Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/0RfVw_5KIsnJCP2LW3XbIY5p1Zw.roa
File: 0RfVw_5KIsnJCP2LW3XbIY5p1Zw.roa (raw, json)
Hash identifier: ejFm07RtbhNe3LMxJ2OX3+F1uwqL7FdJ15EHZJUuzBc=
Subject key identifier: D1:17:D5:C3:FE:4A:22:C9:C9:08:FD:8B:5B:75:DB:21:8E:69:D5:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01A0EB87F7287E01885B7605E73BC7FBF457
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/0RfVw_5KIsnJCP2LW3XbIY5p1Zw.roa
Signing time: Tue 29 Sep 2026 04:59:11 +0000
ROA not before: Tue 29 Sep 2026 04:59:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
2a0e:4c41::/32 maxlen: 32
2a0e:4c44:2575::/48 maxlen: 48
2a0e:4c47:421::/48 maxlen: 48
2a0e:4c47:4210::/48 maxlen: 48
2a0e:4c47:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:87:f7:28:7e:01:88:5b:76:05:e7:3b:c7:fb:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Sep 29 04:59:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d117d5c3fe4a22c9c908fd8b5b75db218e69d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:66:c9:e9:ee:c8:24:30:48:8c:4a:49:41:
92:98:1a:67:ab:d7:46:04:29:86:18:73:45:c6:a3:
f5:93:4d:69:55:8e:d6:4a:7a:19:a3:4d:b2:6f:fe:
05:ff:09:8e:6f:e9:6e:b6:11:09:14:fb:d2:9c:a1:
c7:5f:4f:1a:ac:e0:c5:96:c6:6b:19:49:bc:ab:ae:
13:85:13:b8:1a:9a:19:94:97:c4:c7:48:45:c9:07:
e0:3a:ac:73:12:57:a2:e5:85:06:1f:ec:d5:f8:45:
21:9d:92:b3:e0:21:19:02:54:b5:a7:40:67:5e:84:
e4:38:20:20:5e:c5:b8:2e:c5:a1:5e:d3:8f:fe:b7:
df:27:10:49:9a:e5:95:65:9d:05:c9:7a:d9:d9:60:
c3:fe:57:20:f7:41:41:e4:f9:ef:2f:0a:ce:05:9d:
21:23:e4:06:c5:9e:bf:6d:df:8d:0d:b6:99:0a:77:
96:ce:5b:3d:f4:35:d3:ee:d0:7a:4c:9f:53:01:db:
c6:8a:7e:85:f1:b5:15:be:d4:10:6f:bf:87:a0:7f:
a9:82:a6:fc:4f:bb:ae:9f:d2:45:6e:bd:11:83:24:
24:7d:5c:52:b7:e5:0a:35:d6:54:f6:6f:57:8f:d3:
bf:43:63:90:03:b6:61:f3:9c:d4:e9:9e:71:af:67:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:D5:C3:FE:4A:22:C9:C9:08:FD:8B:5B:75:DB:21:8E:69:D5:9C
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/0RfVw_5KIsnJCP2LW3XbIY5p1Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
IPv6:
2a0e:4c41::/32
2a0e:4c44:2575::/48
2a0e:4c47:421::/48
2a0e:4c47:4210::/48
2a0e:4c47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
61:5d:1c:3e:de:77:8a:4f:31:91:4a:ae:79:db:6f:fb:11:31:
0c:92:4c:1c:7d:a0:f4:27:66:69:e1:3d:34:e7:f9:e3:c9:a8:
e2:23:40:d6:b6:0f:2d:51:e5:f6:49:8c:30:76:c2:62:62:b8:
d4:9a:ac:7f:fd:20:00:65:8e:2e:b8:0e:5a:33:5b:6e:f0:0f:
69:c4:33:c0:4f:36:61:28:00:68:6d:33:8b:d9:ff:d2:98:c1:
6b:d4:c7:6f:db:33:aa:04:36:c5:26:32:df:1c:f9:64:d2:51:
56:c5:6c:aa:b4:31:fe:2b:fe:b6:cf:e6:ee:0c:46:3a:ce:a3:
01:d6:89:04:59:1c:c7:28:81:92:97:45:fa:e9:fe:be:8c:69:
ce:19:ee:88:df:56:c6:d8:a6:2e:60:e9:3e:77:a4:7f:7a:42:
c8:39:11:b8:f1:93:ce:0e:94:94:89:fd:34:c6:2d:ee:4a:f1:
ff:a3:43:a9:16:aa:ff:87:91:a5:de:7a:82:7f:13:fa:3c:67:
ac:f5:72:89:aa:70:e9:53:ca:76:49:06:5c:c5:17:a5:7e:21:
8e:7b:fc:8c:41:87:2b:4f:c4:10:bc:a6:a2:82:50:5c:91:6b:
02:81:1f:08:9b:15:40:8b:99:7b:99:42:6b:01:2e:64:30:be:
dd:d6:bd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:11 2026 by rpki-client