Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/7k8If11aObVXGmnKtKwIcne1q0o.roa
File: 7k8If11aObVXGmnKtKwIcne1q0o.roa (raw, json)
Hash identifier: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=
Subject key identifier: EE:4F:08:7F:5D:5A:39:B5:57:1A:69:CA:B4:AC:08:72:77:B5:AB:4A
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019FEC615AC12D54D0A7CD9B63939E6E392D
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/7k8If11aObVXGmnKtKwIcne1q0o.roa
Signing time: Mon 10 Aug 2026 15:53:51 +0000
ROA not before: Mon 10 Aug 2026 15:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213220
IP address blocks: 45.151.181.0/24 maxlen: 24
45.151.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 08:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:61:5a:c1:2d:54:d0:a7:cd:9b:63:93:9e:6e:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Aug 10 15:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee4f087f5d5a39b5571a69cab4ac087277b5ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:16:7f:22:ab:5c:8a:24:0a:66:75:4d:d1:
2d:50:67:66:38:00:a6:d0:fa:c0:3b:a6:29:f3:db:
35:e8:c9:9f:8d:a3:93:6a:5e:31:ba:38:84:56:71:
15:40:66:cf:b7:f5:61:0a:4b:34:9b:a4:05:0e:b1:
20:02:1f:f1:8e:1b:d8:3a:b5:63:c8:ec:6f:5c:62:
05:a7:7e:28:9b:9f:29:21:ed:ac:b3:97:a3:9d:37:
23:e2:81:c3:90:cb:5b:ce:a9:93:b0:ee:22:df:d6:
5a:91:85:75:a5:8e:8b:a2:9e:df:68:2f:86:e5:da:
99:f5:51:ad:4e:d2:18:33:ce:4b:bb:8a:ae:2e:2c:
fa:95:aa:4b:8c:f9:6a:bf:31:0e:ec:27:61:29:44:
92:fe:cd:ee:5c:a4:fe:5f:6e:ba:fa:31:70:d9:6c:
da:87:ed:f3:58:b8:d2:4d:05:3b:63:ec:94:40:56:
c1:57:69:33:06:bf:7c:f2:29:8d:8c:a3:df:f7:d8:
28:b2:33:92:9b:ca:c5:45:6e:b6:11:be:61:ad:03:
76:ba:9d:82:cf:2b:90:01:4f:44:86:11:28:dc:66:
09:eb:b8:12:83:1a:52:0e:9e:14:0b:8e:36:74:9c:
7c:00:e9:92:5b:55:c4:7f:05:81:c0:0e:e6:0a:6d:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:08:7F:5D:5A:39:B5:57:1A:69:CA:B4:AC:08:72:77:B5:AB:4A
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/7k8If11aObVXGmnKtKwIcne1q0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.181.0-45.151.182.255
Signature Algorithm: sha256WithRSAEncryption
58:da:51:90:aa:9d:8c:92:be:99:d6:f6:c7:b2:ee:7d:3c:a5:
71:40:c8:3d:63:5a:f1:5a:f0:2e:92:1e:c1:0e:77:53:55:e9:
2c:93:0b:9b:5b:07:4c:f5:d4:60:4d:8f:8f:b9:d2:45:a3:ab:
6a:b3:11:c2:ec:d4:08:f0:b2:a4:f2:bc:b0:64:dd:45:71:eb:
fc:d7:7b:ba:39:8d:3e:5e:6b:92:18:a7:19:a8:34:06:01:80:
0e:66:97:10:99:97:a7:c6:ca:76:be:74:70:ae:4e:1f:67:14:
ca:a4:8a:3c:49:e2:37:04:d4:8c:11:6d:23:2f:c5:90:6b:e9:
dc:e9:28:a4:19:23:9c:05:e9:e8:00:54:ae:cd:a0:ab:97:f4:
54:19:0f:47:33:31:b5:1a:43:8e:5e:7b:18:7d:cb:32:0c:7b:
a6:c0:e3:1a:f4:64:05:e0:a2:51:22:b8:e4:d5:42:31:42:cf:
b6:f7:10:0b:80:03:85:ec:f5:45:ae:f1:6f:51:f5:4f:23:db:
49:a9:1e:d2:b8:6b:88:7e:1a:1c:0c:ae:4d:be:4c:e5:29:5b:
ac:d8:09:0f:37:33:c1:ba:a2:2b:60:3c:9b:a4:77:37:82:0b:
a1:ba:c8:45:5b:b6:de:bf:02:86:f0:9e:3d:8a:f3:8f:da:e2:
6d:e4:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:38:18 2026 by rpki-client