Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CliNDeoIzFeDMEH3wX5DpgCkBDE.roa
File: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (raw, json)
Hash identifier: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=
Subject key identifier: 0A:58:8D:0D:EA:08:CC:57:83:30:41:F7:C1:7E:43:A6:00:A4:04:31
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019F931E2517850788C02219EE04C50A7869
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CliNDeoIzFeDMEH3wX5DpgCkBDE.roa
Signing time: Fri 24 Jul 2026 07:54:14 +0000
ROA not before: Fri 24 Jul 2026 07:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:1e:25:17:85:07:88:c0:22:19:ee:04:c5:0a:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jul 24 07:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a588d0dea08cc57833041f7c17e43a600a40431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:1a:f9:67:19:a6:b8:00:e9:d7:6a:4f:36:
7d:f6:f2:07:6c:de:18:a9:2b:e0:26:08:91:0c:89:
8b:43:44:08:36:26:f6:b5:ab:2f:8c:92:22:5c:7b:
32:f7:ab:82:79:4e:46:99:58:ab:79:ea:db:96:d8:
52:6a:ee:79:9e:3e:95:61:23:da:0f:cd:f3:98:32:
7d:ff:d9:71:8c:b4:dd:19:10:82:df:5a:4e:8a:7c:
7c:a5:7a:a2:b3:9e:dc:23:28:b0:27:b3:f5:bd:7a:
8a:d7:1f:fc:f3:80:df:d2:41:e3:df:3f:7d:71:a6:
81:f9:12:0d:77:25:ca:ed:05:2e:63:8a:85:a4:3a:
97:d2:4a:78:86:fd:c8:5f:06:17:79:ab:50:d9:65:
f6:a8:ef:49:15:fb:47:5d:4d:33:47:5d:ef:83:70:
93:10:d6:f8:58:a1:32:68:7b:a8:9c:37:12:9a:6d:
a0:fd:26:8a:fc:64:4c:80:7b:d5:af:a4:68:a5:ee:
3f:20:e1:a7:c6:c6:ff:35:f4:36:1b:19:7d:1a:21:
67:6e:d3:64:f5:23:a1:2c:a8:80:d8:e2:50:ab:a3:
f2:02:4a:28:b2:7b:ed:7a:26:b2:71:d4:14:ac:05:
69:08:40:6b:a3:36:f0:db:8b:62:a6:2c:23:2e:cd:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:8D:0D:EA:08:CC:57:83:30:41:F7:C1:7E:43:A6:00:A4:04:31
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/CliNDeoIzFeDMEH3wX5DpgCkBDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/24
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
74:55:b5:78:8f:47:ba:7b:4e:e8:3b:25:5f:e7:80:b0:1e:65:
ed:2f:b9:69:03:ca:9c:b9:8e:ae:88:51:ad:9a:e3:86:9f:7f:
64:79:f1:b5:07:9f:67:86:90:fa:f2:70:9c:d9:4a:d5:ff:60:
c3:1d:ce:c2:38:d9:48:67:59:c3:75:28:39:59:ed:44:71:3c:
5a:1a:50:a4:a6:cb:8b:6c:a2:83:ac:12:1f:84:eb:fa:10:48:
e2:ed:76:04:85:81:f7:36:2e:33:39:15:b9:63:44:2e:a9:25:
be:31:e9:be:d1:bd:46:30:ae:0c:f7:1d:7f:f8:61:ed:b2:a9:
b8:16:d7:f3:4d:a3:86:8d:f4:b3:55:91:52:a0:a9:c7:f2:a8:
df:f7:84:d1:75:c3:d7:03:3d:b8:1b:43:57:75:55:49:06:fa:
e8:3b:2c:74:e5:04:0d:7b:1f:0d:c2:2f:d5:b3:78:6b:de:9e:
20:ab:be:db:24:48:5b:4b:b0:37:dd:05:99:97:5f:2c:94:eb:
ba:91:fe:1e:1a:7a:c2:35:54:0e:4e:d0:8e:06:d1:35:d4:8a:
ed:98:94:e6:79:dc:76:34:61:89:6c:fe:08:e6:98:5b:a5:b5:
69:4d:f4:da:bf:3c:c4:d4:b6:7d:34:9e:bf:08:f2:4f:fe:aa:
70:45:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 03:38:29 2026 by rpki-client