Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dZ6Ylm8qoTabzjttVCNdRR5XY-I.roa
File: dZ6Ylm8qoTabzjttVCNdRR5XY-I.roa (raw, json)
Hash identifier: xU2XmfsPHmMqsTE1DA+IW02DDHoIhDY1jg/RpbNXjfc=
Subject key identifier: 75:9E:98:96:6F:2A:A1:36:9B:CE:3B:6D:54:23:5D:45:1E:57:63:E2
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A094FC1CD55D0BD5F1AB832EE12D606202
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dZ6Ylm8qoTabzjttVCNdRR5XY-I.roa
Signing time: Sat 12 Sep 2026 09:39:05 +0000
ROA not before: Sat 12 Sep 2026 09:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 45.159.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:fc:1c:d5:5d:0b:d5:f1:ab:83:2e:e1:2d:60:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 12 09:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759e98966f2aa1369bce3b6d54235d451e5763e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:c0:83:ef:82:46:17:66:83:1c:4c:e5:70:
c7:e3:3b:e6:c7:0b:cc:a6:fc:7b:13:5b:1f:6b:9b:
60:2c:dd:8f:b2:56:b0:e8:75:2f:72:b1:00:30:af:
f0:10:5e:85:70:eb:6a:be:d1:09:2e:4f:55:da:03:
32:08:ac:14:dd:c9:c5:dc:b9:20:2c:f2:ea:f1:28:
da:c2:89:22:25:27:9c:f2:e6:5f:69:df:01:2d:99:
dc:0b:29:3e:00:3f:92:57:fe:33:2a:f4:90:de:78:
51:c1:67:12:66:58:c3:a5:a2:c1:f7:1e:6a:36:73:
e1:e8:19:43:3f:ce:6b:c1:56:58:80:24:28:66:9b:
6d:43:ab:7c:8a:b4:fb:42:24:31:9c:50:03:6d:5a:
13:a9:b2:3d:a2:fa:68:f8:2a:49:1a:fa:51:38:da:
d8:a1:16:39:3c:63:c9:42:7b:a8:f4:ea:23:4c:57:
1f:7e:0c:e9:1b:2b:96:95:17:32:13:98:cb:e6:67:
3c:ab:e8:5f:ce:01:80:be:07:da:50:67:61:9e:d3:
3c:a9:a5:21:54:28:70:79:9d:42:ac:3a:55:23:f7:
94:e0:ec:a6:f7:32:50:8e:f3:4c:47:da:c2:e8:16:
78:65:e9:da:5b:d8:47:a1:87:ce:43:10:00:5d:3a:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:98:96:6F:2A:A1:36:9B:CE:3B:6D:54:23:5D:45:1E:57:63:E2
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/dZ6Ylm8qoTabzjttVCNdRR5XY-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:cc:8c:1d:c6:37:83:9c:56:db:40:33:c5:fe:8a:df:1a:
f7:3b:aa:7c:1e:df:1e:3b:12:0b:8c:83:73:02:da:83:91:2b:
ea:4f:0e:f9:17:75:44:f9:01:4e:a7:83:51:fd:9a:8d:29:2b:
e4:e5:f5:52:84:db:1e:1c:3f:6c:f8:9e:79:7f:8a:69:d4:f0:
3b:07:a9:01:73:b5:98:4b:03:02:2f:9d:c8:c0:77:98:94:57:
34:6a:f2:95:9a:97:a2:f9:c8:8f:58:22:e4:2e:e0:6f:f1:5b:
a4:3a:58:f5:3c:fe:bd:20:5a:6d:29:76:57:e7:27:f5:64:e6:
50:a1:a1:29:a3:24:2e:66:85:60:e3:e7:3b:43:1a:fa:66:03:
13:8b:4a:e1:c0:2d:f9:97:a6:79:2e:b7:c5:39:c5:3e:67:d2:
5a:c2:67:f4:44:16:47:ed:41:74:88:2e:dd:69:bf:ee:d1:bd:
ac:41:d2:d6:c8:1f:8d:1a:aa:78:5f:97:84:2a:1b:aa:16:52:
c2:22:bf:4d:c5:d7:22:84:15:bf:ca:74:80:de:74:f1:4b:c5:
55:11:a9:dc:a4:fe:91:54:d2:92:64:83:08:3e:54:a9:3e:fa:
6c:c1:54:16:e0:f2:38:69:22:35:86:60:1c:75:5a:a6:d8:fb:
b6:2e:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 15:00:54 2026 by rpki-client