Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ASf6KB6I7iTKPvwYMSrbI4RYa_w.roa
File: ASf6KB6I7iTKPvwYMSrbI4RYa_w.roa (raw, json)
Hash identifier: s8FQlCGJ8w6T8qveFAz8SMQIafcx6wotEz/euqBRIUg=
Subject key identifier: 01:27:FA:28:1E:88:EE:24:CA:3E:FC:18:31:2A:DB:23:84:58:6B:FC
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019D780A64C2A59CF455E5F0CA7274F7EF97
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ASf6KB6I7iTKPvwYMSrbI4RYa_w.roa
Signing time: Fri 10 Apr 2026 15:37:20 +0000
ROA not before: Fri 10 Apr 2026 15:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.140.166.0/24 maxlen: 24
45.155.52.0/24 maxlen: 24
45.155.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:0a:64:c2:a5:9c:f4:55:e5:f0:ca:72:74:f7:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 10 15:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0127fa281e88ee24ca3efc18312adb2384586bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9b:fd:70:53:2e:4b:ee:35:07:32:50:ee:50:
c8:ab:99:88:6c:ad:c0:55:88:dc:f8:49:c6:81:69:
ce:2f:13:4f:de:8b:76:3a:46:b2:14:3c:03:ee:11:
5f:f3:ed:1b:66:63:db:eb:52:8f:27:7f:04:e2:e5:
69:dd:30:40:34:69:38:2e:20:68:45:20:86:57:a5:
a1:3e:31:b6:7e:a2:25:fd:aa:fd:f9:fb:c4:db:d3:
87:62:48:b1:16:12:1d:37:4a:33:bc:42:f1:21:27:
b1:d8:09:74:8d:b0:a0:83:67:7d:1a:f3:94:2c:44:
79:cc:46:34:c2:33:5b:ee:2c:00:a7:16:23:ad:87:
52:80:88:ee:fa:a6:20:fe:93:b5:53:fa:80:e3:52:
fa:60:13:78:42:70:c2:31:28:49:da:5d:08:f2:36:
7c:4f:2a:f7:78:5f:81:1a:88:15:65:4b:fa:e5:01:
a1:e1:16:69:e7:ce:18:2f:9d:ed:26:76:9f:85:73:
b5:bb:92:70:ee:97:ce:bd:f4:f9:06:98:89:a6:47:
12:97:9f:d4:90:76:29:ea:9a:f8:8e:c7:69:48:ff:
61:27:2c:5c:32:96:c8:12:1a:9e:d2:7b:13:18:2c:
97:69:a3:28:6c:aa:1e:9e:28:15:d1:4b:20:9a:93:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:FA:28:1E:88:EE:24:CA:3E:FC:18:31:2A:DB:23:84:58:6B:FC
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/ASf6KB6I7iTKPvwYMSrbI4RYa_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.166.0/24
45.155.52.0/24
45.155.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e1:a2:84:59:55:b1:ae:cf:03:ac:cd:8a:61:ec:b7:fc:86:
5b:4e:a4:81:55:91:71:6b:d9:f0:81:80:de:25:5a:5f:8f:cf:
91:a3:68:27:9c:f2:32:12:33:8e:1d:17:1d:50:1b:45:42:6a:
08:63:40:8f:da:b7:0a:23:f0:87:85:4b:6a:96:c3:6a:a5:63:
b7:17:a2:54:b1:78:bb:c3:a9:88:58:0d:4c:2b:a8:a9:bf:88:
48:39:fd:12:fa:21:ab:df:dc:19:3d:b8:c9:a0:ee:c1:36:82:
a2:94:e4:3b:9d:5e:86:4d:91:91:74:f6:c3:0a:af:fb:98:67:
2c:cf:03:40:66:e6:d0:b5:6c:ae:d6:16:98:00:1a:82:ce:2f:
b7:96:54:8d:8c:49:d6:ea:93:74:fd:85:e7:dd:fe:ed:d4:41:
29:21:45:a8:7a:ea:45:f2:b8:53:f8:0e:52:0e:d3:a7:2f:d4:
46:3a:7c:0f:dc:32:f7:65:61:20:07:2a:9e:8d:d9:98:5d:2b:
75:38:9c:39:ce:a5:24:21:ef:7b:36:91:5a:ce:9e:8b:ec:c5:
ab:fd:b1:bf:36:17:97:90:13:3a:2c:30:10:6b:59:6c:b4:62:
fe:94:48:10:d5:5d:d8:9a:0d:51:0c:74:6d:82:3f:bd:72:8c:
1e:00:71:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:51 2026 by rpki-client