Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f-SqDFRexg4w92ZwfTmvyrX3Mi0.roa
File: f-SqDFRexg4w92ZwfTmvyrX3Mi0.roa (raw, json)
Hash identifier: DC1jkW2/QTGBcpbkNZ22vgerS9j43aMAY+hQNTpec2A=
Subject key identifier: 7F:E4:AA:0C:54:5E:C6:0E:30:F7:66:70:7D:39:AF:CA:B5:F7:32:2D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0620C7C347B1C9A9AE5B04814CA80C2CA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f-SqDFRexg4w92ZwfTmvyrX3Mi0.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57100
IP address blocks: 45.88.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7c:34:7b:1c:9a:9a:e5:b0:48:14:ca:80:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fe4aa0c545ec60e30f766707d39afcab5f7322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:0c:18:31:9f:58:91:f5:5f:9a:dc:0d:88:
b1:27:16:d7:f6:f2:a8:3a:aa:a8:6a:7b:37:8a:29:
b9:fc:0d:7c:8e:67:30:5e:d3:24:39:a8:96:91:c9:
4b:27:7b:b0:04:02:8e:f5:00:48:09:21:cc:45:15:
f2:b9:37:a2:36:b1:2d:67:53:7f:8b:87:42:3f:57:
d5:85:d7:15:d6:67:03:f9:f8:7d:00:e9:ab:05:f2:
bb:70:ba:eb:55:34:9f:1c:6b:3d:bb:6c:04:74:c1:
b3:0b:ca:0b:be:90:69:c8:f3:86:7c:6a:6c:5e:12:
ce:de:d7:41:92:c1:7c:87:5c:c3:46:56:a6:1b:79:
8d:5c:f6:b2:23:a2:71:34:f9:62:e8:f5:7c:b3:7b:
f4:f5:34:a4:f1:24:78:e7:8b:87:5e:20:ac:7d:fe:
fd:56:25:bb:ef:77:ac:6c:97:bf:b0:6e:ce:87:5b:
ce:e2:1d:da:00:f0:17:83:01:e6:be:34:51:bb:29:
4e:dc:e4:dd:ca:b5:45:70:92:cf:3a:4b:91:15:d8:
1a:08:79:05:16:ef:84:96:db:c7:8a:cb:df:55:4a:
88:3d:fd:52:db:14:ba:42:e7:93:67:bd:41:1c:16:
b6:fc:ce:bf:3a:bd:ab:1a:e1:df:fb:ae:37:3f:aa:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:AA:0C:54:5E:C6:0E:30:F7:66:70:7D:39:AF:CA:B5:F7:32:2D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/f-SqDFRexg4w92ZwfTmvyrX3Mi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8d:cb:90:fe:43:9c:bd:cb:d9:67:55:c1:b4:91:d8:23:e4:
d9:b5:d2:37:8c:59:4c:8c:8a:af:af:04:24:80:0e:b7:99:d6:
81:83:61:a7:66:17:1a:98:42:c3:d8:e2:1c:40:d7:df:88:8f:
91:2c:c7:04:b4:7f:b3:27:d7:e5:88:91:56:7a:97:4a:73:aa:
24:fb:74:ed:61:be:67:56:3b:fb:20:4f:77:d6:3c:1b:df:c1:
61:fe:aa:ed:50:1e:b8:d0:4c:ef:fa:90:ce:d9:ff:27:3f:f5:
77:50:03:3f:50:0c:f1:a6:4a:ac:c6:09:63:9b:23:de:28:d6:
a5:93:16:90:b2:01:2f:9d:1d:e5:a5:b9:4f:67:94:78:b6:5d:
b9:0d:1d:44:13:87:d1:0b:e5:2f:7a:60:09:08:24:b5:ee:d2:
c4:00:20:af:a3:3f:6c:00:a4:47:c7:49:5f:fc:40:79:9d:5f:
e9:c7:03:f5:d0:82:dd:b3:ca:4f:c8:2f:aa:5d:ea:1d:d6:b3:
e9:4a:4d:2d:2b:4d:f2:5a:65:50:c3:47:b7:98:9b:d0:27:80:
60:82:a8:1d:ee:31:f8:5b:b3:b2:9d:76:e7:d4:50:86:ae:64:
19:2f:18:8c:48:ef:5f:1d:1f:15:2f:8a:4a:f2:f8:b7:50:59:
12:76:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 12:18:32 2026 by rpki-client