Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa
File: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (raw, json)
Hash identifier: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=
Subject key identifier: 4A:CF:C7:01:B5:F0:AC:18:13:9C:DF:68:95:44:D6:CA:34:05:08:1E
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019EB673534F506E179EB16FB5202C79F09D
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa
Signing time: Thu 11 Jun 2026 11:31:11 +0000
ROA not before: Thu 11 Jun 2026 11:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 45.146.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:73:53:4f:50:6e:17:9e:b1:6f:b5:20:2c:79:f0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 11 11:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4acfc701b5f0ac18139cdf689544d6ca3405081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:26:18:5d:ef:3d:01:4f:a0:33:d0:e4:4a:
64:d3:6b:7a:e2:75:44:da:fe:d3:e6:9c:f5:97:2e:
af:36:1d:c3:3d:b1:fd:f4:6d:13:15:f6:e5:86:53:
c7:c1:e3:08:18:96:7e:95:bb:e1:7d:65:d4:0e:f4:
52:df:a7:64:98:c6:19:b2:5d:d2:59:d4:aa:d4:e2:
10:2c:45:06:e0:cd:8d:82:8e:da:00:38:dc:9a:dc:
64:62:0e:bb:04:c4:58:e6:15:54:96:99:6c:ba:30:
7d:93:2c:79:5c:34:d0:37:86:0b:f6:8d:7f:2a:04:
bd:ef:dd:07:01:e0:1f:4d:a5:64:58:07:a8:71:76:
a2:bf:44:30:2a:7f:d6:65:09:74:c7:1d:04:4e:de:
5c:65:11:4c:1c:90:41:46:d6:dd:37:59:2c:7a:ca:
5f:7e:57:8d:f0:f9:fd:9a:2a:15:bc:0c:29:c1:bc:
3b:e1:a0:07:89:40:b0:d7:0b:5d:35:ef:e7:2c:d7:
1e:7c:a5:41:c4:84:c0:2b:d4:91:52:f0:14:89:e8:
d6:ba:64:b2:fc:29:09:57:9b:b5:86:15:92:88:af:
b3:1f:83:e8:ba:09:ee:de:9b:4a:10:ad:d9:59:89:
28:03:58:77:3a:05:22:34:d4:25:65:9a:e4:9d:53:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:C7:01:B5:F0:AC:18:13:9C:DF:68:95:44:D6:CA:34:05:08:1E
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a9:0c:db:90:b7:eb:01:26:e2:63:af:63:ed:2e:e4:3a:f7:
d2:ac:71:14:b8:66:40:51:4d:4d:d7:58:14:a8:52:6c:5a:bc:
6f:34:11:cd:85:34:00:fe:b8:a1:c9:56:80:4d:31:d6:f7:78:
93:60:00:bf:c0:fc:b7:32:cf:08:09:92:49:07:2f:bd:d1:b0:
81:ca:b6:cb:e7:25:7c:96:54:2a:65:b9:83:15:ab:b9:ea:f4:
7a:2b:9a:4a:db:5d:93:1c:48:d6:49:0c:99:b0:21:63:f3:6b:
24:c4:04:c3:40:89:18:c6:34:bb:b7:01:c8:bf:0f:8b:92:1d:
67:62:00:f4:a0:5d:4f:a8:ba:d7:bd:91:ad:69:00:67:69:57:
97:20:dd:f9:0e:f5:7b:81:1d:99:c5:b2:c8:e5:22:cc:c1:46:
c4:5a:dd:08:63:b5:b5:54:09:3b:21:3e:89:9d:f3:40:d5:ef:
1b:c9:6d:76:bb:59:cd:7f:f1:e8:a0:89:21:05:60:fd:f4:6f:
df:8d:f9:a8:57:5e:be:b9:d1:20:05:9f:99:51:a7:9f:96:63:
05:c4:b2:ff:34:db:c8:49:e1:2f:ef:b0:e3:be:f4:3c:cd:d1:
cc:45:d3:f9:81:aa:e4:23:0d:7d:e9:f2:40:11:3d:f8:0c:b5:
97:bd:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:00 2026 by rpki-client