Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-ps1L6gUORZ-P4S1XMIKuxUe2W4.roa
File: 1-ps1L6gUORZ-P4S1XMIKuxUe2W4.roa (raw, json)
Hash identifier: mIK1E7aKtJ2aKzwLj3ibdPquqmxrCgAS5M/Gfbl8pMw=
Subject key identifier: FA:9B:35:2F:A8:14:39:16:7E:3F:84:B5:5C:C2:0A:BB:15:1E:D9:6E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01A0581D07F7736BAACF796E3E47DB9B8738
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-ps1L6gUORZ-P4S1XMIKuxUe2W4.roa
Signing time: Mon 31 Aug 2026 13:58:12 +0000
ROA not before: Mon 31 Aug 2026 13:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 45.140.174.0/24 maxlen: 24
92.246.77.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:1d:07:f7:73:6b:aa:cf:79:6e:3e:47:db:9b:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 31 13:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa9b352fa81439167e3f84b55cc20abb151ed96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:61:66:2c:8c:fc:3f:92:90:3c:ca:a1:03:
4b:bd:55:51:17:f0:b6:98:32:3f:2c:90:08:00:9c:
a3:01:41:ac:2f:83:1d:73:10:18:ad:46:86:b8:04:
24:a8:d0:b4:2c:34:d3:cf:61:83:85:c7:29:1f:c0:
85:a9:73:05:63:ea:88:f0:13:dd:41:5d:37:a0:75:
47:ac:00:b2:be:f4:62:87:e7:73:f4:70:f4:ea:2f:
eb:23:55:33:e5:20:68:3b:d0:dd:d4:b4:d2:2a:ed:
04:6e:06:73:42:4c:a2:f8:4c:6a:9f:0d:b9:9c:9c:
8b:2d:b9:83:44:83:f6:e8:6a:24:ac:32:6a:6b:af:
80:55:4a:d9:6a:d4:87:64:d1:dd:ff:28:49:cc:54:
87:14:01:c9:e1:dc:d1:83:d3:3e:99:c7:ad:bd:43:
e3:c6:cd:db:10:3b:7a:24:cb:ab:2a:25:22:7f:cb:
79:b6:7c:62:95:e7:d9:0e:0e:4e:b9:52:36:7d:e0:
3e:84:8c:69:93:05:f0:f0:b5:8f:05:a9:05:0b:d0:
f5:27:65:7d:11:de:e7:00:35:0a:d1:ae:a6:41:b0:
51:e5:20:48:38:8f:8b:e5:50:4a:5f:14:25:fe:7a:
da:1a:be:01:90:6f:65:a7:4d:c3:57:35:5e:92:a5:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:35:2F:A8:14:39:16:7E:3F:84:B5:5C:C2:0A:BB:15:1E:D9:6E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/1-ps1L6gUORZ-P4S1XMIKuxUe2W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.174.0/24
92.246.77.0/24
194.147.88.0/24
Signature Algorithm: sha256WithRSAEncryption
84:52:61:99:9a:4d:37:47:fb:72:de:d8:ed:80:65:bf:69:0f:
f1:b8:42:fa:74:db:58:9e:a3:df:3b:7b:96:99:2e:6d:3a:e6:
85:af:39:94:79:31:9a:6e:8b:4a:3b:84:6e:49:d4:85:1a:83:
d6:ee:36:85:9c:0a:d3:2a:4b:e6:f3:5f:16:f3:6c:71:f0:3f:
9b:67:2a:3e:bc:0b:50:78:71:27:b1:a2:b2:9b:e8:c5:72:2e:
c7:c1:1d:49:08:9b:92:fa:ef:ad:1b:63:94:ca:ce:14:1e:4c:
83:52:ca:3f:bf:f9:82:3c:bd:09:bb:dc:9c:98:d5:68:1e:38:
86:73:fe:92:45:61:7e:e2:5f:1a:dc:2d:2b:2b:de:5c:c6:0f:
86:8a:f4:ed:c3:10:12:ce:3e:05:01:95:d0:e5:90:ac:d7:77:
5d:de:5b:71:b6:fa:c4:4e:80:cd:5f:f2:96:1c:d7:11:c0:42:
0a:99:75:f2:38:52:41:a5:b8:87:23:09:93:7d:83:57:63:c6:
e0:4a:08:16:a9:f5:4c:3b:9f:52:6e:3e:98:a9:67:09:65:df:
6c:4e:ae:c1:42:11:3a:33:61:f6:fe:4e:f8:53:35:3d:5c:63:
90:35:db:d4:96:4f:f4:7b:ed:61:4f:1a:4f:54:e1:3e:e6:17:
61:9c:a4:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:29 2026 by rpki-client