Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1zF1ckeCuHrl1jBMMybfY2CTnBM.roa
File: 1zF1ckeCuHrl1jBMMybfY2CTnBM.roa (raw, json)
Hash identifier: FR1w5jh1+tkBcScUp2R3P/M5TRZofnyOySY4iWkouA8=
Subject key identifier: D7:31:75:72:47:82:B8:7A:E5:D6:30:4C:33:26:DF:63:60:93:9C:13
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019C991B45B6C5E3674E8FEF26E5B41E653C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1zF1ckeCuHrl1jBMMybfY2CTnBM.roa
Signing time: Thu 26 Feb 2026 08:40:27 +0000
ROA not before: Thu 26 Feb 2026 08:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.93.164.0/24 maxlen: 24
45.128.198.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a07:e342::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:1b:45:b6:c5:e3:67:4e:8f:ef:26:e5:b4:1e:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 26 08:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d73175724782b87ae5d6304c3326df6360939c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:06:e6:2b:38:16:08:54:0d:cf:83:51:d4:
55:db:da:dd:37:92:33:42:f4:92:8f:69:a4:8b:b4:
43:43:af:d6:36:f9:4f:ac:02:e7:d1:3b:10:1e:e5:
ad:b0:57:c8:60:74:98:cb:9b:9b:29:5d:4a:7e:9d:
f3:bd:56:ee:40:60:55:2a:12:9e:d4:79:1e:58:d6:
b8:e8:14:2a:15:54:bf:7f:64:b4:ae:21:2f:1f:f4:
ce:5b:a1:98:a8:ef:70:7b:96:e7:eb:06:1c:31:c0:
15:bb:19:3b:ca:51:12:30:56:fa:85:be:c1:b1:59:
31:43:b8:cf:67:c6:60:b5:d1:89:d0:2a:5a:db:83:
74:a5:68:8f:8e:8e:21:c3:f5:e9:38:8e:b7:65:b4:
88:c1:e4:87:3b:70:a4:77:0c:c6:10:9e:0a:6c:28:
2a:02:5f:26:8b:0b:2d:a8:c4:6b:a8:3d:88:1a:c7:
a9:2a:f6:2b:ae:a7:08:b1:88:14:64:61:ff:3d:20:
52:01:13:3b:c5:8e:5c:0d:c9:b5:8d:94:9b:c6:9b:
dc:54:04:49:72:d1:f7:e6:f3:a9:96:b8:74:a4:be:
ad:af:fc:70:de:ec:b5:5c:6d:45:78:ef:db:ac:1a:
e1:6c:41:89:4e:95:bb:13:df:e0:11:fc:7e:b2:ed:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:75:72:47:82:B8:7A:E5:D6:30:4C:33:26:DF:63:60:93:9C:13
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1zF1ckeCuHrl1jBMMybfY2CTnBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.93.164.0/24
45.128.198.0/24
45.130.141.0/24
IPv6:
2a07:e342::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
b7:79:b6:31:79:71:62:38:96:70:02:af:3d:e1:98:83:30:33:
1b:8f:05:69:c0:17:8a:85:72:bf:98:11:fd:24:2a:0a:6d:5f:
63:40:6f:58:1c:c1:12:1f:07:23:33:55:11:53:65:72:87:d3:
32:51:00:05:3d:f6:51:6a:82:49:20:82:04:c8:c9:c6:7f:a7:
74:8c:ef:bb:46:32:d3:51:31:22:04:0c:d2:38:5a:2c:2f:69:
47:15:b3:2f:7d:09:2a:71:55:ff:99:d6:90:32:96:18:eb:3a:
aa:4b:1f:c3:df:6f:66:06:43:3c:d8:df:86:07:3a:31:3f:6e:
47:d9:fc:33:8d:b9:0e:24:c6:98:38:9b:25:b8:e5:01:18:62:
81:c9:70:a2:e7:28:9d:18:7c:16:09:15:5c:06:fc:86:bf:91:
ee:ee:c3:8c:8e:1d:68:c7:7c:81:f1:68:8c:17:7f:b0:fa:f2:
24:09:f2:13:fb:91:53:2f:32:d2:a6:ba:e2:37:1a:25:d8:cd:
51:75:a7:d1:db:22:63:73:ee:ef:3b:ff:2f:42:e7:d5:48:e7:
37:eb:d7:4a:e8:3f:23:01:fe:55:00:a7:29:c5:da:d2:c4:88:
fd:78:41:6e:da:a6:40:a2:5f:42:18:88:74:00:be:36:f2:8a:
f6:a5:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:38 2026 by rpki-client