Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_FlJUcg_DAf-rn0fybI98kXRLSM.roa
File: _FlJUcg_DAf-rn0fybI98kXRLSM.roa (raw, json)
Hash identifier: Na55+I4JuVi9sdUSuFm0DnoQALRTqrpEY/axc5aZZGs=
Subject key identifier: FC:59:49:51:C8:3F:0C:07:FE:AE:7D:1F:C9:B2:3D:F2:45:D1:2D:23
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01A169B2E4FAAAADFF028EA65766D6213B01
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_FlJUcg_DAf-rn0fybI98kXRLSM.roa
Signing time: Fri 23 Oct 2026 16:58:13 +0000
ROA not before: Fri 23 Oct 2026 16:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 45.145.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b2:e4:fa:aa:ad:ff:02:8e:a6:57:66:d6:21:3b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Oct 23 16:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc594951c83f0c07feae7d1fc9b23df245d12d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:29:01:06:18:96:b2:0a:4d:99:a6:9d:f0:
ab:a5:f3:20:f3:52:f2:f7:5f:cc:94:0f:60:f3:ea:
e4:fe:f8:c3:6f:f8:4b:b7:9a:22:4b:55:09:c5:4f:
70:a3:de:98:fd:cd:16:99:15:01:17:9f:32:32:9b:
95:ab:17:43:38:98:13:63:d7:29:56:fc:1d:f2:79:
2c:71:a9:95:0c:c3:28:d7:e7:fb:79:7a:f3:8c:63:
fb:a4:e5:ba:0e:32:22:b2:6c:bd:08:fc:92:b1:2c:
5d:4c:76:73:38:ad:fa:32:33:2c:53:0a:9a:af:d9:
34:27:b1:1a:1e:c6:b0:ea:64:47:77:b5:59:37:90:
fd:15:ae:2c:db:9d:d6:f7:f9:27:93:c9:28:b0:cd:
75:2f:2c:5e:0d:43:5d:27:4a:8a:7a:a4:0b:04:34:
15:77:02:65:b2:34:d9:9e:0a:61:39:74:ba:67:f6:
1c:3b:1e:0b:2a:e8:4e:da:1d:9a:b0:e0:b5:a4:bf:
ed:00:24:ac:ab:1b:41:61:2e:66:5d:4c:cf:52:ac:
56:02:38:7e:e0:fe:14:b1:db:9d:22:26:1b:8b:d4:
45:a1:2d:76:37:92:18:70:86:8c:0f:cb:07:99:8c:
ed:a1:cd:8d:97:ac:02:26:3a:88:0a:f5:7e:0f:04:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:49:51:C8:3F:0C:07:FE:AE:7D:1F:C9:B2:3D:F2:45:D1:2D:23
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_FlJUcg_DAf-rn0fybI98kXRLSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:68:b3:5a:62:a0:73:19:6e:f3:ea:d8:d7:25:33:26:c9:c1:
ac:98:b5:2c:f4:8c:0d:6e:d9:10:dc:b2:ff:83:c2:db:5a:f7:
be:f8:71:bb:fa:3d:76:3f:e8:fa:4a:dc:50:31:be:7e:c9:4e:
94:09:44:d0:b2:3b:75:9a:b8:8d:2e:2d:6a:59:5c:99:7e:53:
a0:0b:bf:03:47:74:43:ba:6b:b4:83:97:6a:6c:21:3c:fd:11:
45:3c:20:78:cf:ec:57:85:55:9d:ea:be:63:f6:23:4b:1b:b0:
9b:18:02:ed:93:e7:64:71:df:aa:ec:9b:35:49:49:ff:57:31:
89:78:14:7f:3a:34:53:8c:cc:e8:2d:38:76:61:1b:10:93:ae:
2e:36:61:e7:6c:ca:23:5d:d8:6a:f0:33:c6:90:b1:d6:29:9a:
5d:9d:81:71:67:f3:42:a3:45:12:2a:7c:15:00:ad:8b:d2:ef:
58:db:80:7a:1b:39:73:0e:9c:f9:91:9d:07:9a:17:a4:c4:21:
db:e9:92:bc:24:e3:02:45:8b:20:12:69:86:18:2e:b5:31:15:
da:9e:af:78:e1:22:cc:83:33:98:7a:e8:55:18:18:81:42:e6:
bc:0a:2d:de:4b:3a:0d:33:88:db:67:17:ff:1c:74:8d:a0:ed:
3e:69:fb:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFpsuT6qq3/Ao6mV2bWITsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYxMDIzMTY1ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzU5NDk1MWM4M2YwYzA3ZmVhZTdkMWZjOWIyM2RmMjQ1ZDEyZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg30pAQYYlrIKTZmmnfCrpfMg81Ly
91/MlA9g8+rk/vjDb/hLt5oiS1UJxU9wo96Y/c0WmRUBF58yMpuVqxdDOJgTY9cp
Vvwd8nkscamVDMMo1+f7eXrzjGP7pOW6DjIismy9CPySsSxdTHZzOK36MjMsUwqa
r9k0J7EaHsaw6mRHd7VZN5D9Fa4s253W9/knk8kosM11LyxeDUNdJ0qKeqQLBDQV
dwJlsjTZngphOXS6Z/YcOx4LKuhO2h2asOC1pL/tACSsqxtBYS5mXUzPUqxWAjh+
4P4UsdudIiYbi9RFoS12N5IYcIaMD8sHmYztoc2Nl6wCJjqICvV+DwR4SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxZSVHIPwwH/q59H8myPfJF0S0jMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvX0ZsSlVjZ19EQWYtcm4wZnliSTk4a1hSTFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGaMA0G
CSqGSIb3DQEBCwUAA4IBAQAvaLNaYqBzGW7z6tjXJTMmycGsmLUs9IwNbtkQ3LL/
g8LbWve++HG7+j12P+j6StxQMb5+yU6UCUTQsjt1mriNLi1qWVyZflOgC78DR3RD
umu0g5dqbCE8/RFFPCB4z+xXhVWd6r5j9iNLG7CbGALtk+dkcd+q7Js1SUn/VzGJ
eBR/OjRTjMzoLTh2YRsQk64uNmHnbMojXdhq8DPGkLHWKZpdnYFxZ/NCo0USKnwV
AK2L0u9Y24B6GzlzDpz5kZ0HmhekxCHb6ZK8JOMCRYsgEmmGGC61MRXanq944SLM
gzOYeuhVGBiBQua8Ci3eSzoNM4jbZxf/HHSNoO0+afvp
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:38 2026 by rpki-client