Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IKsthQoYmx-rERXIeW7yQgS9S38.roa
File: IKsthQoYmx-rERXIeW7yQgS9S38.roa (raw, json)
Hash identifier: dOTkYWGT6+zpR6EY5+ffhFlbnzbmIMDNL6cmM0fL67A=
Subject key identifier: 20:AB:2D:85:0A:18:9B:1F:AB:11:15:C8:79:6E:F2:42:04:BD:4B:7F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019CB3855AFBBC32CCA3906E99928A4F2655
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IKsthQoYmx-rERXIeW7yQgS9S38.roa
Signing time: Tue 03 Mar 2026 11:46:27 +0000
ROA not before: Tue 03 Mar 2026 11:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35258
IP address blocks: 45.93.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:85:5a:fb:bc:32:cc:a3:90:6e:99:92:8a:4f:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 3 11:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20ab2d850a189b1fab1115c8796ef24204bd4b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:7e:d3:50:39:15:4d:1a:26:fd:be:c0:16:
c3:b0:2a:15:ef:b5:cf:e6:5d:24:9e:bc:cf:b8:0c:
d2:f6:f1:83:68:1d:20:43:23:92:b4:48:a6:0b:0e:
f4:b1:2f:a2:ed:9f:3b:7a:30:52:6a:a8:64:7f:af:
f1:7f:d4:ea:62:f2:b8:ce:5d:a3:88:dd:6c:42:2f:
6f:31:d3:57:83:02:b3:0e:70:2b:58:8d:1e:89:da:
f0:92:e8:16:ca:17:23:e9:95:bb:d0:8c:2e:bd:68:
51:7d:9b:a9:ba:a0:81:91:e2:36:cb:85:70:59:e5:
d7:f9:d4:08:8c:4a:0c:1a:ff:b5:4c:fa:b6:09:41:
fe:54:9d:5c:fd:95:45:85:49:c7:07:ea:0b:3b:11:
2a:be:58:62:f9:fa:1d:9b:88:35:0a:b2:15:1c:29:
06:e1:5d:9b:fd:77:c5:77:c7:cd:6a:36:87:e8:cb:
47:cc:86:21:56:7e:1c:03:0c:83:a6:c6:ec:60:c2:
71:20:3b:e0:c4:16:ad:16:e2:c8:59:89:2b:4d:76:
1d:ef:9c:b3:5e:c1:c2:f7:30:59:b2:77:0b:4d:0c:
e3:76:6f:8f:fc:e3:7f:f2:45:54:6d:12:80:12:90:
4c:f3:fa:da:84:d0:4c:2f:e4:e9:e8:01:43:60:85:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AB:2D:85:0A:18:9B:1F:AB:11:15:C8:79:6E:F2:42:04:BD:4B:7F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/IKsthQoYmx-rERXIeW7yQgS9S38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.165.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fa:6a:d1:c7:c6:64:6d:f0:29:52:6a:ae:f6:34:f3:2e:dd:
61:a7:04:6d:29:e9:65:cc:9b:f9:a2:e0:49:b8:f4:75:53:ba:
f1:0d:a0:e9:26:bf:a6:e4:6f:e6:a3:51:a2:01:a6:15:33:68:
4c:ef:e0:87:38:ef:7c:f5:d2:a3:f8:a4:c0:e1:fb:3e:07:90:
06:de:63:95:c9:5b:09:44:0b:43:bd:ef:cc:6c:54:c7:c4:cf:
d3:b6:d9:fe:4f:f2:1f:d4:63:e1:61:23:b2:eb:12:8b:44:5b:
9a:0e:bb:a8:50:46:89:4c:31:b9:db:ae:55:90:c0:28:bc:19:
ef:18:c9:cc:e5:32:b1:16:8b:24:31:22:cb:b0:f6:7f:95:88:
61:3f:79:10:c0:42:24:b3:83:94:7e:fe:3b:16:e9:62:d1:b8:
fd:49:5b:72:1d:70:ff:de:37:a3:ee:7d:ed:d4:63:28:12:a9:
02:c4:c2:35:6b:8c:e5:ed:c8:cc:26:07:71:03:b6:65:87:c7:
fe:6b:13:00:f0:19:9a:e1:5c:55:b7:a5:44:6d:21:d0:5e:e4:
ec:fd:2c:0f:a8:26:af:40:94:5c:e7:50:0d:7b:36:c0:b2:c5:
44:f0:e6:c7:43:8e:5d:4a:12:05:06:3f:9e:e1:77:9f:ab:10:
87:ac:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:31 2026 by rpki-client