Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa
File: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (raw, json)
Hash identifier: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=
Subject key identifier: 12:C2:16:BF:36:0D:C4:57:8C:3D:41:66:8C:11:FA:91:3A:63:6C:1D
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019FA7E474F1F971AA32F57C03B86611579D
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa
Signing time: Tue 28 Jul 2026 08:43:14 +0000
ROA not before: Tue 28 Jul 2026 08:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.159.12.0/24 maxlen: 24
45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e4:74:f1:f9:71:aa:32:f5:7c:03:b8:66:11:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jul 28 08:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c216bf360dc4578c3d41668c11fa913a636c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:43:cf:7f:52:cb:88:fb:3e:f4:69:21:ff:
ca:35:3b:60:8e:c8:7b:c1:f2:17:6e:99:5c:6f:54:
50:2b:62:84:1b:e5:fe:c0:67:a5:01:a3:50:0b:93:
9d:3c:98:03:cc:b3:5d:90:07:86:46:b9:e8:e4:f2:
84:c4:f5:ec:87:04:42:75:99:d6:00:06:ca:ba:ab:
11:bd:c6:a2:da:de:6c:57:d1:39:14:72:e3:b6:cf:
e0:39:e0:05:9c:00:3a:c4:7c:b9:ab:c0:9d:87:c6:
65:a7:ec:a6:80:03:65:cf:13:8f:50:dd:63:56:34:
52:13:ba:ca:70:42:83:88:12:99:f2:89:8b:28:8a:
d8:09:f3:80:33:2a:93:6b:ef:f4:2d:04:f1:2f:d6:
d4:fa:57:56:71:95:0c:a8:13:72:3e:29:4d:60:bc:
8c:dd:99:13:cc:72:d9:61:82:de:f1:65:80:48:d7:
47:42:1b:69:23:67:82:c7:ad:6d:96:07:a8:dc:d7:
9c:53:28:4c:b6:27:82:8e:2b:7f:75:e6:27:41:db:
03:43:41:d2:3e:a7:5c:38:5e:54:f0:f0:21:98:c4:
ed:f1:d5:0c:9b:f0:6f:9d:b3:28:cb:69:9f:da:1a:
39:c3:ad:8e:0c:f6:af:c0:0e:dd:ce:95:c0:46:fc:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:16:BF:36:0D:C4:57:8C:3D:41:66:8C:11:FA:91:3A:63:6C:1D
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.12.0/23
45.159.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e2:9e:ac:9e:d6:6a:e1:d3:59:01:0d:ff:92:d3:a3:00:53:
cd:96:ff:3e:41:d2:7d:8f:fc:d2:26:a9:3b:f6:f8:af:4b:db:
07:c3:0b:da:cf:05:59:2b:05:05:d5:be:da:ea:5a:e6:f5:fd:
32:f8:3f:60:fb:e5:44:77:21:04:3d:0a:f0:95:3e:7f:1e:6a:
6b:d9:a6:4c:83:46:bb:b0:5f:c3:5e:6b:bd:dd:71:6f:0e:93:
f5:ed:1e:92:49:99:e6:5e:e6:37:96:40:f6:be:e2:57:8d:e9:
5e:77:f9:02:c7:de:70:e3:3e:cf:56:73:b8:fc:a7:99:ef:6f:
40:2c:01:87:58:26:e0:cf:4c:9d:51:10:54:cf:d0:17:21:20:
f0:3b:79:22:98:16:16:40:24:d0:0c:05:74:f0:b8:a0:03:3b:
44:69:8d:f1:d3:26:19:33:7a:b0:28:8c:21:cd:ba:fa:e1:9e:
51:bb:93:e0:2f:dc:b8:6d:5f:f9:a2:98:68:13:2d:39:1e:f9:
61:33:57:d2:7d:b9:f9:34:81:fa:f2:f6:31:73:97:ce:e2:37:
f7:a5:fd:ca:36:5b:90:28:f9:9c:64:f6:85:d2:b4:c3:dd:54:
6e:97:e2:ac:18:20:7a:a8:35:e4:ca:5c:e8:65:63:44:15:cb:
24:d2:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:32 2026 by rpki-client