Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ajeYQ1Raf387pPpOh5fVK7OUAGw.roa
File: ajeYQ1Raf387pPpOh5fVK7OUAGw.roa (raw, json)
Hash identifier: +WqH+LSYozAREni0VQmnGX2gwrhFnW8Z5hrcBS2MhtI=
Subject key identifier: 6A:37:98:43:54:5A:7F:7F:3B:A4:FA:4E:87:97:D5:2B:B3:94:00:6C
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019F90B9A9299A0B0B168583F4E5B8F9017A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ajeYQ1Raf387pPpOh5fVK7OUAGw.roa
Signing time: Thu 23 Jul 2026 20:45:14 +0000
ROA not before: Thu 23 Jul 2026 20:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:b9:a9:29:9a:0b:0b:16:85:83:f4:e5:b8:f9:01:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jul 23 20:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a379843545a7f7f3ba4fa4e8797d52bb394006c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:d8:4a:ef:1d:4b:8d:4e:0f:2c:b5:66:17:
94:7e:66:5e:63:38:f8:02:19:63:86:c7:d4:20:0c:
fa:61:83:71:b2:16:15:6b:77:d1:31:b6:95:9b:ef:
e0:b0:d2:e3:1e:85:af:e2:d9:0b:ce:dc:6b:cd:10:
6f:e9:3c:5c:da:7e:bf:ea:4e:89:39:e1:4b:f8:53:
60:ba:b9:a8:64:1d:84:98:6e:45:35:a4:99:c2:2c:
3f:84:3c:6b:28:b1:85:6b:5a:a6:fe:2b:07:9d:40:
a4:97:52:ef:09:43:e2:37:57:1f:71:45:e5:0f:0a:
00:d8:6d:df:6a:aa:38:51:2b:eb:98:70:4e:c7:cc:
fb:42:55:08:97:9e:92:ca:6e:0f:1f:10:f6:c9:3b:
8a:50:29:26:48:e2:83:f5:ff:1f:95:aa:4c:1c:01:
bd:52:2d:ce:1d:ed:b9:54:6d:95:0f:c9:e7:e1:5a:
39:c1:d7:2d:31:5e:80:8d:8f:ff:e1:0c:f8:7a:e8:
fd:ad:fa:5c:4e:3c:b3:dd:42:f4:16:aa:f3:75:c4:
85:e0:69:aa:6e:e3:c4:04:92:ac:57:df:fb:8a:f0:
2e:81:f5:83:77:a8:a6:1e:57:6d:1c:66:39:5a:af:
2e:6b:7b:a7:69:7b:07:4e:6d:80:1d:0f:65:ea:3f:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:98:43:54:5A:7F:7F:3B:A4:FA:4E:87:97:D5:2B:B3:94:00:6C
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ajeYQ1Raf387pPpOh5fVK7OUAGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:09:9b:41:97:07:7b:18:2c:b1:9e:fb:31:f7:80:cb:cd:7f:
f6:3a:4d:01:3f:12:75:16:63:11:98:58:cb:28:ac:b0:de:58:
72:e6:5a:e0:18:fc:c4:cc:db:6d:e2:c2:6f:fc:68:8a:17:15:
cb:94:00:43:a3:ea:81:d0:a1:3a:dc:d4:9b:42:14:cf:3e:2e:
a3:37:03:67:9d:03:59:22:89:28:05:4a:41:d8:2a:43:d7:cc:
0c:a7:f4:c1:21:dc:1e:48:9e:b3:d9:10:f0:e4:43:26:b5:17:
91:2a:0f:09:24:f7:8d:2c:e5:0a:3b:f9:60:82:fd:9e:19:ca:
a1:c9:76:3b:06:dd:1d:bb:bc:69:48:f9:1d:a3:df:32:cf:0a:
78:be:02:d1:a8:41:88:39:bf:af:f6:e9:ca:8a:95:6d:d7:6c:
c7:62:aa:dc:78:19:34:12:6d:0c:e4:6d:41:52:c8:2f:b5:9e:
01:b3:66:9f:19:cd:d7:0b:d4:7b:09:06:17:2c:75:71:b3:c9:
c5:64:98:07:55:aa:b3:cc:4d:b2:ba:46:cf:f6:c9:0f:40:5f:
7e:49:ee:f8:d1:d4:ab:1a:a1:66:f3:e5:05:12:75:b9:09:88:
a0:b9:cf:aa:e1:62:e5:2d:13:be:87:f9:5a:a4:e6:14:45:83:
e7:82:0e:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+QuakpmgsLFoWD9OW4+QF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjYwNzIzMjA0NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM3OTg0MzU0NWE3ZjdmM2JhNGZhNGU4Nzk3ZDUyYmIzOTQwMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uHYSu8dS41ODyy1ZheUfmZeYzj4
AhljhsfUIAz6YYNxshYVa3fRMbaVm+/gsNLjHoWv4tkLztxrzRBv6Txc2n6/6k6J
OeFL+FNgurmoZB2EmG5FNaSZwiw/hDxrKLGFa1qm/isHnUCkl1LvCUPiN1cfcUXl
DwoA2G3faqo4USvrmHBOx8z7QlUIl56Sym4PHxD2yTuKUCkmSOKD9f8flapMHAG9
Ui3OHe25VG2VD8nn4Vo5wdctMV6AjY//4Qz4euj9rfpcTjyz3UL0FqrzdcSF4Gmq
buPEBJKsV9/7ivAugfWDd6imHldtHGY5Wq8ua3unaXsHTm2AHQ9l6j9ACQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGo3mENUWn9/O6T6ToeX1SuzlABsMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvYWplWVExUmFmMzg3cFBwT2g1ZlZLN09VQUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQAvCZtBlwd7GCyxnvsx94DLzX/2Ok0BPxJ1FmMRmFjL
KKyw3lhy5lrgGPzEzNtt4sJv/GiKFxXLlABDo+qB0KE63NSbQhTPPi6jNwNnnQNZ
IokoBUpB2CpD18wMp/TBIdweSJ6z2RDw5EMmtReRKg8JJPeNLOUKO/lggv2eGcqh
yXY7Bt0du7xpSPkdo98yzwp4vgLRqEGIOb+v9unKipVt12zHYqrceBk0Em0M5G1B
UsgvtZ4Bs2afGc3XC9R7CQYXLHVxs8nFZJgHVaqzzE2yukbP9skPQF9+Se740dSr
GqFm8+UFEnW5CYiguc+q4WLlLRO+h/lapOYURYPngg6v
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:05 2026 by rpki-client