Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/H_LO8p3iYk4UGCQwTgY2UuUlK9U.roa
File: H_LO8p3iYk4UGCQwTgY2UuUlK9U.roa (raw, json)
Hash identifier: BIJdYPaPTtwTSbNllHcpQET0OXB0zUIp6MJ29LvtHJY=
Subject key identifier: 1F:F2:CE:F2:9D:E2:62:4E:14:18:24:30:4E:06:36:52:E5:25:2B:D5
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A062B8E96934EEF735C68AF3D1F87023A9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/H_LO8p3iYk4UGCQwTgY2UuUlK9U.roa
Signing time: Wed 02 Sep 2026 15:24:40 +0000
ROA not before: Wed 02 Sep 2026 15:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48199
IP address blocks: 45.153.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:b8:e9:69:34:ee:f7:35:c6:8a:f3:d1:f8:70:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 2 15:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff2cef29de2624e141824304e063652e5252bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:e0:49:83:f9:93:a4:25:b0:64:fd:2a:51:
d4:a7:df:9f:22:41:c5:a0:b9:bd:06:44:0e:ac:0a:
ab:87:10:69:ab:00:8e:89:95:8e:a9:ed:bb:30:07:
33:1b:f7:0c:f8:38:cf:44:b6:d7:91:65:64:81:2c:
10:8d:ac:fe:46:95:5f:1a:57:1c:db:70:a5:cb:bb:
bd:a8:dd:0a:fb:39:0a:70:97:02:f8:e0:6c:8a:3c:
8b:90:82:18:c7:5f:67:0c:c7:24:19:f0:d8:36:3f:
61:7e:84:5f:bc:b2:87:65:a9:cd:73:48:93:93:76:
9e:f1:95:77:09:39:06:3f:d7:a8:42:4a:4e:6e:64:
fc:1f:96:37:23:a6:0f:e7:1f:45:88:3b:f0:1b:7d:
b1:ba:c5:66:a6:bb:43:9c:c4:59:03:e9:4e:52:bf:
48:d3:45:f6:83:bb:85:6d:80:98:f3:55:b7:16:04:
0a:2a:9c:62:e5:61:0e:30:de:14:4e:2c:82:22:d5:
8c:8d:7e:f0:88:19:4b:cc:42:33:70:5e:ed:d8:8e:
8f:a6:16:a5:10:4a:48:33:53:00:48:41:96:e8:ea:
b6:a9:dc:1d:fb:cf:f4:39:9c:ff:a0:e6:ce:90:c9:
24:1f:7c:d5:ab:9a:0d:e6:6b:3b:9b:b9:e0:84:52:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:CE:F2:9D:E2:62:4E:14:18:24:30:4E:06:36:52:E5:25:2B:D5
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/H_LO8p3iYk4UGCQwTgY2UuUlK9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.49.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5b:93:87:56:6b:1d:48:aa:a3:1e:1e:9b:5e:4a:7e:70:74:
bc:4b:0e:c3:15:7f:e6:66:6d:40:2d:db:67:d4:53:22:ad:7b:
47:07:12:8f:ab:58:a7:f1:7e:f0:26:d2:3f:30:51:9f:16:6f:
59:d7:c1:8f:0e:8c:da:fd:75:54:62:8a:4e:56:f4:08:d6:81:
33:9e:9f:19:3c:d4:7a:14:d4:48:51:d5:43:92:7a:9d:8c:da:
19:da:16:34:d7:07:22:57:c2:36:77:f5:eb:4b:f0:dc:7e:56:
6c:be:cd:ab:17:21:04:81:2b:4f:97:1f:a7:2e:18:e1:c4:4e:
fc:1c:33:de:bc:a9:df:5a:ba:05:9c:65:09:14:45:d7:ad:92:
67:05:88:f2:49:66:23:92:92:74:3f:28:a7:32:09:c3:dc:c9:
93:47:0d:c0:88:11:89:88:cb:39:3b:73:f9:24:a4:59:85:bb:
5c:f3:0e:fa:b0:7d:b4:1c:81:d6:b7:31:69:2f:aa:91:42:43:
fa:cb:36:60:30:fa:97:0d:4f:40:86:c3:2a:19:f4:28:46:76:
74:e2:79:96:1e:e7:43:f6:ce:be:36:14:c7:86:21:39:6e:b9:
76:cd:53:96:6f:cd:08:53:5b:38:5a:62:10:e9:4f:2f:9e:d6:
68:bf:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:43 2026 by rpki-client