Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/d7nZe81qaoCdXSImVltE44ElgDY.roa
File: d7nZe81qaoCdXSImVltE44ElgDY.roa (raw, json)
Hash identifier: Is00mekfqV4fXzJ0gbnS7mGZWvbwZz82PUJow+pkSU8=
Subject key identifier: 77:B9:D9:7B:CD:6A:6A:80:9D:5D:22:26:56:5B:44:E3:81:25:80:36
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0B431F164D0C2FF998DFF27E2E9B1430E
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/d7nZe81qaoCdXSImVltE44ElgDY.roa
Signing time: Fri 18 Sep 2026 11:06:07 +0000
ROA not before: Fri 18 Sep 2026 11:06:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.143.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:31:f1:64:d0:c2:ff:99:8d:ff:27:e2:e9:b1:43:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 18 11:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b9d97bcd6a6a809d5d2226565b44e381258036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:07:27:a2:17:43:ad:37:64:67:58:e3:9b:
3d:39:c0:ce:66:3e:31:7f:a0:43:d5:a0:1f:42:f9:
7c:37:fc:cf:1c:fa:4a:ff:b3:9c:73:5a:c5:4e:69:
79:4a:26:17:a7:a1:31:d4:65:c9:b0:ed:1f:6d:d1:
b2:ae:74:23:21:27:0d:43:89:ea:5f:6d:37:50:a8:
aa:a6:b7:f0:55:05:a9:b8:29:fb:90:66:e0:10:2a:
92:a0:b5:6b:98:4b:53:e9:af:6f:72:5b:c3:c7:e7:
bc:53:4d:a0:b7:53:0c:78:f7:0a:9d:b1:05:ba:54:
1b:c9:4b:0e:af:81:4f:91:48:aa:ff:4f:48:b5:cc:
c9:0c:7b:f7:38:e5:a5:ea:33:6b:dc:19:cf:e4:5f:
f4:19:46:09:1e:22:d3:89:c5:2e:b9:3d:4e:0b:4e:
31:ad:88:ea:57:ce:80:28:34:cc:88:46:32:55:8b:
73:99:67:3e:1f:3b:ec:24:80:5f:19:18:a4:ae:f7:
f6:a0:ba:40:a6:67:20:68:6b:e4:60:5e:76:46:d7:
26:58:04:90:03:0f:9b:1a:b3:91:7f:17:e7:d7:3c:
2a:e0:8e:c9:4f:ec:e1:eb:08:bc:1a:45:f9:0e:12:
28:c7:c4:b3:cb:f9:de:c0:71:8e:22:80:37:47:6d:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:D9:7B:CD:6A:6A:80:9D:5D:22:26:56:5B:44:E3:81:25:80:36
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/d7nZe81qaoCdXSImVltE44ElgDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:81:60:de:74:95:30:e5:b3:ed:75:ba:7d:ed:bf:45:64:e0:
c1:aa:ba:74:07:48:02:89:08:f5:57:4d:c6:bc:8d:a1:8a:08:
fb:4d:71:c5:b5:fd:3e:fe:74:5f:06:7a:e2:f2:d5:fe:3b:0c:
d3:b3:e0:58:68:df:1a:80:0f:12:df:d3:ab:65:89:d8:90:0a:
63:ab:a8:de:30:68:63:c2:85:38:7f:3c:4e:9f:f3:a7:4b:06:
59:38:e6:9a:40:2f:3e:14:7d:5f:db:76:8b:a2:c9:5e:f9:e5:
ef:09:cf:1a:92:34:27:84:de:2b:8a:47:c5:f6:8c:74:fd:f6:
57:34:97:cd:33:2b:50:41:a4:ac:e4:5f:ad:20:de:9c:83:ec:
c3:2f:20:3a:71:72:e1:cd:d8:a4:84:9a:a9:96:42:70:88:dd:
9b:e3:cb:71:ce:42:2c:df:5d:8d:11:3f:54:fd:1e:b0:64:38:
06:f5:08:51:52:c3:88:21:67:a7:c3:c2:33:90:7f:ae:b4:a7:
52:ca:e6:2a:08:72:94:9f:52:a6:c7:7a:57:56:06:bf:62:42:
62:46:29:3f:84:c3:81:37:ac:c6:82:66:4a:b6:8d:73:4a:9e:
61:7e:bd:9f:f3:03:66:60:c6:c4:91:c0:aa:af:f7:0d:c2:0f:
f6:1a:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:47 2026 by rpki-client