Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/T6MezzPBlD-bbmhzKmNPFwNmIv8.roa
File: T6MezzPBlD-bbmhzKmNPFwNmIv8.roa (raw, json)
Hash identifier: jsp4P2nEZMpmduMvRYgQ1VyIcfvVAi62rpnHCVogH+g=
Subject key identifier: 4F:A3:1E:CF:33:C1:94:3F:9B:6E:68:73:2A:63:4F:17:03:66:22:FF
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 019FDC8F105218AAA93650CF2FBB40075AC6
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/T6MezzPBlD-bbmhzKmNPFwNmIv8.roa
Signing time: Fri 07 Aug 2026 14:09:51 +0000
ROA not before: Fri 07 Aug 2026 14:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/22 maxlen: 24
45.157.52.0/24 maxlen: 24
45.157.53.0/24 maxlen: 24
45.157.54.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:8f:10:52:18:aa:a9:36:50:cf:2f:bb:40:07:5a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Aug 7 14:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fa31ecf33c1943f9b6e68732a634f17036622ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:a0:0f:a5:1e:8e:2f:81:24:de:3c:c7:6c:
23:92:ec:ec:48:1d:f9:62:b2:b7:82:89:3a:25:7a:
f9:f0:7c:f3:8c:b7:58:3d:e1:02:e0:08:e7:f9:9b:
f4:da:4e:bb:5b:91:8f:3b:55:99:84:7d:43:56:63:
da:4d:db:58:2f:75:a6:a6:2b:a1:61:45:2b:6a:aa:
96:51:5b:9b:57:48:c6:c4:d9:3f:f8:b1:e4:87:97:
17:ec:19:9b:0f:21:19:50:be:e1:a2:54:8f:4e:0f:
29:92:97:0f:10:15:3c:8d:4d:fc:fe:6f:e0:35:82:
12:79:60:ac:45:59:7e:75:17:ec:09:ec:8e:e3:86:
8f:f0:2c:a3:87:9e:dc:16:66:eb:01:14:7e:88:4a:
4d:f3:cd:29:66:36:bc:13:2b:81:fc:29:e6:69:f7:
86:76:76:58:5c:b3:b8:03:88:32:6d:28:27:4f:10:
e6:86:a2:24:b0:42:a5:4a:96:83:0d:8a:ea:dc:f8:
53:4d:96:b7:6b:a9:24:1f:8e:05:03:56:2e:cf:2b:
fe:23:e8:b1:1d:b8:33:9b:de:7b:52:85:66:57:ee:
d0:45:2e:1d:36:66:41:e6:9e:81:c4:70:48:90:4f:
f9:fe:ca:1e:eb:23:6e:bd:d7:e7:81:4e:fc:ca:0c:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:1E:CF:33:C1:94:3F:9B:6E:68:73:2A:63:4F:17:03:66:22:FF
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/T6MezzPBlD-bbmhzKmNPFwNmIv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:01:52:c8:52:72:0d:84:cd:02:6e:f7:23:c4:cf:94:76:92:
b5:f2:7a:9f:bb:bf:66:70:d3:a5:1b:17:2b:7e:04:06:2a:2e:
b2:3e:c7:3e:28:f0:a3:1f:99:f2:53:1e:c0:88:df:c1:55:dc:
d0:c5:e8:e3:14:cb:bc:6c:c1:1c:20:55:36:5d:a7:da:f1:f6:
f1:3c:b3:05:99:47:1b:bd:81:d2:8c:18:b0:99:30:51:e2:62:
22:72:87:49:c9:c2:b2:2c:a5:2e:a9:45:e4:c5:e5:f3:c8:a8:
ba:e8:33:52:2b:e8:88:8b:b1:8f:4f:73:34:17:eb:5b:9c:71:
5c:c3:02:33:e0:78:ab:c3:d8:78:fc:9c:d1:ac:1e:60:2d:49:
06:93:26:64:52:67:18:f6:0f:ca:2b:a2:21:4b:4e:f0:f4:12:
7c:9b:3a:3e:4c:db:ea:bc:b0:d5:af:e2:35:0b:60:ad:70:c1:
a9:9a:59:d9:05:64:3d:d1:de:93:7c:e7:36:58:97:88:96:92:
b1:28:29:ce:d8:77:7d:ea:5e:cb:3e:eb:99:24:81:11:9a:fc:
9e:79:be:1d:32:2e:bf:95:45:16:a7:21:66:e0:24:1f:34:c7:
fc:d5:90:cf:0a:9a:eb:7c:49:d2:7d:d2:f0:e5:1f:e3:3f:13:
19:1a:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:15 2026 by rpki-client