Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/dNXYaX82NX51pSFvpQpCqsG2lPo.roa
File: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (raw, json)
Hash identifier: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=
Subject key identifier: 74:D5:D8:69:7F:36:35:7E:75:A5:21:6F:A5:0A:42:AA:C1:B6:94:FA
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019C66C6D6188024A5FDEF39AA3055D99B5C
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/dNXYaX82NX51pSFvpQpCqsG2lPo.roa
Signing time: Mon 16 Feb 2026 14:07:12 +0000
ROA not before: Mon 16 Feb 2026 14:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215305
IP address blocks: 45.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:c6:d6:18:80:24:a5:fd:ef:39:aa:30:55:d9:9b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Feb 16 14:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74d5d8697f36357e75a5216fa50a42aac1b694fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:dd:78:cb:12:16:c9:00:0a:cf:b3:61:14:
e6:51:77:5e:83:51:14:da:ec:c9:ff:13:9b:87:10:
f3:69:ba:9e:9c:1b:cb:82:ee:40:2d:11:37:56:a6:
8c:65:a9:c9:27:b9:d8:6d:3e:f1:39:f0:e4:33:a6:
bd:82:8e:0e:9e:e3:68:04:97:80:6d:78:c3:fa:4b:
83:30:ce:ac:7a:fb:2a:01:d4:54:3f:66:03:f2:6b:
ae:69:68:e2:2f:9e:21:e6:ec:d8:c4:fc:ff:ca:96:
da:66:58:a4:ed:7c:a7:d2:1d:16:a4:cc:e1:28:6b:
8a:b0:b0:bd:6d:a6:dd:19:90:ef:36:05:ca:5e:9f:
cb:a0:d7:b9:fa:23:37:33:59:13:32:ad:3b:3d:1c:
cb:a0:d2:8c:33:dd:43:8c:1f:d1:51:0d:d1:70:25:
34:34:e8:ca:6b:78:99:81:b2:97:9d:83:67:c3:e9:
68:61:a5:dd:bf:22:bd:95:9c:7f:43:b7:97:4f:47:
a1:95:50:8d:83:bd:44:37:af:14:a9:19:75:22:be:
1f:81:6a:f4:e3:b9:ab:86:54:aa:a9:f4:e8:db:76:
88:6c:04:d2:10:de:63:44:0a:72:f3:c8:78:97:23:
ee:e3:16:02:da:9a:98:85:af:91:67:ad:72:0a:8e:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:D8:69:7F:36:35:7E:75:A5:21:6F:A5:0A:42:AA:C1:B6:94:FA
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/dNXYaX82NX51pSFvpQpCqsG2lPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a1:ea:80:b5:9e:1d:b6:bc:27:a7:50:52:c0:f8:32:cb:23:
fd:2f:d7:66:f0:27:58:64:8a:00:95:2e:be:87:83:62:f6:96:
7e:aa:88:96:66:a7:4e:8a:8f:76:f1:02:6e:ed:d9:9c:50:14:
52:9f:a8:5c:ca:8e:46:a1:f0:ba:9e:99:ff:45:21:72:46:a6:
1e:c5:4e:53:11:b5:b9:39:d3:d8:c0:25:ff:2e:bf:04:66:16:
5c:f5:98:58:8c:ac:bc:55:3d:80:a1:84:4c:ff:64:ae:5d:e9:
ce:e6:b3:aa:b2:f6:94:ac:5c:f9:b2:66:20:27:69:61:a9:2b:
84:9f:7b:40:48:f9:f2:41:7e:a0:d3:c9:58:8a:51:9f:13:10:
c1:4a:e8:1b:cc:86:6d:7e:2a:62:6d:67:db:16:3d:c3:23:cf:
ef:0f:23:77:0d:48:3c:98:b0:7e:38:6e:6e:3f:3a:88:16:e8:
7d:48:db:56:44:25:2e:8e:6e:34:bc:68:97:90:0f:92:10:36:
79:79:0f:60:a0:aa:ef:03:9a:0f:e4:2c:05:fe:44:10:0c:51:
b8:ac:84:99:ff:69:65:18:f8:9f:99:5d:fe:8b:bb:f0:84:a7:
00:5b:bd:a3:87:6b:7e:41:52:af:15:de:d0:80:06:43:21:08:
09:d7:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:51 2026 by rpki-client