Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o6aWDaWLtgSw0yJqWoQY-eXoND4.roa
File: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (raw, json)
Hash identifier: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=
Subject key identifier: A3:A6:96:0D:A5:8B:B6:04:B0:D3:22:6A:5A:84:18:F9:E5:E8:34:3E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0B0269CE0D01EAAA628AE0C0B04BE190F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o6aWDaWLtgSw0yJqWoQY-eXoND4.roa
Signing time: Thu 17 Sep 2026 16:15:15 +0000
ROA not before: Thu 17 Sep 2026 16:15:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 45.159.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:26:9c:e0:d0:1e:aa:a6:28:ae:0c:0b:04:be:19:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 17 16:15:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a6960da58bb604b0d3226a5a8418f9e5e8343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:28:8a:92:d4:0f:2f:de:80:8a:13:38:65:
b9:f6:50:3c:23:91:68:1e:14:52:1f:dd:c3:b8:91:
db:8e:24:a6:a3:9b:31:67:a2:ff:68:a7:09:65:99:
6a:a0:71:be:40:9a:ae:49:86:58:4b:ab:5f:b1:63:
1e:84:64:ed:db:93:67:93:36:b8:e3:0f:e4:14:31:
0b:4c:3c:24:f9:2e:97:75:61:df:d9:bf:cd:b5:f6:
a4:99:e6:92:be:a5:48:93:6d:57:1a:d3:0e:93:43:
34:92:50:ba:e4:03:02:0b:4e:1e:aa:0a:da:a0:ae:
ea:39:f2:79:d2:15:ec:1f:c4:a6:7f:0b:b8:2c:5a:
42:47:b1:da:26:a8:59:7f:ff:73:91:cd:ab:90:16:
f7:fb:ea:0b:35:e6:8f:07:7b:8d:3c:1f:1c:f9:52:
13:a8:6d:52:c2:f9:7d:84:0e:54:13:fb:8e:84:cd:
48:74:b2:50:71:0d:45:e2:f0:f2:68:6c:6e:4c:6e:
9f:b6:fc:df:3f:72:8f:34:2a:48:6c:b9:5d:29:79:
c3:6f:6d:53:50:1f:39:2d:cc:c0:94:18:7c:ba:b1:
f9:8a:9a:c4:99:84:2b:43:9d:cd:2e:53:e4:fd:e6:
24:db:4f:d9:95:a9:76:e3:bb:d5:a1:45:2c:d5:9c:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:96:0D:A5:8B:B6:04:B0:D3:22:6A:5A:84:18:F9:E5:E8:34:3E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/o6aWDaWLtgSw0yJqWoQY-eXoND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3b:91:d9:5c:2e:07:eb:01:cd:d4:ec:9b:a8:0b:5e:b9:4a:
31:c0:ed:b4:7d:a5:4e:8b:8b:1f:0b:df:f6:af:b7:33:bc:86:
0d:3c:c3:dc:a8:1c:07:53:ca:8a:1b:8e:e3:4d:6f:97:f2:71:
09:0c:68:89:c7:1e:d2:f6:22:7e:34:18:6f:97:2e:f9:83:de:
bf:0c:2e:88:3e:13:e3:c0:ec:0b:e9:0f:c1:9d:1d:2e:ac:1b:
2b:2b:ce:90:b1:17:27:fb:f1:ab:a3:b5:b1:2f:ba:51:05:de:
7d:f6:cf:59:bf:e9:58:08:1e:23:84:ea:79:39:28:46:50:f2:
9c:ce:9b:cf:fd:a8:18:49:94:00:e7:81:0e:15:3f:a4:3a:a7:
d6:69:ae:7a:d1:42:4b:c4:f6:65:6c:6f:27:e2:38:34:2c:43:
fd:c9:9d:43:02:12:d8:5f:1b:4c:74:55:2d:4d:48:cd:8e:54:
22:23:1d:20:92:49:a1:72:82:31:00:66:fa:ec:20:47:e8:36:
4b:ec:2c:a3:15:65:c9:47:b9:ab:c9:99:0e:af:e7:c8:30:7e:
c4:fb:98:a8:37:ea:91:e2:a3:36:48:42:53:57:04:a5:0a:6b:
2c:22:43:a3:03:4a:a2:cd:2c:ad:0b:31:41:27:a7:51:aa:ad:
d9:92:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 19:54:31 2026 by rpki-client