Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1vOhHgLL8ypkA7AeKTApTuYjMM8.roa
File: 1vOhHgLL8ypkA7AeKTApTuYjMM8.roa (raw, json)
Hash identifier: a4ximXSS2ACOK28cI23+Vv6QeWhDzbBvIfhwIlFgfY8=
Subject key identifier: D6:F3:A1:1E:02:CB:F3:2A:64:03:B0:1E:29:30:29:4E:E6:23:30:CF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A155CAD700E8EC9A665CA6A1C3834363C7
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1vOhHgLL8ypkA7AeKTApTuYjMM8.roa
Signing time: Mon 19 Oct 2026 20:11:58 +0000
ROA not before: Mon 19 Oct 2026 20:11:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206668
IP address blocks: 45.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:ca:d7:00:e8:ec:9a:66:5c:a6:a1:c3:83:43:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 19 20:11:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6f3a11e02cbf32a6403b01e2930294ee62330cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:df:89:8c:ea:cb:97:fd:24:42:ee:a9:5c:
2d:0d:e4:f2:a6:d4:13:f2:06:dd:0c:7c:70:11:16:
e3:76:9e:d2:1e:2d:61:40:5b:d8:79:a4:9e:57:1e:
7b:1d:17:39:d8:6d:c7:b3:49:f0:ac:06:ef:58:51:
4e:60:bd:45:fe:c4:5c:50:27:e0:27:39:41:c1:64:
2a:66:55:1b:80:9f:dc:ba:eb:80:03:0c:5a:21:1b:
0a:6a:d9:15:47:00:40:4e:53:d2:7e:30:67:55:0a:
c0:0e:6d:1f:21:6c:35:43:e9:99:90:b7:9d:2d:35:
4e:2b:1a:fb:c7:de:b6:3c:b4:d6:ca:08:02:15:53:
08:6c:6f:cd:65:12:b0:67:e3:df:9f:41:70:15:7f:
3c:72:c2:32:ac:30:8b:f8:90:a1:b5:b7:a8:a7:76:
06:92:51:cb:f4:b2:03:9b:87:c9:9f:82:fa:f1:3c:
86:a8:50:1c:a6:26:5c:40:74:34:d8:31:03:4f:72:
46:e7:dd:51:57:77:44:51:c9:a7:ad:7b:bc:ae:c8:
a5:f8:da:2a:92:cb:ee:ae:31:40:83:95:8c:49:70:
5f:45:38:96:b4:a0:fb:f2:25:97:a6:ff:c6:bc:74:
54:63:27:f1:45:15:4e:32:5f:5c:7d:31:e1:18:95:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:A1:1E:02:CB:F3:2A:64:03:B0:1E:29:30:29:4E:E6:23:30:CF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1vOhHgLL8ypkA7AeKTApTuYjMM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:61:18:33:73:f7:ee:ba:d3:69:af:74:c6:6f:ef:b1:7e:3b:
bb:7b:11:9b:79:ae:ae:03:e4:43:76:ca:e5:2d:6c:d0:78:9e:
c9:e2:83:af:f5:0e:2a:c7:b1:fb:b9:f9:3d:60:a1:08:86:a8:
67:b9:33:e4:b2:68:d9:85:34:5b:92:86:b8:b4:e3:51:b2:d1:
24:a5:17:6d:47:60:73:27:93:11:9d:ab:0b:4b:0e:69:9c:bc:
eb:cf:14:f3:af:8f:2c:72:97:56:f4:2f:b5:e7:b4:3f:9c:ed:
2c:bc:cb:56:09:f2:fe:00:af:14:25:b6:d3:b7:17:7a:75:17:
3b:cf:2e:23:86:a6:98:51:43:64:b8:22:dc:56:79:4a:9b:d1:
d2:82:5a:54:e8:66:70:fb:d3:b1:c0:e6:d7:7d:b7:46:7e:b3:
23:75:02:5f:87:50:09:e6:9c:26:ef:65:1b:83:95:32:a7:ae:
a2:26:46:c5:23:40:9c:c2:2e:c2:07:c0:57:68:24:bf:34:ae:
09:4f:e4:2f:09:8d:77:9e:39:63:56:2e:02:e4:65:5b:68:64:
45:13:e7:78:ad:ff:b0:5e:e6:d5:94:4b:68:35:2a:c1:3a:10:
ee:31:0e:c2:33:f1:a3:ae:c6:99:80:54:26:38:81:53:e7:08:
31:1d:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:32 2026 by rpki-client