Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/u1LOjR3EgK565RLjZFRRNHL-Np0.roa
File: u1LOjR3EgK565RLjZFRRNHL-Np0.roa (raw, json)
Hash identifier: alCXKITiCiwN2ST2B1hZQDz3KdcIWj1GfF0th4BrEY8=
Subject key identifier: BB:52:CE:8D:1D:C4:80:AE:7A:E5:12:E3:64:54:51:34:72:FE:36:9D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A04E6D34A984C4318770C7A693D9C7509F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/u1LOjR3EgK565RLjZFRRNHL-Np0.roa
Signing time: Sat 29 Aug 2026 16:49:34 +0000
ROA not before: Sat 29 Aug 2026 16:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 45.131.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:6d:34:a9:84:c4:31:87:70:c7:a6:93:d9:c7:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 29 16:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb52ce8d1dc480ae7ae512e36454513472fe369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:16:e9:d0:bb:50:a2:15:3f:57:f6:3a:26:
5c:57:67:2a:1c:37:54:97:c2:fe:d0:fc:c0:22:90:
14:d8:ba:5a:ad:9d:be:f3:62:01:81:d7:ae:4b:66:
9b:59:69:b6:a1:c9:05:0d:61:de:3e:83:23:cc:8d:
0c:bd:6c:39:c2:8d:59:15:8f:ea:50:5d:4c:db:64:
b6:bf:22:cd:07:ad:a9:1c:da:0e:5b:65:a1:df:4f:
55:99:56:ff:70:6b:99:d1:a6:9f:b5:9f:47:b9:5e:
55:bb:0f:56:69:d6:25:09:31:0d:64:f0:b9:01:d6:
24:6e:43:3d:14:b7:7b:83:2a:f2:97:77:0b:e4:2d:
f6:94:fe:43:4f:e2:98:22:f6:db:c5:8f:02:47:d6:
fc:bb:dc:df:43:43:e8:31:1e:bc:ad:41:44:58:0c:
51:c5:5b:c8:3c:bd:a8:dd:86:00:28:f1:7b:e3:c8:
9d:a8:f4:33:63:9b:ae:d0:10:db:2d:9e:26:4c:96:
c4:33:82:3f:e5:5d:db:1a:8f:03:53:0a:36:2f:06:
15:41:29:5b:c3:c4:29:91:c3:44:40:5f:bd:42:f9:
f8:5d:27:bd:6f:99:c9:b0:76:ac:0d:66:f0:98:55:
3f:b7:f3:9f:eb:48:42:37:67:6a:b2:52:6c:03:03:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:CE:8D:1D:C4:80:AE:7A:E5:12:E3:64:54:51:34:72:FE:36:9D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/u1LOjR3EgK565RLjZFRRNHL-Np0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8b:c1:d9:ab:17:22:e9:a2:1c:d9:97:2c:9d:74:1f:ca:a9:
bf:01:83:45:aa:44:81:d4:2c:80:d2:69:44:10:cc:06:5f:73:
91:ba:43:c4:92:01:35:c7:b6:0f:23:83:2b:b5:be:31:44:b6:
10:1d:23:01:9e:47:9b:02:7a:12:16:19:17:2f:70:3a:62:b3:
33:56:46:7f:b6:99:df:0e:9e:15:a1:6d:3b:51:2d:70:ab:c6:
fd:33:1a:1c:90:61:57:79:11:4f:9c:f8:2d:f5:46:63:ca:1c:
28:f1:b7:83:4a:71:4b:f4:85:d4:3e:dd:79:05:6a:52:89:0b:
8c:55:59:74:92:4a:13:03:38:c9:f1:a6:f8:00:61:0b:ba:62:
4a:a9:0d:af:67:68:c1:1d:f4:90:c6:7e:28:60:f8:9c:5f:22:
ea:6f:7f:0f:16:9b:df:fd:83:90:1f:7a:9f:b2:a3:15:35:23:
01:fb:e4:73:a3:7d:a6:d8:4f:2f:e5:78:40:fd:d7:7e:a4:10:
2f:3e:7e:24:09:ed:27:9d:40:2c:6f:2a:99:8d:66:2e:47:34:
c0:dd:5f:d7:1e:d8:1a:95:db:c8:dd:d8:e7:0e:35:5e:41:cf:
ec:f8:18:b1:c1:72:97:49:a2:c7:66:da:5b:35:b6:c8:f5:ec:
41:13:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:23 2026 by rpki-client