Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/0CCIV1hEHH3hY6pokk9jTnU8V30.roa
File: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (raw, json)
Hash identifier: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=
Subject key identifier: D0:20:88:57:58:44:1C:7D:E1:63:AA:68:92:4F:63:4E:75:3C:57:7D
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 01A04923B7909A43A2BBE857BC4D81D5BEC5
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/0CCIV1hEHH3hY6pokk9jTnU8V30.roa
Signing time: Fri 28 Aug 2026 16:11:12 +0000
ROA not before: Fri 28 Aug 2026 16:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215305
IP address blocks: 45.151.180.0/24 maxlen: 24
45.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:23:b7:90:9a:43:a2:bb:e8:57:bc:4d:81:d5:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Aug 28 16:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d020885758441c7de163aa68924f634e753c577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:e1:4b:39:b8:18:9a:3a:78:54:a6:11:a5:
24:fa:64:72:cc:b1:d7:2b:b5:7b:fd:35:2f:e6:ff:
6f:ee:d5:0d:fb:5e:b6:74:0c:97:b3:dd:fb:57:e9:
7a:9b:6d:a5:4a:80:90:a6:f3:2f:d8:19:dd:38:97:
7c:6e:bd:f4:c5:77:ca:1b:27:50:89:63:64:8d:a5:
4e:4e:ec:53:ac:01:b1:cb:a2:ea:da:68:d3:4f:00:
ad:e4:b7:de:08:1b:69:73:d5:5f:6d:71:bc:3b:3b:
a8:c0:fc:aa:3c:d7:1f:7a:e7:20:fb:56:b8:75:2f:
52:85:2a:95:fb:93:94:ae:1f:61:ca:c1:22:42:7c:
51:bb:96:67:84:78:01:da:b9:28:da:a4:3d:6e:45:
2e:99:c4:37:a3:a2:d9:46:91:56:20:a1:10:6a:59:
10:80:3f:71:4e:f4:e3:a8:3c:41:16:a0:de:68:a2:
c9:7d:8d:3b:4b:b5:92:49:f4:c0:36:f9:7d:2c:29:
5a:13:1a:87:97:8b:a0:1f:a4:6b:5f:40:f8:90:a4:
92:36:02:c9:6d:fa:a0:75:e2:81:94:7c:03:c3:b3:
de:f6:7a:95:2e:3f:76:fb:29:b6:b4:24:4c:4c:0a:
a1:fd:ef:92:a7:65:12:1a:df:4e:52:ff:9f:2c:36:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:88:57:58:44:1C:7D:E1:63:AA:68:92:4F:63:4E:75:3C:57:7D
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/0CCIV1hEHH3hY6pokk9jTnU8V30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.180.0/24
45.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fc:22:2b:59:54:d2:09:c6:f3:12:9d:30:79:73:5c:c0:9a:
4d:f0:1f:0c:43:80:90:06:76:fa:17:9c:97:51:c9:02:6a:62:
da:95:e5:d0:53:28:83:75:9a:4c:0f:cc:e7:f3:1c:10:a5:ef:
0e:60:e4:98:4e:9b:cb:fc:4c:e1:0b:a3:08:da:e0:42:e6:b0:
d2:5f:88:6c:20:26:8c:21:02:d3:a6:1e:1f:42:68:82:76:34:
c7:24:c9:a2:fb:a0:7d:f8:db:81:16:20:75:d4:97:8a:d6:f8:
0f:0a:1b:ab:c1:fd:4c:d9:a8:7f:ce:d3:d4:68:0e:23:fb:4c:
26:b7:ac:72:f1:ca:7d:72:34:04:43:2d:06:7a:f9:03:f0:9d:
96:e7:eb:9b:ef:c2:9f:33:f0:86:03:5b:41:3a:bf:01:63:28:
a5:3e:cb:32:37:23:1d:92:d5:1e:c0:17:f1:ac:2a:17:cd:d5:
31:ff:63:0e:5e:f5:c8:d9:51:be:1d:63:7a:6e:b1:f5:ba:40:
6a:bf:af:44:6c:20:7b:da:62:2d:65:59:f2:b1:dc:22:9a:30:
d7:f9:7f:7f:97:ab:82:f5:06:b0:9b:a4:95:1e:ce:d0:05:be:
3f:67:ad:6a:5b:d0:f7:c9:3a:1c:7f:1c:e2:51:23:37:96:69:
1c:27:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:39 2026 by rpki-client