b2:80:bd:70:a1:36:fe:
00:da:2c:d5:6c:61:69:b1:11:86:4f:71:a0:18:79:
6b:e1:e1:0b:39:9e:7f:5e:ba:78:3f:8e:fa:8e:8a:
8b:f4:22:59:93:10:d9:94:13:7f:6a:ed:50:b6:82:
5f:a0:50:5a:2f:21:98:0d:98:bb:c8:40:61:31:cd:
88:5a:43:7b:de:f8:e6:40:08:dc:c8:10:fb:71:2d:
8d:17:83:72:06:8e:13:4a:8c:81:d4:9b:d0:72:9d:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:FE:18:53:56:EC:45:98:EE:E6:30:FC:38:DD:1C:F2:D9:20:47
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.151.0/24
45.143.98.0/24
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bf:01:db:38:af:88:d2:57:37:53:eb:52:e0:78:13:67:49:
b6:a9:1d:25:0b:ce:63:ef:3e:40:a9:d1:03:6a:00:30:b3:79:
b6:4b:b8:88:3c:a0:57:2d:c7:a7:34:1a:9f:bb:c8:ba:20:0b:
b1:f5:33:46:c5:42:3d:31:af:35:4f:2f:94:6c:94:e8:8e:63:
f4:0a:31:ec:7f:2f:52:e3:ab:98:30:c0:6c:5e:35:a8:a5:cb:
ef:4b:a2:3d:09:4c:df:b8:a4:34:15:6c:50:61:d7:fe:c3:19:
fd:39:ba:61:4c:02:b1:a5:62:11:fe:c9:74:8f:c0:5a:6a:c2:
c0:58:fc:a2:7d:c0:cd:a4:67:12:21:9b:bb:97:1e:ad:e2:a7:
ca:d9:3d:3f:ab:8e:a9:92:7a:28:09:15:14:28:1a:62:36:80:
33:71:8c:08:03:b1:c1:8c:84:76:b8:59:cd:23:84:0f:6e:80:
e3:1a:aa:1a:26:ca:f9:42:0f:71:83:c4:c6:50:0e:11:77:55:
69:ef:86:ff:73:0d:b5:79:41:f6:f4:61:40:8a:3f:d4:84:2c:
02:b5:b5:44:ae:43:0c:c8:1d:bf:bb:5e:7d:b5:5d:15:f6:51:
3c:8e:71:9f:05:b9:eb:3c:65:f8:5d:83:58:13:02:d4:ca:57:
5a:58:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:55:00 2026 by rpki-client