Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/G54XLkaMlrOl_RIl-BBLFf32j_4.roa
File: G54XLkaMlrOl_RIl-BBLFf32j_4.roa (raw, json)
Hash identifier: 1HmrmYZ1lX0kzUUafKsHyk1mrTGQ2bqrAlLdgPA1QtM=
Subject key identifier: 1B:9E:17:2E:46:8C:96:B3:A5:FD:12:25:F8:10:4B:15:FD:F6:8F:FE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019D52F90979807E1DC58B1A45B7DF954A65
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/G54XLkaMlrOl_RIl-BBLFf32j_4.roa
Signing time: Fri 03 Apr 2026 10:52:25 +0000
ROA not before: Fri 03 Apr 2026 10:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 45.12.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:f9:09:79:80:7e:1d:c5:8b:1a:45:b7:df:95:4a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Apr 3 10:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b9e172e468c96b3a5fd1225f8104b15fdf68ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:69:4e:fc:51:53:88:0e:98:ef:f0:30:e8:
31:7c:a0:8d:ee:9a:38:9c:99:cc:72:b3:b3:53:4e:
de:1f:8c:6e:93:76:11:65:9c:41:a7:b5:1d:c2:10:
81:2c:6c:b3:27:c5:02:43:ec:ac:34:c1:5c:f6:5c:
ec:63:f6:ab:2b:f2:08:48:9e:37:64:11:c2:57:e9:
69:53:38:01:ca:c8:80:49:cc:92:7c:94:27:06:c5:
d6:ea:d8:9d:ed:b5:ba:fd:76:e4:f3:f6:79:3b:41:
a2:be:c2:df:fa:37:31:f2:91:a0:c8:d7:4b:54:62:
ca:1b:16:8e:35:33:62:82:db:26:9d:24:2f:61:78:
ca:08:10:e3:f3:1c:75:6f:33:40:24:a7:c2:96:56:
2a:63:e7:42:16:d3:2b:5d:ec:03:d7:38:69:0e:8e:
7a:aa:c4:ac:5a:b1:49:66:35:cc:fa:12:0f:5b:33:
e8:16:8d:2d:a8:a6:0b:25:f7:5a:74:c5:7f:7b:f3:
a0:7b:5a:1f:a6:ec:35:9a:3a:7a:a4:05:ea:2a:95:
41:bf:fb:e2:66:db:d2:68:c8:05:52:b6:2d:16:ec:
04:d2:6c:c2:a6:be:eb:27:ee:a6:b1:51:d2:77:85:
23:eb:28:56:8e:69:06:f2:e0:0b:a4:3b:f2:db:64:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:17:2E:46:8C:96:B3:A5:FD:12:25:F8:10:4B:15:FD:F6:8F:FE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/G54XLkaMlrOl_RIl-BBLFf32j_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.219.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3a:87:30:9b:c9:99:fd:8f:a2:e3:18:23:ef:13:7e:95:a4:
b8:ce:4c:4c:36:82:66:d9:62:da:30:bd:d5:1e:f2:d4:5c:89:
28:76:92:f6:1a:ed:f3:a0:43:2f:3e:20:c6:f5:22:55:33:cf:
63:cc:ae:57:cb:5e:aa:d3:bd:15:dc:53:85:63:8d:77:5a:82:
66:f4:59:e9:41:1b:64:68:77:00:f5:de:aa:e8:65:9d:1e:5b:
c7:ae:db:37:4f:f8:4a:1a:8d:26:ff:d0:48:85:24:25:65:19:
43:a5:2c:eb:18:83:94:bd:e1:a7:60:14:89:0b:e8:90:41:5a:
fb:79:ee:4f:4f:fb:a8:5a:61:79:b2:9e:24:eb:2e:1b:ed:3a:
a5:42:46:b7:13:ab:3d:65:f0:31:72:a7:5a:74:11:52:d2:83:
08:a6:d7:20:eb:11:b4:15:e1:45:e0:4d:6e:36:c0:4c:db:a0:
c3:81:9f:b0:0b:37:25:ea:c6:eb:85:6e:ee:40:f0:9b:bd:67:
6f:36:7c:53:79:3f:16:3e:58:bc:ef:7f:d7:1d:28:22:7a:eb:
03:96:e6:6b:4a:b4:b8:23:f8:75:60:66:cb:1b:28:cf:9b:2e:
df:7a:b8:4b:b5:20:e9:f2:d0:af:96:c1:51:8e:3a:03:8d:d6:
e7:4b:66:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1S+Ql5gH4dxYsaRbfflUplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjYwNDAzMTA1MjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjllMTcyZTQ2OGM5NmIzYTVmZDEyMjVmODEwNGIxNWZkZjY4ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SVpTvxRU4gOmO/wMOgxfKCN7po4
nJnMcrOzU07eH4xuk3YRZZxBp7UdwhCBLGyzJ8UCQ+ysNMFc9lzsY/arK/IISJ43
ZBHCV+lpUzgBysiAScySfJQnBsXW6tid7bW6/Xbk8/Z5O0GivsLf+jcx8pGgyNdL
VGLKGxaONTNigtsmnSQvYXjKCBDj8xx1bzNAJKfCllYqY+dCFtMrXewD1zhpDo56
qsSsWrFJZjXM+hIPWzPoFo0tqKYLJfdadMV/e/Oge1ofpuw1mjp6pAXqKpVBv/vi
ZtvSaMgFUrYtFuwE0mzCpr7rJ+6msVHSd4Uj6yhWjmkG8uALpDvy22QByQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBueFy5GjJazpf0SJfgQSxX99o/+MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvRzU0WExrYU1sck9sX1JJbC1CQkxGZjMyal80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzbMA0G
CSqGSIb3DQEBCwUAA4IBAQAgOocwm8mZ/Y+i4xgj7xN+laS4zkxMNoJm2WLaML3V
HvLUXIkodpL2Gu3zoEMvPiDG9SJVM89jzK5Xy16q070V3FOFY413WoJm9FnpQRtk
aHcA9d6q6GWdHlvHrts3T/hKGo0m/9BIhSQlZRlDpSzrGIOUveGnYBSJC+iQQVr7
ee5PT/uoWmF5sp4k6y4b7TqlQka3E6s9ZfAxcqdadBFS0oMIptcg6xG0FeFF4E1u
NsBM26DDgZ+wCzcl6sbrhW7uQPCbvWdvNnxTeT8WPli873/XHSgieusDluZrSrS4
I/h1YGbLGyjPmy7ferhLtSDp8tCvlsFRjjoDjdbnS2av
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:51 2026 by rpki-client