Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/V0My9THlBc0YLlGKU0lk51nLT9Q.roa
File: V0My9THlBc0YLlGKU0lk51nLT9Q.roa (raw, json)
Hash identifier: jnanOnE2E3WLlm+hKnnts1NGwhP+hFoapes6AYG4EzY=
Subject key identifier: 57:43:32:F5:31:E5:05:CD:18:2E:51:8A:53:49:64:E7:59:CB:4F:D4
Certificate issuer: /CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Certificate serial: 01A0A57E84E4D5ACC0F204E57AC7F44B8839
Authority key identifier: 70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/V0My9THlBc0YLlGKU0lk51nLT9Q.roa
Signing time: Tue 15 Sep 2026 14:35:27 +0000
ROA not before: Tue 15 Sep 2026 14:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 45.157.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:7e:84:e4:d5:ac:c0:f2:04:e5:7a:c7:f4:4b:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7061cb29bdcd77387183ad239fbed7dd0c070c25
Validity
Not Before: Sep 15 14:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=574332f531e505cd182e518a534964e759cb4fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2d:1b:10:ef:93:57:5d:71:11:bd:c1:4d:f9:
ac:da:56:40:98:63:d2:9c:da:01:68:71:30:59:5f:
ff:d0:8f:c7:e2:d1:51:07:99:ca:b2:77:ef:90:b1:
08:76:95:8a:1f:38:ac:1b:47:51:72:51:5c:e5:3c:
4c:6d:33:ab:df:7f:f7:7a:43:83:39:53:c3:cd:ac:
98:00:ee:2a:f4:d4:e2:a7:12:ab:21:9f:7f:b5:e0:
98:96:e9:fe:cb:ff:4d:56:d8:45:dd:ff:e5:23:02:
d4:a7:ca:16:74:8a:ce:6e:cb:e0:66:10:c5:5a:3f:
cd:7a:da:04:8a:b1:eb:1e:ad:54:4f:5c:dc:ef:c1:
bc:84:4f:43:81:75:e2:6b:66:6d:4d:a1:ee:1a:6c:
5a:57:5d:4a:d2:a4:85:63:16:3e:13:44:52:c7:b3:
d1:7f:27:6e:3c:66:ac:a9:3a:27:68:f8:48:45:93:
72:4a:b6:7c:64:54:ef:62:a3:58:27:37:44:74:41:
31:de:93:7f:e3:5e:b6:f0:db:3d:80:b5:66:cc:c2:
81:81:d5:28:b7:c9:89:f9:8e:3f:e2:87:2e:42:e2:
86:f7:d1:82:eb:a1:c1:30:2c:e3:ed:96:86:57:23:
0e:48:2f:c9:c6:86:2f:21:42:65:c0:0c:8d:16:4d:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:32:F5:31:E5:05:CD:18:2E:51:8A:53:49:64:E7:59:CB:4F:D4
X509v3 Authority Key Identifier:
keyid:70:61:CB:29:BD:CD:77:38:71:83:AD:23:9F:BE:D7:DD:0C:07:0C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGHLKb3Ndzhxg60jn77X3QwHDCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/V0My9THlBc0YLlGKU0lk51nLT9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cf6f84-de39-4737-ac0d-e6febed1f5b2/1/cGHLKb3Ndzhxg60jn77X3QwHDCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.141.0/24
Signature Algorithm: sha256WithRSAEncryption
85:45:8f:47:00:6d:8a:b0:f0:90:ae:83:8e:d5:52:fe:78:50:
b2:7a:18:28:2d:13:2b:d5:24:ee:f4:11:12:09:c1:39:23:19:
06:e7:5a:8d:3b:9d:fd:50:21:c8:df:7d:d1:54:18:86:05:d9:
58:68:99:64:91:86:aa:f2:2f:a7:2f:8c:fb:24:2f:90:c3:b4:
04:26:51:a7:d6:4a:45:2a:a9:37:04:e7:a3:61:9b:82:60:17:
38:39:64:04:8d:32:1a:2b:9f:b6:15:35:9b:e0:b5:21:e0:b6:
50:e0:57:6e:bc:64:e3:3e:25:b0:51:88:7d:7a:e2:12:6d:d3:
f4:af:20:77:ff:c0:f7:6e:82:ad:53:2e:67:05:b8:0e:37:fc:
de:1a:26:82:f7:37:c8:de:64:75:ee:5a:7f:68:87:7a:5f:48:
86:be:87:78:a4:1f:ae:49:96:2d:0f:1d:eb:e3:eb:ac:12:e4:
f7:f0:f5:e9:1d:f3:d3:7b:18:9b:d6:13:59:41:b0:05:3b:92:
54:ec:9f:7d:cd:6f:40:6a:c3:29:61:87:f7:f1:2c:cd:dd:01:
b7:67:75:8b:dc:d5:94:8e:e5:10:23:a2:6a:29:1e:2f:aa:d7:
29:3b:cd:97:6d:09:00:07:72:2e:d2:b1:3f:fb:ff:22:2a:00:
4e:5f:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:44 2026 by rpki-client