Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1kOZn--0TV8mINAOK8zNe0cR5Fc.roa
File: 1kOZn--0TV8mINAOK8zNe0cR5Fc.roa (raw, json)
Hash identifier: +yJ0/l/ebfqk5PtE/KW8wQHru8HbhRVMl8T92kwAYpA=
Subject key identifier: D6:43:99:9F:EF:B4:4D:5F:26:20:D0:0E:2B:CC:CD:7B:47:11:E4:57
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FF77B27DEEC632666356BB849D90B2273
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1kOZn--0TV8mINAOK8zNe0cR5Fc.roa
Signing time: Wed 12 Aug 2026 19:37:51 +0000
ROA not before: Wed 12 Aug 2026 19:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.155.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:7b:27:de:ec:63:26:66:35:6b:b8:49:d9:0b:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 12 19:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d643999fefb44d5f2620d00e2bcccd7b4711e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:86:76:91:fa:6a:91:6a:7b:8b:e3:b3:38:
e2:01:20:48:91:95:3f:1a:f4:1b:85:51:c0:21:b5:
d4:d0:f5:cd:c3:6f:74:39:14:95:92:14:32:ea:fe:
e3:7b:75:0e:50:05:dd:a9:4a:4c:71:a7:3c:41:68:
e9:81:1e:67:8b:d0:23:17:c1:a3:72:e2:f4:39:97:
d3:bf:59:2a:36:75:a1:73:98:15:a4:d1:5e:fc:d3:
6f:ce:17:5a:fa:ed:2a:94:52:e6:53:c1:b9:f3:52:
bf:5a:33:1a:70:7b:ec:f0:92:f6:73:4a:32:57:d5:
e7:2d:a3:c3:81:7f:64:1c:90:4b:8c:54:ce:73:be:
64:44:e6:27:bc:06:d5:89:49:aa:01:86:15:95:7e:
44:f7:2f:17:73:77:85:bf:f4:a5:96:24:fe:eb:fc:
00:f4:93:51:7b:d7:98:a3:a0:10:6c:84:d9:3a:5b:
11:6e:a0:83:1a:fe:53:66:1f:11:30:47:bc:7d:c5:
38:a7:60:09:67:7e:41:72:4c:82:6c:fc:0c:dd:3b:
e9:2c:06:a5:27:dd:ee:57:41:87:5a:0e:62:eb:2f:
7d:2f:f5:54:4c:d2:de:ee:23:fd:18:e1:64:43:15:
02:49:fd:33:a7:3e:af:f6:29:b6:28:96:e7:f3:b4:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:99:9F:EF:B4:4D:5F:26:20:D0:0E:2B:CC:CD:7B:47:11:E4:57
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1kOZn--0TV8mINAOK8zNe0cR5Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:24:3d:2d:6c:f9:92:6c:f5:a0:8e:48:88:00:51:f5:c7:28:
24:52:88:6b:89:94:3b:d4:6a:e0:57:f9:2a:87:c0:22:2c:35:
63:fa:23:19:13:2c:dc:30:8c:bf:71:6a:10:7b:c2:70:b6:fd:
b5:32:be:0f:48:e3:31:4a:b5:80:b6:a2:a8:12:20:c2:08:86:
03:ed:ab:45:1a:0e:07:46:21:1f:4e:e0:88:91:77:0a:7e:93:
f7:a1:ed:87:14:a9:f1:6a:67:b1:14:f9:76:39:5a:a1:e9:28:
d6:4e:b4:37:66:1d:38:db:64:a6:c8:bf:f0:11:8c:24:f6:3c:
93:5e:96:f5:9a:0a:ee:4a:18:a5:93:f6:d9:b7:0a:ea:ee:f8:
91:78:93:bc:8b:0c:b3:23:0e:82:fe:f6:35:ee:dc:4d:e8:0d:
c5:5f:b9:01:c2:0d:ca:3c:af:38:95:a8:68:76:a5:d1:d8:f5:
49:aa:61:d5:44:a9:d8:2c:21:c9:64:4e:2a:88:3a:f0:c3:64:
43:e5:c0:4e:3a:68:1c:90:59:4a:c8:b9:2d:42:b7:0a:09:f4:
26:fb:c0:93:34:6f:da:f0:c6:6f:40:39:2e:e9:2b:8e:71:d3:
97:04:54:d5:02:a2:86:fd:59:4d:68:44:ee:41:a6:5f:22:f2:
78:7f:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:27 2026 by rpki-client