Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0mSA1xJWMiTqGyPLKxeTr-adJ1E.roa
File: 0mSA1xJWMiTqGyPLKxeTr-adJ1E.roa (raw, json)
Hash identifier: xqzXXi5KMFvHQza9hA4stXwfWP8m2Y5/CScp0B0MitU=
Subject key identifier: D2:64:80:D7:12:56:32:24:EA:1B:23:CB:2B:17:93:AF:E6:9D:27:51
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019CB7D490AA4CAB69F56B1B9BBA22EA97A7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0mSA1xJWMiTqGyPLKxeTr-adJ1E.roa
Signing time: Wed 04 Mar 2026 07:51:27 +0000
ROA not before: Wed 04 Mar 2026 07:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60949
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:d4:90:aa:4c:ab:69:f5:6b:1b:9b:ba:22:ea:97:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 4 07:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d26480d712563224ea1b23cb2b1793afe69d2751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:9a:f7:72:4f:ec:a4:7b:17:54:68:03:a7:
d6:e8:22:c0:d5:c7:0f:f1:39:4f:8f:c5:5c:42:00:
8f:09:b4:07:23:a4:79:38:83:31:cf:aa:6e:40:2c:
e2:af:88:1a:59:9b:77:45:c4:a7:47:fd:3b:a7:36:
bf:26:c0:b9:8e:cb:01:27:99:ce:96:66:8f:0c:05:
4d:3a:d0:83:39:79:8b:12:75:93:f2:9c:0b:33:c5:
6f:57:d0:98:c7:fd:45:ce:0b:87:12:ea:8c:82:3b:
33:a6:73:6b:c3:26:56:8b:89:da:62:67:43:e9:c8:
18:9e:47:76:ba:a6:d8:65:26:8b:e6:61:14:86:8b:
6e:3e:c0:9a:13:cc:d7:d6:4b:d4:5c:c3:35:b4:11:
5d:fa:96:a6:c3:71:ae:86:a5:ee:5d:2f:0f:18:c4:
24:84:e2:35:7b:f7:65:a2:bb:33:1a:95:c9:39:32:
17:be:78:fe:2d:2c:14:72:09:67:f0:2d:52:76:b4:
72:6c:93:ad:8e:92:a1:e7:f6:bf:d1:69:05:24:b8:
8a:fa:b8:51:34:7e:8f:44:8d:13:c6:41:78:d9:c7:
b4:d1:f9:c8:81:86:7c:93:e4:d9:71:6d:d3:37:40:
84:ff:08:b2:e5:8b:07:85:04:8b:0b:ba:3c:48:68:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:80:D7:12:56:32:24:EA:1B:23:CB:2B:17:93:AF:E6:9D:27:51
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0mSA1xJWMiTqGyPLKxeTr-adJ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5b:9e:6f:fd:b5:88:15:c0:e2:9b:5e:58:ef:d6:9b:a5:83:
30:bd:e0:e7:14:fa:ce:8c:8d:e1:96:88:af:1c:ef:fe:4b:f3:
3a:79:9f:41:8f:6d:05:6b:e6:10:4e:4c:4e:a5:4d:5c:31:1f:
33:b3:8c:39:f2:7d:29:27:79:3d:c5:f2:07:70:d5:d8:ec:cd:
8f:4c:17:8a:45:cc:04:58:f4:c6:ca:49:86:4c:fa:a5:0a:a9:
cf:d2:8a:48:f2:76:49:e7:4f:c6:8d:26:98:d2:bb:88:b9:e0:
43:ca:b5:3f:5c:32:f4:63:41:25:1e:53:a3:3d:c6:3f:ae:2d:
20:7e:a4:ad:c2:e4:b9:6e:eb:8d:ca:b6:49:1f:5a:ce:ee:05:
94:28:74:96:9b:14:59:ce:7a:79:9c:ca:2e:9e:c3:1a:9f:ed:
d4:d6:d3:48:32:f4:dd:38:4a:79:2e:61:58:44:6c:7c:98:2e:
b4:b5:ac:c5:55:e9:23:b0:1c:2c:df:1d:95:91:72:ec:6f:26:
73:1b:50:c0:a6:34:9e:08:c1:1e:e7:b5:7b:40:1e:bd:49:4f:
c6:c9:11:fa:6c:c1:f3:0b:14:30:63:73:0e:be:ce:49:05:02:
9e:da:d0:e0:25:4a:71:b0:94:3b:41:37:f9:3e:e5:a9:e7:05:
aa:e0:14:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 02:52:02 2026 by rpki-client