Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa
File: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (raw, json)
Hash identifier: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=
Subject key identifier: 63:81:B2:CE:0E:16:E9:A9:07:7A:38:AB:97:A1:E7:67:94:06:74:67
Certificate issuer: /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial: 019CD78A4C75F0CB75255DF939445CB29153
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa
Signing time: Tue 10 Mar 2026 11:38:10 +0000
ROA not before: Tue 10 Mar 2026 11:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 45.153.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:8a:4c:75:f0:cb:75:25:5d:f9:39:44:5c:b2:91:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Validity
Not Before: Mar 10 11:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6381b2ce0e16e9a9077a38ab97a1e76794067467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:55:38:c2:68:92:9b:57:79:2f:a3:14:ab:
04:89:b7:07:10:66:07:6b:b1:b3:20:23:2b:1c:87:
f6:5c:99:88:a9:df:4d:25:f7:3f:f0:3e:5a:5e:ee:
1b:2d:57:40:fb:c5:49:4f:27:78:d2:e9:1d:67:59:
97:36:46:2f:15:79:33:51:4d:d8:00:72:02:03:7b:
cd:8c:b5:b3:81:6b:85:72:d9:22:19:12:69:97:00:
69:d0:e9:1d:0d:91:c5:23:78:d7:b4:6f:31:71:b2:
e9:a6:82:7c:37:b7:6d:3a:8f:16:bc:30:b2:ab:3a:
f9:55:d9:30:55:4e:70:ee:9d:8d:c5:c0:3b:2d:10:
98:27:e1:eb:28:b6:a3:57:6e:02:6c:72:be:99:24:
75:e4:9f:22:b1:6c:5d:5f:f3:77:7b:65:a4:b8:4f:
10:f8:75:f2:6b:49:1e:24:77:86:19:35:ec:7b:49:
20:f2:95:c1:9e:cc:5e:06:e4:e5:4e:7e:dd:da:71:
54:58:e4:28:9d:0e:d3:c5:25:6f:b1:3b:13:9b:1e:
71:6f:96:90:df:b3:38:72:74:91:cf:4e:57:41:49:
8c:54:2d:2f:40:11:2c:90:19:c9:60:4e:97:1c:8e:
93:69:ce:50:10:16:c4:18:cc:b1:88:61:6a:d0:73:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:B2:CE:0E:16:E9:A9:07:7A:38:AB:97:A1:E7:67:94:06:74:67
X509v3 Authority Key Identifier:
keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.172.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f7:bc:13:e5:be:14:5e:4d:49:a1:04:4a:bc:49:43:d2:21:
60:e2:69:fe:fc:cd:e8:c1:89:84:d0:9e:ab:6b:4e:7f:79:69:
a5:d7:b8:10:0b:6b:18:cb:00:4e:bc:4f:9a:f4:e8:1c:39:2a:
77:bc:ee:fd:82:02:d9:4e:d6:d2:61:12:56:e1:e3:1c:5e:c0:
a7:69:56:a1:c3:d2:83:c4:f4:05:f9:ba:a5:5c:1a:02:2c:dc:
68:ea:b4:8f:be:f2:0f:c9:47:b7:5c:d7:f1:3e:ac:17:68:42:
59:84:c2:54:41:54:83:38:bd:c8:0b:af:ef:9d:d0:7d:3a:8b:
83:32:52:b3:b3:ce:08:3f:6e:f6:ef:b1:b8:84:a1:0e:62:43:
86:6e:e6:27:40:0e:14:b2:3a:80:8d:f3:f2:05:62:3a:be:aa:
37:2e:c3:54:16:48:45:86:93:8e:0f:11:ef:4e:ee:63:d8:1d:
63:06:af:aa:75:1f:1e:dc:2f:f8:e1:f8:ce:41:d1:a7:27:e6:
43:d0:68:e3:e0:d3:e2:7c:2a:aa:6f:52:4b:b0:a6:69:66:95:
75:e7:c8:8d:a0:bb:eb:18:34:25:eb:57:d3:f4:85:e3:a4:b9:
02:1a:30:60:dd:4d:51:e3:15:60:c7:16:d4:c3:77:f4:13:8f:
1b:f3:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:11:35 2026 by rpki-client