Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1-_1G1tATdFEJfv4st45_Q-d33kQ.roa
File: 1-_1G1tATdFEJfv4st45_Q-d33kQ.roa (raw, json)
Hash identifier: p1aXapIIZWhXgIor7qn5hSGBNLqdBcmtQEmWKYSt1FY=
Subject key identifier: FB:FD:46:D6:D0:13:74:51:09:7E:FE:2C:B7:8E:7F:43:E7:77:DE:44
Certificate issuer: /CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Certificate serial: 01A0A4CBFE40412B994E50662500FB1958A1
Authority key identifier: E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1-_1G1tATdFEJfv4st45_Q-d33kQ.roa
Signing time: Tue 15 Sep 2026 11:20:27 +0000
ROA not before: Tue 15 Sep 2026 11:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.146.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:cb:fe:40:41:2b:99:4e:50:66:25:00:fb:19:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58f266b4d5800552ceda76b83271b4c8e15e38a
Validity
Not Before: Sep 15 11:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbfd46d6d0137451097efe2cb78e7f43e777de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:ef:67:70:4a:3f:df:f9:4a:42:de:f7:e6:
20:72:78:1a:98:ec:93:f6:2e:51:0e:af:4f:6c:3f:
55:65:7c:15:47:58:fe:c7:52:bf:7c:e8:cd:5a:5d:
b4:34:f9:8b:6e:ab:79:0b:c4:1e:5f:68:58:4a:cb:
01:7b:16:80:31:aa:e7:0c:1f:7b:32:84:79:dc:20:
01:c3:fb:10:fb:01:4f:0e:06:7a:d5:9f:d7:b6:39:
03:16:af:7c:1d:bb:71:72:3e:ab:3a:14:24:c2:dd:
42:86:ce:53:b2:95:87:99:92:b7:b2:74:3f:99:4a:
59:a3:e7:0c:27:e1:9c:4e:f9:60:91:1d:b9:a3:d8:
42:bf:e5:e7:c8:b6:80:35:5c:c3:d5:20:ad:70:3e:
4e:90:13:38:c4:e8:ea:8c:cd:73:1d:e3:a4:70:34:
bf:fc:34:cb:c0:2a:da:f1:f3:e3:d5:80:66:ed:de:
d8:c1:e0:68:6a:9b:bd:25:a6:73:c9:68:41:69:fc:
73:b5:2d:87:1c:e5:d0:d7:97:2d:d2:84:dd:a9:b5:
bb:61:59:70:87:3d:59:5e:f6:08:14:9e:d0:5b:4f:
37:70:74:9d:9d:87:70:6b:80:10:dd:9c:a3:0d:56:
87:0e:5f:6d:b5:e0:35:1f:86:fa:aa:1d:92:46:6c:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:46:D6:D0:13:74:51:09:7E:FE:2C:B7:8E:7F:43:E7:77:DE:44
X509v3 Authority Key Identifier:
keyid:E5:8F:26:6B:4D:58:00:55:2C:ED:A7:6B:83:27:1B:4C:8E:15:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y8ma01YAFUs7adrgycbTI4V44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/1-_1G1tATdFEJfv4st45_Q-d33kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5105c7-e393-43a9-aa96-225e90b37cdc/1/5Y8ma01YAFUs7adrgycbTI4V44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.12.0/23
Signature Algorithm: sha256WithRSAEncryption
53:0b:e0:b5:06:68:ab:f6:c0:60:39:55:63:1c:dc:3d:dd:7b:
56:f8:0e:ef:2d:89:96:a1:d1:b4:2b:a9:36:22:2c:e7:79:4b:
b8:eb:bb:73:23:b7:4e:ca:d8:f1:b2:e5:77:94:63:d8:a8:f0:
77:36:0f:d7:44:50:dd:9b:44:cc:c9:8e:13:16:69:12:46:2a:
03:86:62:c0:9f:dd:e5:8c:c4:a6:e5:98:d8:ea:15:f3:12:93:
ee:fd:ea:bb:c9:db:94:26:8a:ab:b0:86:2d:0b:a9:0e:4a:b6:
78:68:f0:59:7d:5b:51:77:d1:72:0e:16:8d:c3:0e:ed:75:d9:
64:52:74:2a:fc:b4:42:8c:e9:4b:74:79:7a:4c:6b:b6:8d:bd:
47:dd:1b:bc:0d:ea:6d:c5:75:58:6b:b5:64:6d:61:48:7a:8d:
31:26:7e:62:1b:2d:04:9a:15:3b:0c:fa:70:fa:22:a2:6a:d7:
df:59:75:df:08:47:a0:2d:5c:f7:be:36:16:b4:7b:93:bf:9f:
23:b5:36:4b:8c:e0:f2:fa:8f:ed:a9:3c:ee:39:0d:e8:b1:63:
6d:72:d4:c4:8d:5b:78:c0:88:80:05:73:be:6a:84:76:ab:7d:
ec:1a:18:14:6d:f8:3e:6b:6d:34:77:3f:47:7d:d7:e6:14:4b:
a9:a4:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:47 2026 by rpki-client