Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/1-r60MLTZRSdgygfymOIKvkloX4s.roa
File: 1-r60MLTZRSdgygfymOIKvkloX4s.roa (raw, json)
Hash identifier: af6A06NaI4rDIZj+VAritHdSnfA6HkDWGlQ9vMcojAc=
Subject key identifier: FA:BE:B4:30:B4:D9:45:27:60:CA:07:F2:98:E2:0A:BE:49:68:5F:8B
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 019FAC3AFAE5F963C3BD2D6E6582E5EFB964
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/1-r60MLTZRSdgygfymOIKvkloX4s.roa
Signing time: Wed 29 Jul 2026 04:56:14 +0000
ROA not before: Wed 29 Jul 2026 04:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397011
IP address blocks: 45.145.172.0/24 maxlen: 24
45.145.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3a:fa:e5:f9:63:c3:bd:2d:6e:65:82:e5:ef:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Jul 29 04:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fabeb430b4d9452760ca07f298e20abe49685f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:13:41:84:50:2b:c0:42:c8:c7:ad:9c:69:
bd:91:db:5a:3c:53:ff:d5:5f:fd:b7:7d:90:75:d7:
77:4b:81:20:45:ed:60:1f:3a:dc:8e:bc:06:58:9c:
64:50:98:61:07:43:a4:d9:3e:8e:46:1e:4b:73:80:
2d:71:72:9e:e3:81:bd:53:15:bf:06:06:e3:3d:8a:
e2:ac:df:3a:73:3f:e4:43:1f:c1:73:d7:06:28:45:
9f:be:f2:30:16:47:c8:c5:f4:20:e0:1b:10:bd:15:
29:71:80:df:67:d4:f6:4c:42:a6:71:4c:69:f6:a8:
b4:be:b7:ab:1a:58:b0:42:89:5a:a7:3a:ff:37:16:
15:da:09:2d:2a:36:f5:aa:d5:bf:2e:0a:8b:4d:b3:
61:b5:d3:97:ee:19:d3:6a:99:f7:22:39:39:bd:7d:
7a:e7:97:e3:34:29:9b:f2:79:e0:51:7a:52:54:47:
bc:d5:b5:7b:c3:84:db:12:56:5c:b7:4e:2f:9c:67:
87:2a:00:9b:25:be:03:0d:fa:7a:24:21:b0:36:1f:
31:91:c8:37:01:c8:19:17:ac:81:ba:cf:ad:d5:ed:
5e:60:0d:45:d6:17:c8:8b:cd:9b:91:78:71:46:a0:
38:76:a4:4d:0b:59:70:02:5e:5d:23:68:f3:f4:10:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:B4:30:B4:D9:45:27:60:CA:07:F2:98:E2:0A:BE:49:68:5F:8B
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/1-r60MLTZRSdgygfymOIKvkloX4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.172.0/24
45.145.174.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7c:03:9b:e4:8b:71:5c:e4:22:ab:ff:62:f3:6b:50:0b:a5:
8b:83:64:75:dc:dd:91:ce:d4:b7:ad:c3:cb:f2:f8:1c:a8:85:
22:49:4c:85:98:6f:d3:3f:f2:99:95:62:85:e6:42:c5:4e:a9:
7c:60:72:80:db:a1:1e:60:94:85:9b:df:67:85:ff:0e:74:16:
b4:c1:b6:d5:2d:6d:e4:3b:fa:df:c6:d4:0c:14:28:51:ac:d7:
91:16:e5:3f:76:62:63:21:54:72:dd:1c:3f:55:a9:e6:c9:7e:
83:f1:c4:a7:3a:ca:4a:68:7f:41:7a:ed:39:c2:39:7f:6e:33:
f7:77:bb:23:0f:dc:7d:bc:3d:b7:73:85:29:49:cf:c1:69:6f:
ce:84:1f:d5:67:51:1f:90:bb:66:9c:94:42:7b:2f:8e:aa:39:
70:ee:c1:89:e6:55:8c:a1:8a:69:e9:03:55:de:93:e2:e6:35:
ff:6b:c9:08:29:b0:07:26:d8:64:c1:1f:6c:f6:45:4e:bb:aa:
5e:fa:ff:35:e9:f3:ac:79:e9:3f:dd:98:14:f9:24:35:35:1e:
d3:a2:6e:c3:c2:73:ce:dd:9a:05:cf:6c:fb:81:8e:6c:50:94:
76:e0:73:fb:8b:8c:53:17:df:29:f8:3a:c3:c0:61:5b:28:62:
8a:a3:87:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:30:16 2026 by rpki-client