Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9IDuKKypXOAE2YwIgWWYH3Qj4g.roa
File: f9IDuKKypXOAE2YwIgWWYH3Qj4g.roa (raw, json)
Hash identifier: P3IpsDe3Bq1YTi9AtnJ8xyK8bDdH+B1d9gBn+kaXcX8=
Subject key identifier: 7F:D2:03:B8:A2:B2:A5:73:80:13:66:30:22:05:96:60:7D:D0:8F:88
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01A068590983FC332D51C8172D83AE153CA7
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9IDuKKypXOAE2YwIgWWYH3Qj4g.roa
Signing time: Thu 03 Sep 2026 17:37:40 +0000
ROA not before: Thu 03 Sep 2026 17:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203911
IP address blocks: 45.151.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:59:09:83:fc:33:2d:51:c8:17:2d:83:ae:15:3c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Sep 3 17:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fd203b8a2b2a57380136630220596607dd08f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:15:93:8b:25:5c:4e:4b:e6:13:f8:92:cb:
df:61:da:8f:ae:7c:84:a6:69:6b:44:ac:b7:4d:bc:
97:3e:1a:89:21:70:80:74:a9:54:ae:f4:5e:23:7f:
31:d4:0c:76:d1:0b:f3:a6:46:de:da:8e:26:b7:8c:
1a:d1:52:c5:7d:f1:60:42:58:e4:bd:65:92:9e:96:
5f:c3:67:9c:f6:fc:84:3e:1a:1e:25:5a:1f:c2:1d:
a4:b6:4f:28:7a:e3:48:d1:ab:cd:da:fc:ab:a6:71:
a9:62:a6:5d:e7:5a:c4:5d:30:66:cf:b7:86:4f:70:
4d:3c:ae:c9:5d:74:85:22:5d:09:b2:9e:a5:d1:f8:
29:b2:e9:e2:e2:ea:62:12:de:f3:09:e7:cc:5a:17:
d0:9f:4b:fb:56:b5:69:26:49:be:a0:5a:42:e6:96:
21:44:e4:49:dc:0c:b3:21:3e:ae:91:7d:f6:e2:2f:
51:e6:65:6b:e3:f6:52:46:38:58:cc:ae:a1:d3:1c:
76:00:a1:bd:87:39:1b:be:97:82:7d:dc:94:51:fe:
ce:3f:4a:7d:d3:7d:6f:97:04:7d:4f:9f:a4:a3:d8:
00:bd:7d:5b:db:21:5f:7b:a8:f2:e3:d5:d6:fa:da:
50:e5:75:b2:5c:ff:af:7d:7f:d0:5a:fc:3a:10:43:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D2:03:B8:A2:B2:A5:73:80:13:66:30:22:05:96:60:7D:D0:8F:88
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f9IDuKKypXOAE2YwIgWWYH3Qj4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:52:be:47:47:34:00:be:b5:27:9e:58:7f:44:08:a9:51:f1:
4e:6f:2a:9b:c6:63:1c:bf:37:ce:8f:6d:16:28:9a:2e:2b:a9:
e7:0d:2c:25:63:b9:1f:c8:59:c3:04:90:e6:83:84:29:de:03:
ef:5c:7c:d2:94:2f:d8:03:e5:4d:da:da:e0:7a:89:28:af:8b:
e8:a4:1e:ea:03:e0:41:e1:fb:4a:44:29:c1:a2:11:28:69:5d:
10:9a:df:08:9b:ed:49:fd:bc:c1:b8:a8:3e:6a:44:f2:4f:18:
16:26:c3:b6:f8:cb:44:06:62:37:2e:40:8f:93:e8:58:3f:2c:
78:8d:29:9e:8d:d7:71:4f:d9:19:e5:2c:19:c7:c2:54:4f:5c:
6d:a1:3a:7c:86:d7:d4:a7:c7:15:1d:3d:b2:ef:dc:07:7f:5e:
c5:38:aa:3b:09:95:eb:f6:9c:04:89:25:3b:ba:f0:7a:69:95:
0a:14:89:82:a9:40:a8:f4:74:f9:1b:07:32:a2:94:5b:f6:e4:
55:c8:30:60:78:a1:5a:a0:f2:15:f5:46:c2:5c:50:db:45:b8:
9f:30:18:c5:a1:b9:94:bb:da:3f:fa:33:0f:a9:ff:10:95:8f:
f2:61:11:86:4e:fe:d4:49:8a:b6:96:2d:1b:43:44:bc:d0:cb:
e6:9f:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:24 2026 by rpki-client