Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/V520rJqjBQNaG4fyPK4nwNHO6No.roa
File: V520rJqjBQNaG4fyPK4nwNHO6No.roa (raw, json)
Hash identifier: BQhLgWTrqlA5BOZHn9fbUTXWBsPmEQUK0Ry+/ekhmxg=
Subject key identifier: 57:9D:B4:AC:9A:A3:05:03:5A:1B:87:F2:3C:AE:27:C0:D1:CE:E8:DA
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 01A0F8E6F03EB7E1E780113DC3FE1ED4B562
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/V520rJqjBQNaG4fyPK4nwNHO6No.roa
Signing time: Thu 01 Oct 2026 19:17:59 +0000
ROA not before: Thu 01 Oct 2026 19:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60042
IP address blocks: 45.15.156.0/24 maxlen: 24
45.15.157.0/24 maxlen: 24
45.15.158.0/24 maxlen: 24
45.15.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:e6:f0:3e:b7:e1:e7:80:11:3d:c3:fe:1e:d4:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Oct 1 19:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=579db4ac9aa305035a1b87f23cae27c0d1cee8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:08:38:56:0e:5a:36:73:12:9f:f1:51:aa:
e0:78:01:82:e2:5e:89:80:b6:aa:34:84:89:c1:e3:
2b:81:39:4a:f5:56:22:c9:b2:b7:de:ea:39:ce:e2:
1b:82:4f:30:8e:b6:1d:0a:78:3d:ae:89:d8:2f:de:
da:ff:62:2b:a9:de:33:a4:d9:cf:1c:2b:ce:cc:25:
77:5d:5e:8e:65:e5:f8:21:60:cf:07:2e:29:01:ef:
19:f6:bf:f0:99:e5:5d:0e:01:e6:72:41:aa:87:c8:
1c:37:5f:29:e7:00:86:50:7e:ca:68:39:e0:2a:d6:
19:7f:a4:f3:46:31:ba:f3:ac:12:17:86:13:94:78:
99:da:82:d3:6e:7c:a1:f6:cd:45:b3:4b:9a:a8:c3:
46:92:73:7e:c8:3b:11:d4:72:7b:66:09:47:65:9a:
b3:40:30:03:69:e2:ad:40:4d:a3:c7:db:8f:a5:45:
ef:c7:6d:97:ae:eb:b4:33:86:ee:ff:14:cf:1e:0a:
92:76:be:52:50:3e:15:69:70:ac:34:b0:49:31:d3:
d7:00:71:f5:46:cb:ef:22:ae:1b:74:22:49:31:c9:
e3:9b:9e:f6:eb:94:a8:35:a1:fc:ce:35:17:d4:71:
6b:3e:96:b0:0c:05:f8:3a:6a:e0:bd:59:e7:0c:f0:
d4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:B4:AC:9A:A3:05:03:5A:1B:87:F2:3C:AE:27:C0:D1:CE:E8:DA
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/V520rJqjBQNaG4fyPK4nwNHO6No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.156.0/22
Signature Algorithm: sha256WithRSAEncryption
01:15:5e:be:d5:1d:63:95:fb:4a:92:74:f6:b0:26:31:df:2b:
75:f3:4b:12:9c:85:88:95:10:93:2b:4f:39:93:f1:13:d7:97:
04:78:c0:85:6d:aa:1a:52:03:23:62:21:18:cf:ff:79:80:af:
d4:53:e4:f6:82:f1:16:d0:bc:a8:0e:39:0d:80:83:3a:20:9a:
d9:73:ff:b2:6f:ed:c6:25:3f:14:10:00:ab:19:a2:04:46:a2:
c6:62:70:67:7a:b5:ba:4f:86:9e:2f:bd:de:52:95:ad:84:82:
2a:c0:e2:f5:04:0f:c5:f0:20:0d:70:7b:84:d7:bd:b0:06:a0:
a7:f3:8d:40:ae:9d:c5:cb:e9:04:99:79:0e:5f:98:3d:ab:89:
7e:d1:78:21:42:15:8a:5f:e1:c2:28:f0:6b:de:6b:2d:ed:2a:
5e:8d:32:58:93:31:f2:66:8f:0b:fe:2b:34:02:ce:c3:b9:2b:
d8:e3:63:19:d0:49:3f:a5:6b:34:70:c4:a1:49:16:a8:db:18:
92:a3:82:bc:92:f0:b1:94:c4:f1:85:36:52:37:a4:13:48:60:
44:43:5e:8b:c0:5f:c0:8a:87:dc:8e:34:c1:e1:1c:c1:d1:3a:
4d:07:1e:72:6a:73:7a:09:0a:9d:2f:fc:04:16:a3:2a:70:53:
c8:08:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:28 2026 by rpki-client