Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1aG_seOYz3K4tWZ8OXAMg6lJFnc.roa
File: 1aG_seOYz3K4tWZ8OXAMg6lJFnc.roa (raw, json)
Hash identifier: GeRdBIEa1QRbtl6Pqx3v67y1Lj2yfDAC+ctmHESZ5EU=
Subject key identifier: D5:A1:BF:B1:E3:98:CF:72:B8:B5:66:7C:39:70:0C:83:A9:49:16:77
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01A0488D9210CBC2D29B4042C9A260C68023
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1aG_seOYz3K4tWZ8OXAMg6lJFnc.roa
Signing time: Fri 28 Aug 2026 13:27:12 +0000
ROA not before: Fri 28 Aug 2026 13:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218841
IP address blocks: 45.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:8d:92:10:cb:c2:d2:9b:40:42:c9:a2:60:c6:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 28 13:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5a1bfb1e398cf72b8b5667c39700c83a9491677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:30:95:bf:32:93:72:4c:38:80:73:71:33:
0f:0a:82:12:bf:2f:70:64:5d:28:6d:09:f4:76:ba:
85:6d:53:a5:b2:17:73:ab:2d:5e:54:48:e1:e6:9d:
f7:d5:77:85:9b:1a:45:91:d2:03:09:c7:9f:82:e0:
d5:59:00:1d:56:f1:cc:02:cc:d8:eb:80:d8:e0:0f:
ec:1f:41:c0:b5:ec:b3:62:e5:65:70:5a:1c:f7:ec:
07:95:b5:d2:87:b2:35:25:9d:53:c3:cc:cf:99:7c:
94:e1:78:bc:79:d6:ca:58:e9:ce:4e:1a:2f:0c:22:
33:29:4a:ec:8a:5a:29:90:f2:cd:4d:fd:36:aa:23:
36:35:f5:2e:0c:5d:19:fe:fa:76:d5:a4:2f:fb:d2:
16:93:1f:e9:d6:9c:a3:72:21:b0:2e:29:81:c3:53:
dc:1f:2a:63:6c:ff:ef:8b:21:c5:3e:40:ed:98:03:
2b:92:a9:37:33:b0:c8:41:40:2d:7e:e4:2c:79:fe:
cd:1b:8e:18:4b:35:ec:3f:65:e8:b9:29:e7:aa:c3:
a3:6e:d7:f7:b2:ca:d5:16:58:c7:b7:b1:6e:24:09:
46:46:fb:e5:a5:8f:17:23:de:b6:0c:13:ea:38:8b:
92:7f:1e:91:97:2b:07:86:74:5b:74:10:1b:66:be:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A1:BF:B1:E3:98:CF:72:B8:B5:66:7C:39:70:0C:83:A9:49:16:77
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1aG_seOYz3K4tWZ8OXAMg6lJFnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
70:09:1d:d3:24:70:76:ba:40:bd:b5:3f:e7:31:5b:a7:af:5d:
ed:94:6b:01:c0:ba:ec:71:b5:20:2a:95:11:e9:04:d8:9d:3b:
68:7f:18:bc:de:ef:c1:3b:16:08:5a:b2:b8:29:f6:29:da:3d:
d3:f7:a6:f8:c2:96:55:9f:8b:6e:bb:c8:d5:4d:51:0a:12:fe:
cc:ee:91:46:24:cf:58:89:f1:cd:06:17:bf:48:b7:21:89:d7:
97:22:43:a9:bf:0b:14:fc:ab:84:11:d8:b2:3e:1c:c7:55:00:
4f:ae:64:07:38:4f:e0:c3:c4:80:90:ee:09:0a:95:bb:f2:46:
a9:c0:ea:2b:91:42:e4:5d:e8:50:a2:21:8e:58:b3:a8:cd:dc:
2d:92:99:6c:45:8c:ba:ed:4e:aa:92:de:0e:a5:31:f6:14:a8:
d0:42:9d:eb:cd:c1:dc:ad:36:1d:0f:53:96:c9:58:e1:c6:dd:
e5:6b:35:21:dc:f8:db:53:cf:78:c1:2e:9c:bd:5a:08:26:52:
85:e1:b0:e4:6f:4f:cc:af:58:31:62:01:5b:8d:d6:30:cc:24:
f4:20:9f:03:83:77:fc:b4:65:7a:d1:8c:7c:94:df:e8:db:2b:
6c:4a:4f:82:dd:8b:d3:d9:fe:f1:88:0c:6e:49:c2:5a:7a:82:
4b:a3:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:29:04 2026 by rpki-client