Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b0U-QgW6ff2wEvdJj_Ta5T1KXXk.roa
File: b0U-QgW6ff2wEvdJj_Ta5T1KXXk.roa (raw, json)
Hash identifier: l6QNIlg7lhP7ddUKHuVK0tXedCH2FK0mZpGoK4m7hss=
Subject key identifier: 6F:45:3E:42:05:BA:7D:FD:B0:12:F7:49:8F:F4:DA:E5:3D:4A:5D:79
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019FF53E0A6CF05D8959E158F26D6CCD927F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b0U-QgW6ff2wEvdJj_Ta5T1KXXk.roa
Signing time: Wed 12 Aug 2026 09:11:51 +0000
ROA not before: Wed 12 Aug 2026 09:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 45.43.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:3e:0a:6c:f0:5d:89:59:e1:58:f2:6d:6c:cd:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 12 09:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f453e4205ba7dfdb012f7498ff4dae53d4a5d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:1e:7b:d4:c4:66:13:b4:cf:8e:82:88:be:
05:99:3f:7c:93:9f:81:fb:80:03:03:91:11:18:cf:
6b:6b:46:76:f7:2c:8c:55:a0:fe:25:d7:8f:ff:9d:
9d:5e:c4:67:ef:4d:9f:a0:51:2e:4f:44:62:76:4c:
dc:37:7e:ea:fd:7d:89:f8:9c:66:da:2c:b8:e8:18:
fc:57:a0:d5:06:06:25:b2:52:ed:a2:17:7c:eb:ec:
64:e0:6d:47:fb:d1:0a:bd:96:a6:c6:7a:de:2d:0b:
25:26:60:9d:c4:ac:8d:dc:aa:82:a2:90:3e:5f:5a:
4c:88:c7:da:22:05:ed:8a:c6:3e:42:a1:e2:75:c7:
68:6a:a4:f7:f2:af:b2:c3:a2:2b:46:6f:76:b8:e8:
c1:85:ed:21:db:55:90:9d:da:da:30:5e:2b:22:7b:
8b:9c:eb:87:d0:ca:22:82:67:8d:71:7c:3e:d2:32:
c8:cb:aa:95:75:9a:26:09:74:30:fc:07:42:b9:15:
da:10:03:64:e5:1d:fe:1e:e8:d3:ee:c1:4d:6c:d7:
53:c1:0b:70:b0:c4:82:ee:a4:70:fc:a5:fa:94:20:
5e:39:03:b7:76:87:27:5d:6c:95:41:8d:d5:ae:66:
97:10:dc:96:96:df:e1:6b:cb:6b:56:c8:14:f7:95:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:3E:42:05:BA:7D:FD:B0:12:F7:49:8F:F4:DA:E5:3D:4A:5D:79
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b0U-QgW6ff2wEvdJj_Ta5T1KXXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.153.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:ca:6d:d2:8d:c3:3b:03:8e:bd:c5:0c:ee:6e:9e:86:2a:
92:12:c8:cd:c2:0e:4f:c8:86:81:1e:ca:c5:97:32:3d:b5:4a:
0f:30:c5:51:04:4b:90:90:54:bd:55:2c:91:7b:a7:07:f3:3d:
d4:48:c6:65:9f:48:6c:3c:75:76:9f:7c:6b:7b:48:83:c6:b9:
c0:26:aa:28:e4:8c:4c:37:b1:49:ff:22:f4:6f:83:0f:2c:f9:
75:bd:2e:2a:c2:61:d6:36:f6:b3:99:6f:b2:64:71:2b:61:00:
03:0e:f1:26:e1:6a:f5:78:0d:cd:05:5e:9f:cf:21:83:ff:b1:
31:d4:1b:29:ca:fa:ab:aa:6f:57:5e:57:b6:65:76:a8:2a:d1:
04:2e:d5:07:b0:6c:d9:63:6c:27:a1:0a:b1:01:94:72:7b:8b:
ba:98:94:13:62:3a:93:4c:00:a5:e3:b3:e6:95:e4:7a:1d:e9:
bb:83:94:ba:f4:df:30:1b:b8:f4:b2:be:7c:27:78:8a:91:bb:
50:4b:15:e4:a8:b9:66:04:d1:d2:3c:70:16:2e:92:18:1a:0b:
ed:85:43:e6:3a:f2:62:a7:43:19:c0:6b:28:12:df:6d:f6:7f:
ed:97:7a:19:6a:b3:97:ec:49:89:e9:c0:55:96:11:de:e2:ff:
e2:79:fd:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/1Pgps8F2JWeFY8m1szZJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYwODEyMDkxMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ1M2U0MjA1YmE3ZGZkYjAxMmY3NDk4ZmY0ZGFlNTNkNGE1ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTgee9TEZhO0z46CiL4FmT98k5+B
+4ADA5ERGM9ra0Z29yyMVaD+JdeP/52dXsRn702foFEuT0RidkzcN37q/X2J+Jxm
2iy46Bj8V6DVBgYlslLtohd86+xk4G1H+9EKvZamxnreLQslJmCdxKyN3KqCopA+
X1pMiMfaIgXtisY+QqHidcdoaqT38q+yw6IrRm92uOjBhe0h21WQndraMF4rInuL
nOuH0MoigmeNcXw+0jLIy6qVdZomCXQw/AdCuRXaEANk5R3+HujT7sFNbNdTwQtw
sMSC7qRw/KX6lCBeOQO3docnXWyVQY3VrmaXENyWlt/ha8trVsgU95W6pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9FPkIFun39sBL3SY/02uU9Sl15MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvYjBVLVFnVzZmZjJ3RXZkSmpfVGE1VDFLWFhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSuZMA0G
CSqGSIb3DQEBCwUAA4IBAQAwzspt0o3DOwOOvcUM7m6ehiqSEsjNwg5PyIaBHsrF
lzI9tUoPMMVRBEuQkFS9VSyRe6cH8z3USMZln0hsPHV2n3xre0iDxrnAJqoo5IxM
N7FJ/yL0b4MPLPl1vS4qwmHWNvazmW+yZHErYQADDvEm4Wr1eA3NBV6fzyGD/7Ex
1Bspyvqrqm9XXle2ZXaoKtEELtUHsGzZY2wnoQqxAZRye4u6mJQTYjqTTACl47Pm
leR6Hem7g5S69N8wG7j0sr58J3iKkbtQSxXkqLlmBNHSPHAWLpIYGgvthUPmOvJi
p0MZwGsoEt9t9n/tl3oZarOX7EmJ6cBVlhHe4v/ief1e
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:44 2026 by rpki-client