Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa
File: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (raw, json)
Hash identifier: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=
Subject key identifier: FB:96:4E:E3:0C:B6:81:D3:26:F9:19:5A:B0:48:A2:52:EF:FA:E9:A8
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01A01F1F6A8ACE386D632303F7246F6E53E1
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa
Signing time: Thu 20 Aug 2026 12:22:27 +0000
ROA not before: Thu 20 Aug 2026 12:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219531
IP address blocks: 31.170.192.0/21 maxlen: 21
86.105.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:1f:6a:8a:ce:38:6d:63:23:03:f7:24:6f:6e:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Aug 20 12:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb964ee30cb681d326f9195ab048a252effae9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:70:c9:47:aa:71:a3:44:42:96:e1:e4:ad:
c7:cb:a7:ba:1c:70:e5:dd:de:d6:33:60:b1:17:1f:
aa:33:4b:ca:80:8f:06:f3:45:c5:3f:c2:9f:a3:51:
eb:67:b8:da:00:3e:de:e7:56:6c:bb:3d:1c:70:2e:
14:b8:a4:9c:5b:2e:69:2f:76:4a:76:20:39:9e:2d:
67:70:75:e2:0c:2c:a4:17:b2:c0:34:29:29:a2:f8:
fc:5b:2c:c0:8f:ff:29:2e:de:7b:81:5f:f6:56:e0:
ae:d6:a2:05:18:63:15:8f:fa:80:6d:b0:13:b3:d4:
e6:d7:00:ca:a5:63:6b:9a:4f:11:0c:33:d9:9b:cc:
4e:37:84:cb:49:b8:4e:82:3e:38:28:f4:87:79:08:
33:17:a1:e4:2f:62:cd:f4:fe:cf:6e:5a:ca:80:38:
2d:a8:e0:ac:69:3d:21:ba:af:88:aa:a5:e1:0b:7a:
17:4a:e7:9d:b6:5f:0f:5a:61:e7:90:7d:a9:df:1b:
b4:93:7e:4b:ab:f4:e3:5e:dc:e8:3d:e6:68:99:81:
4d:19:4e:c2:07:83:9e:12:c8:11:70:78:50:03:ad:
60:c0:d4:39:c8:82:2d:a1:7c:bb:85:6b:8e:02:57:
ff:d8:dd:0d:ce:73:c6:df:41:d9:e0:21:61:af:47:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:4E:E3:0C:B6:81:D3:26:F9:19:5A:B0:48:A2:52:EF:FA:E9:A8
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.192.0/21
86.105.240.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ec:58:65:6b:81:75:57:ef:c3:2a:e9:3b:56:05:1e:6e:92:
c9:3c:89:93:c9:96:b0:df:3a:15:f8:1b:4f:05:cb:8c:5e:a4:
24:23:fc:ad:6b:53:0f:a3:d1:f5:a6:ac:8e:37:ca:a5:b9:39:
e5:5d:3c:b6:26:29:d7:10:2b:80:55:35:50:eb:79:79:a3:28:
3c:24:9b:9d:61:9f:f7:56:6c:20:48:5e:95:bc:ec:48:37:8d:
c5:4c:06:fd:30:cf:24:70:cf:17:36:d8:14:87:87:32:1a:d2:
e6:5c:24:56:cf:2a:4f:cc:49:e2:82:52:fb:22:da:57:1b:e7:
1f:54:93:74:e2:67:b3:8e:8d:da:7d:ca:ca:a9:cd:77:47:6d:
38:f7:5f:7d:f5:cb:8e:bc:07:81:49:48:f4:cb:88:d7:41:7b:
e3:61:03:37:b9:a6:fd:1b:9b:1c:b0:ae:f9:54:53:ce:43:1f:
20:70:b2:24:bd:45:bf:f7:29:c7:c5:8a:d7:cf:68:23:98:37:
ac:18:bf:0d:b3:66:cd:f8:a8:3f:44:26:ee:59:7f:3e:78:35:
88:b7:5b:c4:49:9c:c0:3d:dc:d6:af:03:07:70:84:0a:77:48:
b1:df:95:5b:b9:a5:0f:1f:a2:28:b5:bd:66:5a:9f:bd:06:40:
c0:be:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:33:32 2026 by rpki-client