Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa
File: ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa (raw, json)
Hash identifier: csuuV2gLozTCG0Y40dpOQI7fvEKfdkpWci0A66Okg3A=
Subject key identifier: 6A:37:93:DE:C7:9B:67:C9:09:CB:84:78:C8:EE:0B:36:83:02:BF:B5
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019E60E3B72613125EA5B0C0D07A0545BEF4
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa
Signing time: Mon 25 May 2026 20:46:36 +0000
ROA not before: Mon 25 May 2026 20:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.159.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:e3:b7:26:13:12:5e:a5:b0:c0:d0:7a:05:45:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: May 25 20:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a3793dec79b67c909cb8478c8ee0b368302bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:46:3d:fd:fb:54:f8:55:e6:16:8e:af:83:
46:9c:62:2e:2b:bf:7d:28:e0:d0:0f:87:53:37:4d:
c7:21:af:de:64:59:1a:86:62:09:9e:20:66:8a:50:
d2:1b:7a:5a:12:de:f2:7b:d7:ef:80:98:cc:00:80:
f1:5e:c6:91:83:f5:64:ea:f1:95:00:dc:fc:20:0a:
04:d5:70:54:55:ad:73:fd:2c:4a:ff:e0:22:59:94:
73:e0:30:57:fd:a5:a3:de:db:50:8e:2b:34:2a:ab:
dd:33:07:c5:e3:e8:d9:f2:6e:fe:f7:d1:4e:d7:26:
9e:81:ae:6c:f0:24:79:42:33:ca:df:6e:d7:d4:88:
f0:9a:7e:57:4b:ae:ce:f6:59:1b:b7:f7:b0:19:cc:
50:d5:76:a6:93:c8:8d:69:f6:f7:ad:e4:f3:3b:7e:
55:28:2c:f0:33:f2:c2:dd:51:7e:00:0d:7a:45:8b:
3e:3e:97:b7:75:ec:8b:e6:a9:ee:d8:ec:20:a7:41:
74:f2:fb:6e:1b:ed:b4:57:16:d1:a4:f6:50:41:3c:
2c:a4:a0:d6:60:c2:74:60:61:65:55:52:2c:8e:54:
79:b1:34:89:08:55:2c:81:a8:8e:7e:04:9b:ac:6d:
33:99:c8:c9:49:60:f0:bc:27:dc:94:ec:d4:75:6a:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:93:DE:C7:9B:67:C9:09:CB:84:78:C8:EE:0B:36:83:02:BF:B5
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7a:b2:f5:f4:3f:e1:7a:c2:99:ab:0b:70:a6:f2:7f:9d:0e:
f1:38:db:e1:19:19:c3:38:f5:3e:20:a1:12:ae:b7:7a:38:6b:
af:a7:a9:0f:5a:14:45:37:a8:b4:b5:e7:73:a8:a2:63:41:6a:
d5:d5:44:f9:38:bb:2c:d2:8b:48:12:1b:dc:70:dd:dd:26:37:
83:55:8c:1f:aa:04:2b:7f:34:80:2d:a0:ef:d8:61:09:1b:87:
21:9f:ae:6d:45:7b:e4:e4:03:d6:46:da:b3:a3:e1:d3:0a:92:
fe:ec:a0:c9:3a:b0:8c:af:0b:2b:a9:04:b4:6a:6c:60:44:81:
fa:85:0e:a4:42:ec:4c:1c:a7:16:3c:c8:59:b5:37:2e:50:f5:
f9:de:cf:d5:8c:c6:47:d0:f1:89:79:21:39:7d:9a:cd:3e:ca:
ac:6c:33:c7:07:5b:a4:cb:84:e3:b5:af:09:5e:6a:e0:e3:4f:
e3:c9:aa:15:3b:86:ed:c8:86:97:fc:69:e5:1c:24:3a:2e:df:
56:e7:43:93:ca:24:9b:82:af:47:fa:3d:c4:79:73:56:92:cb:
79:9e:94:ae:51:c8:11:70:f2:21:64:e2:3e:ef:aa:8a:68:9f:
a8:2f:bc:14:0b:b5:bc:da:2c:5a:7d:f2:1e:5e:8a:0c:ce:84:
ff:8b:ff:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5g47cmExJepbDA0HoFRb70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjYwNTI1MjA0NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM3OTNkZWM3OWI2N2M5MDljYjg0NzhjOGVlMGIzNjgzMDJiZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GNGPf37VPhV5haOr4NGnGIuK799
KODQD4dTN03HIa/eZFkahmIJniBmilDSG3paEt7ye9fvgJjMAIDxXsaRg/Vk6vGV
ANz8IAoE1XBUVa1z/SxK/+AiWZRz4DBX/aWj3ttQjis0KqvdMwfF4+jZ8m7+99FO
1yaega5s8CR5QjPK327X1Ijwmn5XS67O9lkbt/ewGcxQ1Xamk8iNafb3reTzO35V
KCzwM/LC3VF+AA16RYs+Ppe3deyL5qnu2Owgp0F08vtuG+20VxbRpPZQQTwspKDW
YMJ0YGFlVVIsjlR5sTSJCFUsgaiOfgSbrG0zmcjJSWDwvCfclOzUdWrgCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGo3k97Hm2fJCcuEeMjuCzaDAr+1MB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvYWplVDNzZWJaOGtKeTRSNHlPNExOb01DdjdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8PMA0G
CSqGSIb3DQEBCwUAA4IBAQB8erL19D/hesKZqwtwpvJ/nQ7xONvhGRnDOPU+IKES
rrd6OGuvp6kPWhRFN6i0tedzqKJjQWrV1UT5OLss0otIEhvccN3dJjeDVYwfqgQr
fzSALaDv2GEJG4chn65tRXvk5APWRtqzo+HTCpL+7KDJOrCMrwsrqQS0amxgRIH6
hQ6kQuxMHKcWPMhZtTcuUPX53s/VjMZH0PGJeSE5fZrNPsqsbDPHB1uky4Tjta8J
Xmrg40/jyaoVO4btyIaX/GnlHCQ6Lt9W50OTyiSbgq9H+j3EeXNWkst5npSuUcgR
cPIhZOI+76qKaJ+oL7wUC7W82ixaffIeXooMzoT/i//+
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:42 2026 by rpki-client