Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1i1xLt8LSq9XcIpO8ZALfOYJsTk.roa
File: 1i1xLt8LSq9XcIpO8ZALfOYJsTk.roa (raw, json)
Hash identifier: P4rImiHATeLrUpI8TG/XrPMvtQlb8OCEQsVbzm1ObtM=
Subject key identifier: D6:2D:71:2E:DF:0B:4A:AF:57:70:8A:4E:F1:90:0B:7C:E6:09:B1:39
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01A0AE7B3EF8AB435380F262AF3F5747E1F7
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1i1xLt8LSq9XcIpO8ZALfOYJsTk.roa
Signing time: Thu 17 Sep 2026 08:28:27 +0000
ROA not before: Thu 17 Sep 2026 08:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210848
IP address blocks: 45.81.22.0/24 maxlen: 24
45.140.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:7b:3e:f8:ab:43:53:80:f2:62:af:3f:57:47:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 17 08:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d62d712edf0b4aaf57708a4ef1900b7ce609b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:23:f7:d8:c2:fd:88:b2:ad:a6:2e:fb:05:
ae:31:7c:8d:ac:15:01:5d:bf:55:ac:a8:5b:c4:fa:
d7:46:ac:34:6e:84:2e:d4:b3:fa:2a:a4:32:73:be:
42:86:0b:23:39:4e:da:c2:57:a6:c3:b7:bd:24:f9:
04:2c:fb:ab:52:92:cb:ce:bf:76:2a:54:bf:23:4d:
8a:46:97:3d:e8:88:41:dc:d6:93:e1:8d:a8:36:a8:
f2:ff:2f:f6:ce:c9:99:b9:cc:46:b5:04:41:6c:95:
bc:61:3e:f0:b4:d5:db:9e:87:83:f9:a7:96:4e:f5:
0d:dd:e0:29:36:72:f7:81:05:4e:01:81:32:cf:9a:
d4:21:0b:d6:1c:da:4c:a3:84:e1:8d:51:75:bb:f3:
9e:35:45:0d:66:03:5f:23:4f:d3:9c:8b:4c:33:9d:
07:68:f6:f3:e8:0d:d9:9f:65:76:32:cd:fd:62:b5:
38:5e:33:db:f5:d8:57:c4:0e:c7:3f:01:9a:4d:42:
88:a2:d9:05:43:e1:a4:07:53:fd:f5:86:0f:18:8e:
69:86:80:37:75:00:88:0f:9c:37:7e:56:66:d9:83:
49:a3:27:e7:a7:2d:28:de:07:60:89:6b:58:56:4a:
fe:e3:0c:c5:1e:63:33:b8:49:8b:d7:50:8d:8a:8c:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2D:71:2E:DF:0B:4A:AF:57:70:8A:4E:F1:90:0B:7C:E6:09:B1:39
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1i1xLt8LSq9XcIpO8ZALfOYJsTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.22.0/24
45.140.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d9:89:f8:38:51:41:5a:16:60:0d:1d:08:03:05:37:cb:89:
40:08:d2:86:a1:95:cd:2b:fd:5b:0c:b4:42:f8:0f:8c:16:48:
86:7e:c6:f1:e0:8e:98:02:b9:e9:b9:31:a3:d9:2c:60:4c:8b:
6a:78:e0:34:1b:fd:cc:f3:3a:0a:a1:0e:22:dd:87:88:06:50:
46:49:04:18:27:13:39:de:99:1e:4e:60:1f:25:6c:f8:df:3a:
06:a4:1f:7d:ef:b7:44:94:bd:4c:02:0f:10:c4:b2:45:60:c3:
c1:94:e7:fe:a4:2c:71:07:99:2c:40:7a:2c:e5:96:19:da:87:
b2:47:fd:66:70:60:88:e0:ee:c7:ae:0d:fc:17:4e:38:7f:82:
b6:ee:d2:9b:b8:49:3b:54:f3:d6:97:f7:27:6c:c1:91:68:01:
5f:b1:8b:48:94:49:04:46:c2:dd:af:20:22:e7:9c:1b:64:a1:
04:c8:fb:09:da:5e:53:65:39:66:71:df:2d:2f:77:1b:2b:67:
99:ba:f8:4f:9b:f4:62:c4:32:36:36:e7:22:c9:2b:c6:e7:6d:
87:31:80:2c:61:2b:d7:52:ab:d7:ff:68:0e:5d:a2:04:b9:b5:
3b:12:f3:3f:d1:bb:5f:99:1c:fc:a1:83:fd:d9:59:e4:56:64:
31:17:bf:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCuez74q0NTgPJirz9XR+H3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjYwOTE3MDgyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjJkNzEyZWRmMGI0YWFmNTc3MDhhNGVmMTkwMGI3Y2U2MDliMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88j99jC/YiyraYu+wWuMXyNrBUB
Xb9VrKhbxPrXRqw0boQu1LP6KqQyc75ChgsjOU7awlemw7e9JPkELPurUpLLzr92
KlS/I02KRpc96IhB3NaT4Y2oNqjy/y/2zsmZucxGtQRBbJW8YT7wtNXbnoeD+aeW
TvUN3eApNnL3gQVOAYEyz5rUIQvWHNpMo4ThjVF1u/OeNUUNZgNfI0/TnItMM50H
aPbz6A3Zn2V2Ms39YrU4XjPb9dhXxA7HPwGaTUKIotkFQ+GkB1P99YYPGI5phoA3
dQCID5w3flZm2YNJoyfnpy0o3gdgiWtYVkr+4wzFHmMzuEmL11CNioxq5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNYtcS7fC0qvV3CKTvGQC3zmCbE5MB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvMWkxeEx0OExTcTlYY0lwTzhaQUxmT1lKc1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVEWAwQA
LYzfMA0GCSqGSIb3DQEBCwUAA4IBAQA92Yn4OFFBWhZgDR0IAwU3y4lACNKGoZXN
K/1bDLRC+A+MFkiGfsbx4I6YArnpuTGj2SxgTItqeOA0G/3M8zoKoQ4i3YeIBlBG
SQQYJxM53pkeTmAfJWz43zoGpB9977dElL1MAg8QxLJFYMPBlOf+pCxxB5ksQHos
5ZYZ2oeyR/1mcGCI4O7Hrg38F044f4K27tKbuEk7VPPWl/cnbMGRaAFfsYtIlEkE
RsLdryAi55wbZKEEyPsJ2l5TZTlmcd8tL3cbK2eZuvhPm/RixDI2NuciySvG522H
MYAsYSvXUqvX/2gOXaIEubU7EvM/0btfmRz8oYP92VnkVmQxF7+J
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:11 2026 by rpki-client