Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa
File: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (raw, json)
Hash identifier: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=
Subject key identifier: 90:8E:AA:64:CF:D9:6A:2B:47:AD:6B:C6:A2:51:E1:1E:50:D5:B2:B4
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 019F43F47B6C3F31E687CD46E44D4D97E723
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa
Signing time: Wed 08 Jul 2026 22:58:43 +0000
ROA not before: Wed 08 Jul 2026 22:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 45.133.158.0/24 maxlen: 24
45.133.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:f4:7b:6c:3f:31:e6:87:cd:46:e4:4d:4d:97:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jul 8 22:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=908eaa64cfd96a2b47ad6bc6a251e11e50d5b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:5e:4b:4f:c1:8f:24:82:bf:82:2a:2b:1e:
b5:ad:7a:8d:a4:88:99:b4:48:c7:ed:d4:9f:00:a6:
22:51:17:e9:43:af:3d:7e:2a:60:cf:b2:af:90:aa:
5f:b9:63:27:76:e0:90:72:25:ff:7d:dd:fc:1a:44:
84:f9:68:7b:7f:d2:a6:91:9e:47:fc:78:a5:51:0c:
2b:a9:f9:73:21:a8:cd:a4:d5:6c:e7:e7:45:23:c1:
38:df:64:52:58:f5:4d:e6:fc:44:38:9e:f5:23:90:
fb:4c:24:bb:76:4b:24:f0:52:93:86:90:ed:57:92:
d0:70:c2:6a:dc:92:0a:16:9c:30:ca:6b:a7:c7:99:
d0:22:4b:79:af:f9:17:86:1d:f5:9a:68:0d:0f:33:
03:e3:1e:b8:0e:c3:6c:42:28:95:3a:4a:f8:62:51:
ed:6b:0a:e1:3c:d8:73:92:d2:07:f1:84:a1:b4:5b:
87:df:b3:33:d2:41:a6:5d:0b:94:56:6a:72:15:c2:
d9:94:c5:c3:97:90:4e:cc:35:99:10:81:c1:c3:66:
bc:b4:e9:87:af:59:80:44:2e:f2:6b:1b:64:c5:d6:
78:5f:51:46:68:fe:2e:fe:b3:43:c7:ae:40:d5:52:
98:73:43:cf:a0:3d:a2:fd:23:05:3f:41:9f:e7:fc:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:AA:64:CF:D9:6A:2B:47:AD:6B:C6:A2:51:E1:1E:50:D5:B2:B4
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.158.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:88:ec:d1:fa:9e:c1:4c:b5:01:73:1e:c7:b8:cc:03:bd:f0:
8c:e6:53:58:66:aa:7f:23:b7:fc:f7:19:43:fc:ec:9d:2f:16:
87:92:c4:62:85:fc:4d:41:87:84:ce:0f:72:96:b6:cd:8e:26:
98:3e:d8:61:00:1c:f8:53:89:13:67:c9:4a:9b:b8:80:f8:4e:
8e:ff:d1:e8:e2:5e:6e:82:6f:85:d4:37:5d:b4:07:42:41:9d:
e9:1f:7f:f9:d9:c6:a1:71:d2:88:8f:d9:93:fc:43:92:c0:c3:
da:9a:e1:18:87:d6:14:8f:49:b0:dc:78:41:ca:c6:d0:26:49:
90:8f:03:33:d3:27:ff:85:d3:92:35:cb:04:e4:14:5b:77:79:
9c:ca:1b:c2:fe:83:af:df:67:f2:ab:75:d0:5f:01:a9:ca:73:
14:66:d9:01:57:5e:fd:68:ec:f9:2b:f4:61:cb:89:f4:a0:8a:
70:88:28:f1:83:37:57:85:5e:d4:f9:b0:40:11:db:00:8c:75:
d1:dc:3c:5f:64:59:84:17:b0:32:d2:b2:d0:12:85:8c:a9:3c:
92:b9:c8:65:7b:60:45:3b:74:07:75:48:90:19:89:04:d2:c1:
a9:16:f1:67:84:f7:ca:fa:fb:fc:65:dd:99:a2:07:a7:07:dc:
08:12:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:18 2026 by rpki-client