Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/995GI0e38zU8lemuxEhgW-JmXKE.roa
File: 995GI0e38zU8lemuxEhgW-JmXKE.roa (raw, json)
Hash identifier: 0RU0zI+57Nl/53lm9lxkXUz5k1Q7dLHjCN5YyCpRTO0=
Subject key identifier: F7:DE:46:23:47:B7:F3:35:3C:95:E9:AE:C4:48:60:5B:E2:66:5C:A1
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01A04E59A37AC274B92DABD04925AA643DC4
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/995GI0e38zU8lemuxEhgW-JmXKE.roa
Signing time: Sat 29 Aug 2026 16:28:12 +0000
ROA not before: Sat 29 Aug 2026 16:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.149.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:59:a3:7a:c2:74:b9:2d:ab:d0:49:25:aa:64:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Aug 29 16:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7de462347b7f3353c95e9aec448605be2665ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:60:a0:44:e7:f6:ff:f4:cf:21:0a:ad:d9:
2a:dc:5d:76:2d:6e:a4:48:8c:bc:8a:3c:01:4a:02:
0e:e2:02:1e:27:6f:f6:fa:ea:95:43:0f:cb:bf:b4:
2f:5d:8b:5d:5b:9f:05:d4:33:6b:f6:20:9f:87:b3:
cc:7e:fa:fc:48:a2:1e:a7:be:9b:05:15:c5:57:1a:
97:8f:22:4b:5a:0d:c8:42:fb:60:12:97:94:c9:bd:
5f:d6:21:1c:8b:92:b4:52:6d:5f:29:47:38:3d:46:
7a:0f:99:47:48:b1:3c:35:97:61:5b:15:e2:3d:b2:
af:59:96:f8:05:a4:e3:57:2c:1b:96:c5:31:75:03:
cf:28:c2:ee:44:18:86:14:de:00:9a:96:a5:ef:c5:
d7:5d:89:be:85:e6:79:bc:09:5c:b1:0c:9f:11:8d:
93:2b:db:08:ab:fb:9c:17:de:29:63:e6:a7:4d:c8:
a7:0d:4d:8e:6e:33:a8:96:91:b0:91:34:35:46:18:
05:88:1a:5d:0a:a3:e9:7c:c1:f8:f6:ef:fd:e7:da:
5e:00:6b:f6:b3:e1:19:b3:6c:cf:88:13:11:6f:18:
a6:b6:83:1a:cc:ef:ed:c7:d7:8c:bb:e6:c7:36:b7:
3f:15:52:d0:d0:a4:54:27:e9:70:e5:1f:59:13:ce:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:46:23:47:B7:F3:35:3C:95:E9:AE:C4:48:60:5B:E2:66:5C:A1
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/995GI0e38zU8lemuxEhgW-JmXKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.37.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c0:b5:44:26:cd:b9:80:76:af:8b:f4:3c:74:78:0d:91:87:
8c:20:fa:b5:cb:2e:e6:ac:c4:16:ed:72:81:e8:10:08:ba:c8:
89:d8:db:4b:82:45:e1:9e:bf:69:12:ba:9c:f8:65:09:14:10:
0b:f4:03:90:1c:1c:6d:78:72:a6:62:99:18:e0:25:37:e8:f5:
34:5d:13:1c:7f:2b:93:68:aa:ef:86:9a:6e:11:34:44:3a:df:
e4:df:ee:d9:e2:bc:7d:75:df:4e:bf:89:90:ee:5c:6e:99:dc:
b6:bd:1a:ba:39:c6:38:fa:5b:1a:32:32:b6:3f:46:95:a3:54:
d5:27:7f:1b:c6:c3:eb:73:25:46:ae:00:2a:7e:2a:09:13:5f:
2e:fc:a8:41:f8:ef:c7:0e:bc:1a:95:f8:5e:e0:b2:0a:3a:dc:
6c:7a:44:96:0f:14:92:27:79:2e:af:98:b7:71:67:c0:f9:c3:
27:d2:85:b4:06:a0:25:44:70:90:a9:40:7f:56:9b:f2:b5:d4:
7b:51:b6:cf:27:35:23:83:c9:18:e1:2b:c9:de:dc:1c:01:cd:
d6:1b:19:45:e0:37:5c:15:45:18:66:51:6c:b4:e6:8c:78:b4:
b1:57:57:55:cf:37:af:50:66:28:68:31:9b:a4:62:44:22:4b:
ef:4a:7b:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBOWaN6wnS5LavQSSWqZD3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4
NWNmY2EwHhcNMjYwODI5MTYyODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2RlNDYyMzQ3YjdmMzM1M2M5NWU5YWVjNDQ4NjA1YmUyNjY1Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYVgoETn9v/0zyEKrdkq3F12LW6k
SIy8ijwBSgIO4gIeJ2/2+uqVQw/Lv7QvXYtdW58F1DNr9iCfh7PMfvr8SKIep76b
BRXFVxqXjyJLWg3IQvtgEpeUyb1f1iEci5K0Um1fKUc4PUZ6D5lHSLE8NZdhWxXi
PbKvWZb4BaTjVywblsUxdQPPKMLuRBiGFN4Ampal78XXXYm+heZ5vAlcsQyfEY2T
K9sIq/ucF94pY+anTcinDU2ObjOolpGwkTQ1RhgFiBpdCqPpfMH49u/959peAGv2
s+EZs2zPiBMRbximtoMazO/tx9eMu+bHNrc/FVLQ0KRUJ+lw5R9ZE85aEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfeRiNHt/M1PJXprsRIYFviZlyhMB8GA1UdIwQY
MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt
ZDNiOTBhOWI5YjQxLzEvOTk1R0kwZTM4elU4bGVtdXhFaGdXLUptWEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx
LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUlMA0G
CSqGSIb3DQEBCwUAA4IBAQBHwLVEJs25gHavi/Q8dHgNkYeMIPq1yy7mrMQW7XKB
6BAIusiJ2NtLgkXhnr9pErqc+GUJFBAL9AOQHBxteHKmYpkY4CU36PU0XRMcfyuT
aKrvhppuETREOt/k3+7Z4rx9dd9Ov4mQ7lxumdy2vRq6OcY4+lsaMjK2P0aVo1TV
J38bxsPrcyVGrgAqfioJE18u/KhB+O/HDrwalfhe4LIKOtxsekSWDxSSJ3kur5i3
cWfA+cMn0oW0BqAlRHCQqUB/VpvytdR7UbbPJzUjg8kY4SvJ3twcAc3WGxlF4Ddc
FUUYZlFstOaMeLSxV1dVzzevUGYoaDGbpGJEIkvvSnuC
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:00 2026 by rpki-client