Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa
File: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (raw, json)
Hash identifier: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=
Subject key identifier: F8:DF:B6:7C:2E:AD:7D:AD:6C:D0:BB:E5:15:4F:63:31:B2:EB:86:E1
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236942294BD5ED19301FD580FF00EBAB
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 45.81.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:42:29:4b:d5:ed:19:30:1f:d5:80:ff:00:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8dfb67c2ead7dad6cd0bbe5154f6331b2eb86e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:01:a5:37:f0:ff:8f:19:aa:99:d3:50:26:
1f:ee:1a:e1:90:f2:98:9e:fa:5a:77:4d:61:7e:41:
bf:66:b4:94:a3:44:5f:a3:51:4c:44:6f:9b:cb:d1:
6d:c1:3a:8f:10:a3:e5:63:5f:3f:b6:1d:d3:5e:b7:
07:bb:a2:af:c5:ec:60:42:01:08:d9:7d:2b:64:e3:
93:dd:2b:71:7a:1c:28:69:49:f1:99:4b:8d:5b:4a:
87:f7:19:87:74:a9:75:d1:46:9a:1d:b4:03:97:8a:
c5:72:0d:ce:86:57:0b:a1:7c:a3:0b:aa:f2:84:ef:
a6:a7:90:26:f2:3b:cd:81:3c:24:e5:16:46:d7:17:
f7:8e:6a:ff:99:14:95:97:ef:d2:53:99:b9:1c:38:
38:49:31:d5:9b:ed:62:d0:d4:dc:33:0d:8d:59:3e:
55:ad:88:33:5e:de:3e:b1:1b:01:1c:fb:f2:4a:3e:
bc:5e:cd:29:c5:e1:9d:34:03:6b:7a:d7:8c:ba:be:
47:e0:5f:5a:2e:68:5f:e0:c9:ad:59:ee:83:26:e6:
ea:6d:e8:83:d7:93:7c:92:21:87:9d:0a:74:73:c7:
9a:e7:fa:27:d7:57:2a:63:05:81:df:27:e0:56:00:
12:c4:5b:07:b3:3f:78:54:f7:bd:b1:ca:9e:44:c0:
c6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:B6:7C:2E:AD:7D:AD:6C:D0:BB:E5:15:4F:63:31:B2:EB:86:E1
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6c:97:bd:99:71:88:32:9b:91:ca:7d:32:0e:4b:03:6d:7b:
79:c5:d5:28:fc:81:e2:47:80:dc:d9:cf:e3:d1:ac:60:a1:d8:
a8:fa:c3:ad:31:bf:ff:c9:00:e4:8b:7e:c4:8b:b5:ed:aa:f6:
a1:97:f2:fe:a0:ab:5d:bc:d8:c3:8d:f5:22:25:5c:a5:f6:22:
2d:94:12:eb:a6:e4:e0:db:e7:2c:03:47:07:a1:52:f1:34:20:
7c:2f:a6:93:57:c1:8f:a2:5d:1e:72:bf:40:34:05:45:2d:ad:
6b:c1:4c:17:0e:b6:9f:af:3c:24:2a:04:62:3a:14:84:61:2b:
e3:7d:a1:29:a1:aa:9a:52:5c:51:3d:23:c3:df:71:a7:3b:74:
67:8c:36:70:a5:f2:e6:40:55:57:e7:58:69:9f:d4:c1:31:da:
5b:9a:5e:4e:5c:4d:19:a0:5a:b4:11:9f:51:44:11:ad:8b:f3:
31:9b:8f:57:4d:c6:6d:68:75:22:3b:ff:19:a8:a3:37:db:43:
67:3b:62:e3:f6:ab:34:48:93:67:2b:f1:23:7a:10:3e:b6:de:
39:64:82:5e:fc:b7:f1:a3:81:21:93:d1:3b:d6:96:57:fb:24:
e1:97:7b:31:1c:bb:af:05:84:d0:aa:97:ab:a5:84:b3:26:cf:
4f:62:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:58:33 2026 by rpki-client