Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/0rlwF8bzHYPoC8R-lM02lYukPa0.roa
File: 0rlwF8bzHYPoC8R-lM02lYukPa0.roa (raw, json)
Hash identifier: nxXWVpl4JSN5lCg1zrsiynOdO6zA26157ttNo2duhRo=
Subject key identifier: D2:B9:70:17:C6:F3:1D:83:E8:0B:C4:7E:94:CD:36:95:8B:A4:3D:AD
Certificate issuer: /CN=4360f57c5c95f2694cd1da7ca3c031bb962e642a
Certificate serial: 019F2368C36B8A2B7E92FF94F2D49D1252CD
Authority key identifier: 43:60:F5:7C:5C:95:F2:69:4C:D1:DA:7C:A3:C0:31:BB:96:2E:64:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/0rlwF8bzHYPoC8R-lM02lYukPa0.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208721
IP address blocks: 45.14.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c3:6b:8a:2b:7e:92:ff:94:f2:d4:9d:12:52:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4360f57c5c95f2694cd1da7ca3c031bb962e642a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2b97017c6f31d83e80bc47e94cd36958ba43dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:ff:c8:8d:f6:75:e7:f1:ad:ab:ef:17:67:
40:11:53:f1:81:5c:39:43:ec:9a:a4:e3:77:f4:ec:
fb:c1:c7:e3:59:bd:52:ea:46:dc:e9:bf:7e:d2:5f:
cf:c5:a8:77:00:0e:a7:c7:7e:94:7c:de:86:d6:34:
bb:4a:fd:47:2e:03:40:8c:1f:d7:a7:87:af:a0:2f:
1b:68:a1:8b:29:d7:d9:e4:c0:67:f1:0e:89:4d:77:
71:b3:5d:7a:cc:47:be:5a:c8:a8:11:c2:c1:c9:90:
80:53:3a:ca:c1:b5:a6:a0:9a:36:7a:fd:0f:b6:98:
07:3d:06:37:48:97:18:84:d5:1c:5f:36:2b:90:d9:
72:94:90:9e:67:43:49:ff:e2:eb:63:02:0d:f4:d4:
84:70:68:f6:39:a9:cd:cd:3a:70:23:4d:aa:9b:66:
67:41:98:1f:3f:a1:ad:2c:25:8d:16:b5:96:0a:e9:
6c:a0:40:95:ce:6f:4d:f3:03:63:c1:72:be:88:48:
ba:e4:55:22:25:86:f4:82:71:5e:27:f4:88:5b:fe:
d1:77:a3:44:de:36:2b:db:7f:50:d0:22:97:8d:92:
e3:53:e6:8b:56:22:c3:73:29:31:59:c5:a7:49:e2:
44:05:e2:84:f3:bb:3c:53:f6:e7:b5:a5:83:ed:63:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B9:70:17:C6:F3:1D:83:E8:0B:C4:7E:94:CD:36:95:8B:A4:3D:AD
X509v3 Authority Key Identifier:
keyid:43:60:F5:7C:5C:95:F2:69:4C:D1:DA:7C:A3:C0:31:BB:96:2E:64:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/0rlwF8bzHYPoC8R-lM02lYukPa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/Q2D1fFyV8mlM0dp8o8Axu5YuZCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:de:0a:ff:11:9a:f3:45:b7:5f:eb:92:98:3d:02:fd:d4:fe:
1b:46:f4:5f:e2:c7:4f:d7:8d:cc:ee:9d:32:b5:4a:43:a3:d8:
0f:6f:4f:8a:78:ea:a3:3e:1f:d0:13:0c:c4:f8:5e:95:b5:b5:
0e:b9:29:ae:ab:21:50:58:1e:d9:25:d7:19:1b:5c:fe:a7:61:
87:47:d5:e1:ee:d9:9d:21:24:72:62:cc:59:61:c4:20:24:79:
0d:8d:7c:ad:b1:a4:3e:8d:62:d0:20:86:a1:d1:17:32:a4:26:
2a:c3:f0:07:2a:79:41:16:74:62:4a:2c:be:6b:97:bd:06:38:
2e:c5:c0:e4:70:09:ee:49:77:aa:5f:46:fa:29:bf:43:fe:8a:
24:8f:d8:be:c5:86:da:11:64:89:2f:8c:0a:17:6a:10:78:da:
7f:83:36:df:a2:19:db:97:19:cd:aa:2a:99:e0:77:a8:d7:c1:
c8:24:43:bf:11:b0:c0:1d:29:cd:5b:95:18:8e:19:13:65:89:
23:2d:df:1c:8a:dd:0a:e3:c2:8a:ed:88:a8:b6:71:9a:13:be:
62:15:11:5d:37:56:a5:eb:b7:e8:9a:53:b5:ec:bc:1f:e4:af:
7e:a2:b3:e6:24:9a:26:ce:89:4f:f0:da:52:11:54:6e:f5:c8:
ec:66:4c:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMNriit+kv+U8tSdElLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjBmNTdjNWM5NWYyNjk0Y2QxZGE3Y2EzYzAzMWJiOTYy
ZTY0MmEwHhcNMjYwNzAyMTUxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmI5NzAxN2M2ZjMxZDgzZTgwYmM0N2U5NGNkMzY5NThiYTQzZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9b/yI32defxravvF2dAEVPxgVw5
Q+yapON39Oz7wcfjWb1S6kbc6b9+0l/Pxah3AA6nx36UfN6G1jS7Sv1HLgNAjB/X
p4evoC8baKGLKdfZ5MBn8Q6JTXdxs116zEe+WsioEcLByZCAUzrKwbWmoJo2ev0P
tpgHPQY3SJcYhNUcXzYrkNlylJCeZ0NJ/+LrYwIN9NSEcGj2OanNzTpwI02qm2Zn
QZgfP6GtLCWNFrWWCulsoECVzm9N8wNjwXK+iEi65FUiJYb0gnFeJ/SIW/7Rd6NE
3jYr239Q0CKXjZLjU+aLViLDcykxWcWnSeJEBeKE87s8U/bntaWD7WMbTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNK5cBfG8x2D6AvEfpTNNpWLpD2tMB8GA1UdIwQY
MBaAFENg9XxclfJpTNHafKPAMbuWLmQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJEMWZGeVY4bWxNMGRwOG84QXh1NVl1WkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt
M2MzNjczZDQ0OTA1LzEvMHJsd0Y4YnpIWVBvQzhSLWxNMDJsWXVrUGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1
LzEvUTJEMWZGeVY4bWxNMGRwOG84QXh1NVl1WkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ50MA0G
CSqGSIb3DQEBCwUAA4IBAQCr3gr/EZrzRbdf65KYPQL91P4bRvRf4sdP143M7p0y
tUpDo9gPb0+KeOqjPh/QEwzE+F6VtbUOuSmuqyFQWB7ZJdcZG1z+p2GHR9Xh7tmd
ISRyYsxZYcQgJHkNjXytsaQ+jWLQIIah0RcypCYqw/AHKnlBFnRiSiy+a5e9Bjgu
xcDkcAnuSXeqX0b6Kb9D/ookj9i+xYbaEWSJL4wKF2oQeNp/gzbfohnblxnNqiqZ
4Heo18HIJEO/EbDAHSnNW5UYjhkTZYkjLd8cit0K48KK7YiotnGaE75iFRFdN1al
67fomlO17Lwf5K9+orPmJJomzolP8NpSEVRu9cjsZkzz
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:55 2026 by rpki-client