Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hOj1q_woW_TnlRvs2YyjROgkzFQ.roa
File: hOj1q_woW_TnlRvs2YyjROgkzFQ.roa (raw, json)
Hash identifier: ps7n86yeUL7ggIASsOQ9fWrHGtyQ8wFxbcEnxp+seck=
Subject key identifier: 84:E8:F5:AB:FC:28:5B:F4:E7:95:1B:EC:D9:8C:A3:44:E8:24:CC:54
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019E852D6C3502285317423F64697B9C29DE
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hOj1q_woW_TnlRvs2YyjROgkzFQ.roa
Signing time: Mon 01 Jun 2026 21:53:27 +0000
ROA not before: Mon 01 Jun 2026 21:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.152.177.0/24 maxlen: 24
45.152.178.0/24 maxlen: 24
45.152.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:85:2d:6c:35:02:28:53:17:42:3f:64:69:7b:9c:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jun 1 21:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84e8f5abfc285bf4e7951becd98ca344e824cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:63:94:1b:55:ab:34:ff:09:2f:f6:84:94:
75:62:c1:d1:8e:9d:4b:5e:d0:ec:4d:4b:eb:58:d1:
cc:ce:96:c2:4f:d0:c8:3b:93:22:04:b7:fa:f3:fa:
4c:1f:80:4a:19:58:ca:71:0a:c9:bf:a4:4c:0c:d7:
7a:73:59:54:33:74:5f:64:2b:8b:6f:6c:a8:21:90:
48:d8:29:e2:df:5e:68:44:5c:aa:cc:14:91:2f:94:
2e:18:56:ba:93:6c:a2:9e:7c:2b:ae:0f:20:a6:f8:
41:80:7c:03:af:86:0d:5f:47:e7:04:c1:74:9c:8c:
38:27:a6:47:96:b1:6c:10:4d:69:49:df:63:a8:b0:
58:a3:6d:3b:25:68:af:6d:fe:2b:ad:d6:79:53:ca:
c9:fc:0c:34:8c:17:61:86:31:f4:23:84:7c:24:db:
37:95:7e:a4:a3:6c:2e:70:9b:06:3f:0d:67:2c:b3:
e1:db:0e:76:65:5c:af:f0:77:01:7c:be:0f:79:ed:
0d:6a:78:09:73:7b:3a:c9:d1:d4:d2:f2:9a:49:80:
c3:80:b7:3e:cd:90:54:fa:cf:63:4c:2a:1f:ea:45:
56:13:68:b8:47:bf:cb:dd:44:b5:e5:f4:47:f0:38:
2c:b9:70:86:83:f7:24:8c:6b:cb:69:b9:93:79:e8:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E8:F5:AB:FC:28:5B:F4:E7:95:1B:EC:D9:8C:A3:44:E8:24:CC:54
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/hOj1q_woW_TnlRvs2YyjROgkzFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.177.0-45.152.179.255
Signature Algorithm: sha256WithRSAEncryption
4c:4b:69:60:66:9a:a4:50:f4:ab:2c:e5:eb:04:a7:61:b8:04:
08:68:62:98:da:38:8f:17:82:bd:48:03:36:f5:2f:3f:5c:60:
61:86:6e:8e:68:e8:cf:14:f4:98:1a:43:45:b1:6d:65:26:d4:
f8:80:6b:5d:1e:9f:f0:bf:ba:c3:42:4c:4a:c9:00:9e:08:3c:
31:5b:5d:18:aa:3a:80:bd:04:8c:8f:fc:13:ed:91:7f:7c:1a:
fc:a1:14:b8:30:92:1d:2b:83:b1:ea:03:e3:8e:1d:c7:ed:91:
14:77:48:29:66:54:ab:84:73:23:9f:83:47:ca:b2:f9:79:5a:
c6:83:f6:2b:4a:98:21:2f:33:be:11:16:25:88:59:98:3b:7c:
4e:02:04:bc:3e:5d:2d:45:68:d7:4f:17:16:67:1e:b4:a7:e7:
f6:30:1d:d2:0e:4a:76:a5:c8:84:b0:1f:2f:9f:fc:2b:89:6f:
ec:c6:e2:eb:41:8e:cb:a4:fe:35:c5:ef:6e:7a:78:06:82:17:
0d:c4:dd:64:04:36:69:27:ac:1d:37:40:c4:49:38:4f:bf:d7:
e4:19:d2:70:c3:14:04:b1:92:0a:9b:0b:25:4a:b5:9c:0b:a9:
57:8f:ed:e6:38:51:94:47:f0:72:95:c6:26:62:8d:a0:29:80:
7f:80:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:18 2026 by rpki-client