Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/957KjKsgQQ-VsvqavE6ngE5UV_E.roa
File: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (raw, json)
Hash identifier: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=
Subject key identifier: F7:9E:CA:8C:AB:20:41:0F:95:B2:FA:9A:BC:4E:A7:80:4E:54:57:F1
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A01E5F290804037EA3D13509D49798E8BC
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/957KjKsgQQ-VsvqavE6ngE5UV_E.roa
Signing time: Thu 20 Aug 2026 08:52:27 +0000
ROA not before: Thu 20 Aug 2026 08:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:5f:29:08:04:03:7e:a3:d1:35:09:d4:97:98:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 20 08:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f79eca8cab20410f95b2fa9abc4ea7804e5457f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:54:18:53:11:cd:0f:94:a7:97:90:12:10:
4b:3c:11:40:c1:76:29:cc:1d:81:36:2b:19:15:f3:
2e:63:55:69:07:c2:8c:77:28:87:93:3e:ae:ea:57:
28:26:da:58:84:4b:ce:bf:1b:2d:dd:06:85:f5:fb:
f1:61:3f:63:4d:e3:5f:08:00:bb:4a:87:95:0a:f8:
4c:16:d5:78:8c:6a:5c:2a:20:b7:33:72:ba:72:90:
a5:56:92:a7:8a:02:c2:5d:07:5d:7d:d1:48:a2:7a:
85:86:e4:e9:5f:92:c5:9e:b2:49:36:28:29:f0:b1:
38:bc:5e:59:88:99:a3:28:34:2f:af:01:d2:d0:2d:
3a:af:cc:16:6a:f4:c0:77:42:c0:d3:8c:53:12:b3:
c6:bb:c8:af:63:0d:9b:49:b7:f5:64:e0:b5:7b:30:
84:43:45:73:d3:97:3c:ef:cf:07:9f:e1:34:99:07:
e9:2a:5f:d4:a0:d8:af:7d:c7:64:3f:6b:27:18:52:
54:86:91:78:fd:79:88:dc:c4:54:4f:2f:c5:49:ec:
58:a8:01:94:e2:ac:a8:11:ca:7a:6b:35:6a:08:8a:
b3:9a:90:4f:eb:76:fe:f6:17:b9:93:4d:96:40:b4:
00:06:e9:47:00:a3:44:26:a7:5e:1e:28:ee:a9:44:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:CA:8C:AB:20:41:0F:95:B2:FA:9A:BC:4E:A7:80:4E:54:57:F1
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/957KjKsgQQ-VsvqavE6ngE5UV_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
96:79:5b:0b:81:9b:f2:76:a2:e4:ec:ac:fe:14:aa:c7:83:ec:
5f:13:f7:81:cb:2b:34:c6:e2:a9:57:32:bc:21:c0:1d:a7:a8:
ca:ee:ea:3d:65:c0:31:86:51:29:ef:23:45:d3:31:f4:09:5f:
98:fa:f5:b9:2d:4b:f8:ab:4d:de:ee:09:e1:17:39:3a:10:7f:
de:f8:93:1a:59:1c:b7:41:06:51:c2:2d:72:bb:89:d4:27:5d:
a7:4a:8b:77:c9:14:84:5f:6b:26:8d:86:3e:87:4b:a0:9b:e9:
d4:ec:a4:8b:64:e3:17:fd:3c:8a:c2:eb:91:bf:23:66:a2:5d:
32:41:4d:9d:a3:42:28:ad:a1:89:b8:a3:6e:0e:8c:8d:44:ed:
b2:86:c8:6e:01:a4:96:9d:0a:a4:f8:6d:16:8e:1a:ea:9f:2b:
28:48:e1:c3:c0:e5:f8:5b:61:a1:1c:5a:ca:24:d7:3d:53:8b:
6f:7b:cd:fa:bd:89:3b:88:38:39:07:70:de:92:3c:9a:14:53:
55:41:4d:0c:de:d5:1d:c5:30:85:3b:b4:5d:b2:87:3d:03:52:
d3:5b:50:e4:e7:97:2d:15:04:61:02:9e:e6:d1:dc:22:7e:c6:
b7:ce:29:e5:65:05:99:8f:b9:5b:16:85:68:d3:5a:ca:c9:17:
f8:5b:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:13:19 2026 by rpki-client