Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/Go6GTg9yZuH3ldmoQA3YEONTm-o.roa
File: Go6GTg9yZuH3ldmoQA3YEONTm-o.roa (raw, json)
Hash identifier: CGqeavzuShq2B73tI+xEe2/nH2gqlzVsSoTBNrlZzNM=
Subject key identifier: 1A:8E:86:4E:0F:72:66:E1:F7:95:D9:A8:40:0D:D8:10:E3:53:9B:EA
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 019CFBED2901916C1FF3A697C938370B127B
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/Go6GTg9yZuH3ldmoQA3YEONTm-o.roa
Signing time: Tue 17 Mar 2026 13:12:29 +0000
ROA not before: Tue 17 Mar 2026 13:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.12.197.0/24 maxlen: 24
45.12.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:ed:29:01:91:6c:1f:f3:a6:97:c9:38:37:0b:12:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: Mar 17 13:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a8e864e0f7266e1f795d9a8400dd810e3539bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:5d:db:db:10:05:b7:f8:4e:d2:a7:60:b3:
20:61:c5:ee:42:13:9e:7e:04:00:32:6f:d6:c5:24:
e3:f0:03:a6:00:09:23:ab:dd:19:b0:a3:47:6d:ae:
b7:8f:87:54:4d:e8:c2:3c:22:79:d8:6a:f9:06:3a:
c3:5b:76:e1:9c:50:d2:e7:a2:b7:0a:89:26:bd:5a:
59:19:45:44:e7:30:46:86:de:9a:b1:34:de:d2:45:
54:77:d5:34:8a:93:ad:b5:38:c8:38:6f:d9:77:02:
52:6a:77:b3:4e:df:dd:db:29:8c:38:e5:d6:52:d7:
22:ee:05:98:a5:fd:d6:7e:8d:54:64:d0:19:b9:c5:
8e:84:8e:3b:97:f1:f8:c9:3f:0a:b8:b5:41:7c:22:
b6:47:6a:6b:2b:2e:e6:32:1f:61:60:9a:b1:97:cd:
cd:b5:90:35:8e:7b:b7:ec:82:57:73:59:a2:7e:17:
ca:fb:1a:42:84:ee:d8:f8:4d:e8:55:d1:6e:03:14:
06:6f:cb:30:05:c4:bc:aa:2d:2a:85:6e:e8:10:44:
59:31:cb:9a:6e:70:f8:47:64:38:6b:8d:aa:ce:bb:
22:e1:0d:81:c2:31:8a:a5:a4:9b:2f:cb:10:1b:6b:
27:10:f1:61:28:76:82:3e:d1:82:31:bb:0d:ef:2f:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:86:4E:0F:72:66:E1:F7:95:D9:A8:40:0D:D8:10:E3:53:9B:EA
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/Go6GTg9yZuH3ldmoQA3YEONTm-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.197.0-45.12.198.255
Signature Algorithm: sha256WithRSAEncryption
9c:72:f1:ff:d8:b7:91:96:59:12:d0:45:f2:46:da:2e:fa:90:
3e:7a:95:54:b6:45:49:45:af:26:65:d9:69:3d:e1:79:23:16:
eb:dd:9d:18:d8:fc:35:07:ee:cd:3c:4a:0e:7c:8e:80:86:5c:
53:42:17:e7:34:15:69:fa:6d:a7:18:73:06:1e:cf:b0:4f:66:
eb:7a:8f:cb:cb:ef:1a:c1:b7:8d:ef:81:49:05:d0:c5:07:7e:
c6:58:29:8d:e0:c6:a1:50:c0:6a:5d:6d:68:a6:8b:e3:cc:dc:
52:fc:3d:4e:89:6d:94:56:d5:f3:05:9b:44:33:50:95:df:52:
7a:0b:57:e3:d8:45:29:ee:86:ba:bb:b7:b8:b1:88:24:2e:fa:
12:8e:d9:e3:1c:24:db:e5:df:d0:ce:07:a3:62:13:49:48:da:
d4:2e:05:2a:6c:ac:6b:7b:8c:d7:aa:0f:55:a8:4a:a4:e0:8f:
78:d8:a9:63:4a:c4:4d:55:68:8a:87:b1:cc:24:d4:f5:82:93:
ad:88:dd:89:e9:6d:5c:ca:0e:81:12:b7:af:82:f6:f0:e9:bf:
b7:60:42:fe:69:dd:9a:f8:e1:63:d5:ea:59:a2:a9:5d:4b:1e:
c8:66:20:63:bf:ce:91:87:e4:c3:73:d3:33:ab:5b:06:64:22:
d0:df:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:12 2026 by rpki-client