Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/fdiVcNZncZrGngmrusZDNbGcw2A.roa
File: fdiVcNZncZrGngmrusZDNbGcw2A.roa (raw, json)
Hash identifier: C9II/NbNWaLq0vmfzeX9U0AgMZnpITv9ShotkhyrUhk=
Subject key identifier: 7D:D8:95:70:D6:67:71:9A:C6:9E:09:AB:BA:C6:43:35:B1:9C:C3:60
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 019FF9739C07E153959E28483725A0F82917
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/fdiVcNZncZrGngmrusZDNbGcw2A.roa
Signing time: Thu 13 Aug 2026 04:48:51 +0000
ROA not before: Thu 13 Aug 2026 04:48:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.150.196.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:73:9c:07:e1:53:95:9e:28:48:37:25:a0:f8:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 13 04:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dd89570d667719ac69e09abbac64335b19cc360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:0a:e0:5d:5d:91:9a:87:ee:7b:ae:0c:5b:
62:78:06:bd:9f:22:08:b2:7c:90:f1:49:b6:5e:20:
2b:3d:77:9d:ad:9a:da:56:ab:de:72:e0:b0:f5:ff:
28:5f:60:8f:fd:76:41:a2:25:e3:88:31:b4:4b:45:
43:3e:17:3a:de:86:86:3d:f2:86:7e:3c:fd:9b:79:
d6:5e:46:d0:e3:ca:a8:66:05:1c:39:97:c4:25:7e:
c8:aa:c1:a6:6e:79:1c:d6:7c:8b:31:75:e7:66:84:
fc:a9:b5:03:74:af:b0:2e:e6:b8:c4:8c:e3:ac:8b:
2c:7c:bb:d9:76:29:c8:bb:8f:9e:4f:1a:59:61:01:
68:44:24:b6:58:0e:64:ef:8c:e0:c1:7a:f5:c2:fa:
f6:27:12:52:9d:41:96:b3:a8:f8:bc:f8:31:b6:93:
fe:22:88:e4:2d:ab:92:54:31:61:e9:b6:5a:ae:a7:
3d:db:70:6e:68:d7:6d:f9:80:77:49:dc:2e:01:6a:
e4:b9:e6:62:02:55:2b:d4:22:fc:4c:11:8c:74:f6:
e2:6d:60:2e:98:44:b1:10:1c:2e:05:e4:ac:17:6c:
9d:1f:0b:e8:8c:cd:7e:ff:db:1b:1b:f5:02:79:ad:
27:67:5e:dc:25:9b:f7:38:74:a0:2d:1a:18:47:8e:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:95:70:D6:67:71:9A:C6:9E:09:AB:BA:C6:43:35:B1:9C:C3:60
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/fdiVcNZncZrGngmrusZDNbGcw2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:99:f3:14:b6:3b:61:27:68:7a:60:9b:a6:cf:2b:ae:d0:25:
e1:eb:34:b5:b1:68:fa:dc:50:54:94:cd:dd:57:24:5d:99:b8:
b0:3c:3f:33:a2:94:bc:d9:a5:b3:fe:44:e9:44:bb:29:dd:52:
e5:53:fc:e5:92:e7:d2:6a:00:dc:a0:3c:e6:8f:75:ea:f4:9a:
d1:52:8d:36:2c:26:1f:11:df:20:0e:04:ac:53:72:12:a1:92:
14:5d:69:f4:1e:d8:d7:e2:1a:0b:e5:97:e9:1c:ca:31:a4:5a:
e7:1c:07:3a:22:97:d0:1d:ad:49:ba:90:cd:98:e2:85:6d:0e:
ee:26:a9:d7:c5:5b:ef:59:b8:15:f7:0b:10:e9:70:df:71:27:
f9:0d:d5:a9:d2:4f:9c:44:6c:f6:25:d6:78:21:5a:f7:eb:28:
d5:e1:99:54:4e:99:3d:4a:3a:f1:5d:5e:64:96:9d:98:72:22:
0d:08:c5:29:3c:fe:7a:82:47:d9:80:4a:09:b8:18:e8:a6:d1:
30:fb:3c:21:29:e2:f5:c5:ed:b5:17:e0:fc:18:9d:97:07:8c:
91:12:0d:ae:4a:07:74:a3:7f:9c:16:22:a1:10:53:21:51:4e:
a4:f9:9c:b3:07:c8:f5:b3:9f:90:1f:04:21:ec:8c:76:a9:26:
89:7d:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:02 2026 by rpki-client