Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/YEWoMwURlTLWSHi_pafk2DneihU.roa
File: YEWoMwURlTLWSHi_pafk2DneihU.roa (raw, json)
Hash identifier: 5aQ8KJSwQbYitiiu1OHq4ZBZp4GACMe5P1h+eQVPxng=
Subject key identifier: 60:45:A8:33:05:11:95:32:D6:48:78:BF:A5:A7:E4:D8:39:DE:8A:15
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A05CA7BF88DBDB8181FF9C007F801BE253
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/YEWoMwURlTLWSHi_pafk2DneihU.roa
Signing time: Tue 01 Sep 2026 11:08:12 +0000
ROA not before: Tue 01 Sep 2026 11:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.95.226.0/24 maxlen: 24
45.140.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:a7:bf:88:db:db:81:81:ff:9c:00:7f:80:1b:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 1 11:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6045a83305119532d64878bfa5a7e4d839de8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:0a:ce:a3:3c:d4:e9:08:38:be:15:e9:ac:
d3:a2:75:8d:3f:59:80:ef:a2:c7:76:ea:ee:ba:1e:
59:c1:c7:21:e1:0e:13:80:93:fe:ff:03:b2:9b:46:
27:79:21:48:a3:a6:e7:4b:c8:c7:c1:b0:08:dd:be:
f2:8b:2f:2d:84:fd:94:ef:95:90:70:4f:1b:ce:08:
2f:2a:80:97:4e:b2:b8:00:aa:4a:13:d0:70:a5:ff:
30:4d:9b:0b:9b:4b:02:5e:ad:86:12:65:85:8f:79:
21:54:dd:a1:69:10:bf:4a:6a:7e:f5:3a:a4:26:fb:
78:e1:7c:dc:85:97:c9:20:f9:74:0e:36:9e:79:77:
af:3c:1c:c8:84:40:08:3f:59:bf:18:f7:8d:b4:4b:
fc:fd:4c:6f:1c:ed:8a:0e:a8:3a:5a:55:ea:b0:c2:
78:d6:34:6e:70:40:22:b7:37:9f:4b:1d:04:7c:f1:
fa:4b:e5:c3:5a:56:a6:0e:e2:8c:d1:96:fc:21:cc:
b6:93:df:d0:12:e1:52:f3:91:59:8c:aa:77:8f:62:
65:70:a6:43:4a:ee:fe:f4:c8:4a:23:bc:6f:76:19:
17:44:a3:a1:46:29:1e:27:b2:2d:d4:ef:e3:fa:24:
f7:30:72:9c:4b:83:c3:35:06:66:ca:4f:37:81:a0:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:A8:33:05:11:95:32:D6:48:78:BF:A5:A7:E4:D8:39:DE:8A:15
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/YEWoMwURlTLWSHi_pafk2DneihU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.140.58.0/24
Signature Algorithm: sha256WithRSAEncryption
43:93:96:8a:41:00:ac:d7:6f:d0:27:c3:6b:af:d3:b3:4f:74:
de:36:48:0a:4b:94:2b:2b:71:13:56:2f:35:0a:90:cf:65:75:
2e:01:e6:99:ac:32:5f:22:75:de:47:92:b1:54:89:9a:1c:c2:
49:99:29:e2:5d:6d:1d:e7:10:bd:82:a4:3a:e8:52:7a:df:f4:
fb:65:96:97:9a:46:19:ca:99:12:46:59:4b:46:ad:ef:b3:5c:
e8:b0:13:d4:ee:82:ec:06:79:f3:94:ba:21:d7:3c:fd:0a:5e:
0a:dc:e7:c2:b9:27:01:a0:8a:be:00:69:21:5d:5f:82:58:6d:
8f:7b:e1:88:54:37:f9:bb:31:1d:7f:37:f5:f3:e7:91:c5:e7:
66:e8:1d:46:2e:92:89:19:71:da:9c:d3:8c:42:f5:f5:69:ed:
e8:5a:d8:5f:da:c0:2f:b4:0a:3a:32:94:cd:36:18:d9:2e:c5:
ef:81:9e:bb:2d:69:5c:9d:50:8a:10:b6:2d:52:79:c6:03:07:
1e:0c:bf:1b:ca:8b:6f:fb:98:0f:6f:36:15:e9:97:72:f1:b4:
86:0a:8b:30:90:b8:f9:90:9d:60:01:7e:78:da:9f:6e:c4:8d:
7d:93:3c:bd:f8:14:7d:03:bf:d7:c4:95:8e:fa:93:39:e4:d9:
8e:3c:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:52:59 2026 by rpki-client