Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1FLA_81GCMks7W2rD9jp1J4joBk.roa
File: 1FLA_81GCMks7W2rD9jp1J4joBk.roa (raw, json)
Hash identifier: J4WswnEmZVEN/GUZXCH17aqt4CkShkPRyJeXlG+8CfE=
Subject key identifier: D4:52:C0:FF:CD:46:08:C9:2C:ED:6D:AB:0F:D8:E9:D4:9E:23:A0:19
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01A0A95B4C045B316F7175410D0E9B0F3230
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1FLA_81GCMks7W2rD9jp1J4joBk.roa
Signing time: Wed 16 Sep 2026 08:35:27 +0000
ROA not before: Wed 16 Sep 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.85.244.0/23 maxlen: 24
45.85.246.0/24 maxlen: 24
45.85.247.0/24 maxlen: 24
91.229.5.0/24 maxlen: 24
193.110.161.0/24 maxlen: 24
193.201.202.0/24 maxlen: 24
194.55.128.0/24 maxlen: 24
195.60.170.0/24 maxlen: 24
217.8.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5b:4c:04:5b:31:6f:71:75:41:0d:0e:9b:0f:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 16 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d452c0ffcd4608c92ced6dab0fd8e9d49e23a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:37:f6:c0:fb:7d:2f:be:de:6a:96:95:77:
f7:cd:80:bf:15:4b:de:60:a1:5a:75:27:31:56:21:
09:e1:32:a4:e8:b4:64:58:7e:42:27:5f:e2:c9:5c:
b0:7c:e4:04:2a:a2:17:bf:e4:d5:96:e5:c9:88:4c:
a8:f6:25:db:72:a3:90:16:92:4a:e0:d6:e9:34:be:
75:af:13:2a:bd:d0:ed:43:e8:ec:b1:8c:e8:23:d2:
c9:2f:17:25:dc:1f:2e:c7:e9:a6:a9:01:de:ec:83:
b3:0d:86:93:a9:65:fd:e2:46:9a:05:15:69:84:1d:
fd:00:66:ac:f9:93:26:e6:b2:da:fc:c3:25:eb:0c:
62:08:01:e8:68:aa:20:59:5e:41:25:d8:25:ec:cb:
bc:d1:ae:4a:c8:1e:e0:3c:02:7b:72:36:51:69:70:
cd:82:29:c6:47:1c:3c:21:e0:e0:0c:0d:61:46:c7:
e9:16:08:4a:78:05:a1:b3:cd:40:8f:f5:77:41:e5:
9e:f4:c4:88:10:4c:0e:64:19:17:71:ab:4b:47:68:
06:8c:fc:4e:68:00:ab:09:45:58:48:e1:c7:6d:88:
77:18:2c:25:56:fd:08:1a:98:28:0e:8f:29:51:ac:
4f:84:d5:f6:1f:09:23:13:ed:28:61:d6:60:c5:bd:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:C0:FF:CD:46:08:C9:2C:ED:6D:AB:0F:D8:E9:D4:9E:23:A0:19
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1FLA_81GCMks7W2rD9jp1J4joBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.244.0/22
91.229.5.0/24
193.110.161.0/24
193.201.202.0/24
194.55.128.0/24
195.60.170.0/24
217.8.116.0/24
Signature Algorithm: sha256WithRSAEncryption
64:61:a0:4d:4a:a8:7a:d0:4a:78:4b:8b:e0:71:1d:e8:78:0d:
02:07:7b:d5:1f:0e:8c:40:a3:23:59:25:ad:e5:42:85:5c:dc:
14:57:9f:ab:76:9c:cd:a0:ba:07:89:95:c5:99:5d:ce:12:ba:
47:4a:9a:98:94:b7:db:c1:a5:df:76:cf:da:f7:b2:01:e7:36:
f6:b9:92:56:f1:31:0f:58:5d:3d:65:8a:10:48:70:3b:b7:35:
7f:8f:2b:f7:22:37:f3:65:15:4c:1d:a5:73:d9:80:3e:b0:7b:
94:dc:b2:b9:cc:1c:e0:f1:70:7e:35:c0:cd:36:93:93:91:cb:
1c:32:77:7d:53:2c:dd:a4:a0:29:69:f1:58:74:5e:31:21:1a:
03:e0:c4:64:32:ec:84:02:9d:9a:d1:74:69:2c:c4:b3:67:0d:
1e:45:ea:7f:40:91:f6:ea:d8:1b:9e:72:55:00:e8:cc:36:1f:
fb:00:8d:8d:a9:21:f3:db:99:ca:75:d9:a2:2e:db:ca:c9:d2:
49:f6:d6:3d:56:2b:87:92:db:eb:38:ff:7c:50:56:ee:33:0c:
52:d4:bd:02:d2:b3:d1:f6:15:1d:74:d6:36:80:e6:8f:25:fa:
04:69:9c:1d:3c:05:ac:36:6a:96:88:5b:aa:1c:c6:04:cc:48:
f4:ba:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:10:43 2026 by rpki-client