Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/0rCjkkR_MPz4saC7JF6qrBVIXRI.roa
File: 0rCjkkR_MPz4saC7JF6qrBVIXRI.roa (raw, json)
Hash identifier: 7G05VEzaxLLv6te6rcONsOuW2MmiHFF8V/T+R5TcPzs=
Subject key identifier: D2:B0:A3:92:44:7F:30:FC:F8:B1:A0:BB:24:5E:AA:AC:15:48:5D:12
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 01A0689A09687B21D29589C00AF70906DA88
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/0rCjkkR_MPz4saC7JF6qrBVIXRI.roa
Signing time: Thu 03 Sep 2026 18:48:40 +0000
ROA not before: Thu 03 Sep 2026 18:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.95.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:9a:09:68:7b:21:d2:95:89:c0:0a:f7:09:06:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Sep 3 18:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2b0a392447f30fcf8b1a0bb245eaaac15485d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:95:6c:0b:60:42:40:bf:bb:4d:a5:f8:89:
a5:3f:26:b2:fe:6f:b2:a1:23:63:64:13:94:0e:0b:
0c:e9:ad:a5:35:41:63:2b:01:e2:4c:ee:c7:d7:0c:
66:f8:e8:c5:af:57:d9:2f:24:e1:bd:c5:2d:25:52:
92:ef:46:3b:24:a4:c3:9d:ba:ff:4e:cf:64:75:b0:
68:37:a5:5e:3f:64:d4:31:56:36:d5:60:29:25:2a:
ed:6d:af:73:7b:44:2c:9d:39:9b:77:45:98:38:aa:
bf:41:69:a9:66:be:a2:23:ff:ea:5b:5f:a6:9e:61:
32:bb:70:88:ba:4b:a4:46:9e:1c:f6:66:83:cd:c9:
84:b9:61:c2:49:f4:4b:72:b9:49:46:1b:eb:9e:1d:
6a:37:38:88:25:c7:04:75:61:5b:c1:54:4d:e5:82:
a4:4f:0b:95:bb:60:62:e9:3e:5e:e9:7d:e0:88:d8:
d0:09:66:06:c0:57:2f:be:82:6b:87:af:af:f1:aa:
07:45:44:2b:14:60:23:f5:dc:45:c0:96:1e:28:02:
2a:80:43:07:3d:02:c5:a9:ab:ad:73:aa:dd:f3:06:
54:89:f5:42:62:3e:6d:54:f7:c2:2c:4f:84:c3:52:
5d:60:1c:b7:ec:b6:42:4c:77:12:d3:6b:60:4c:25:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:A3:92:44:7F:30:FC:F8:B1:A0:BB:24:5E:AA:AC:15:48:5D:12
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/0rCjkkR_MPz4saC7JF6qrBVIXRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.207.0/24
Signature Algorithm: sha256WithRSAEncryption
75:da:28:f2:5a:68:11:7e:d5:48:14:69:41:6c:af:b7:6e:23:
13:1b:1d:e0:5f:c3:c6:77:37:f6:7e:1e:70:40:67:47:25:25:
fb:df:fa:1d:2a:a2:fa:ce:c6:be:74:15:49:86:9b:3f:74:76:
c4:b8:08:b7:c6:ac:e0:a6:c0:19:9a:dc:d5:d8:86:f3:4c:ee:
7d:98:7b:d4:60:ff:2a:70:45:ff:72:99:b2:03:62:b8:2f:40:
4f:91:48:77:af:88:26:28:2c:67:36:31:76:af:ce:b1:2a:60:
4e:75:6b:76:06:59:ae:f8:b6:6d:ea:00:fa:10:ab:59:08:b0:
82:df:8f:05:b9:2c:77:e4:b9:eb:59:37:0a:8c:3c:40:be:ba:
e4:80:26:00:37:77:e3:e0:43:33:41:ea:ed:f6:33:09:49:52:
29:bb:18:0a:e0:91:c2:d3:05:6d:65:54:d5:02:74:68:18:ff:
9f:31:de:3f:af:f3:4c:89:96:0a:1e:f8:f6:fd:5a:f9:f2:91:
8b:82:fe:2f:13:e0:08:b5:4b:5f:75:b0:1b:92:9c:1a:2d:c3:
6a:85:31:15:b7:98:1b:c2:79:89:07:ee:0a:e6:5e:8b:7d:d5:
5e:5c:34:bd:a2:81:13:d3:3f:ed:db:dd:82:93:d1:85:3a:a0:
e6:76:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:53:47 2026 by rpki-client