Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa
File: CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa (raw, json)
Hash identifier: 1rLmMiDPBYELVghvKsD5T99v1Kom/oBVCDlNcbfcIwE=
Subject key identifier: 0A:61:79:99:21:17:A0:C0:B5:3B:2F:01:9A:65:4E:27:38:93:19:BB
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01A088AC48C23BD39F162DF797A05D0615EB
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa
Signing time: Thu 10 Sep 2026 00:16:27 +0000
ROA not before: Thu 10 Sep 2026 00:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.158.60.0/23 maxlen: 24
45.158.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:ac:48:c2:3b:d3:9f:16:2d:f7:97:a0:5d:06:15:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Sep 10 00:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a6179992117a0c0b53b2f019a654e27389319bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:5d:0d:0d:5b:e7:6b:91:99:4c:81:c5:5f:
b8:96:15:9e:6f:1a:7a:0e:8e:51:ee:cf:ec:19:c4:
82:fd:7c:0b:f7:ee:09:7e:0a:9d:d7:f9:03:bf:d0:
48:ed:67:03:60:47:40:8e:ed:2e:02:b0:5d:6f:b5:
6e:12:d9:12:ed:8f:b8:25:d9:63:bb:bd:35:91:92:
15:be:ce:d0:88:15:3b:a1:44:47:41:3a:54:9d:22:
8a:8b:af:b4:9a:9a:c3:bc:b5:f1:ec:ad:2d:2b:c2:
f6:88:55:f6:a0:53:6e:9d:b5:05:93:68:68:4c:77:
5c:a0:b1:b4:16:29:4c:45:4e:da:dc:e8:cc:ee:3a:
6f:9b:b4:48:5a:6b:b3:70:72:7c:d0:e8:97:52:40:
d3:aa:05:6b:d2:95:5c:22:a1:7b:26:cf:af:ee:48:
3e:d1:50:52:de:e3:ae:64:ce:28:b5:ce:b2:b8:9e:
a7:00:b6:f9:2f:44:9a:00:a3:19:67:fc:5e:a3:ed:
8e:11:5f:6e:87:55:b3:90:69:bb:28:e0:76:88:7d:
5c:e9:af:2a:bd:67:7b:f3:2a:3a:0b:68:ec:c1:b4:
ca:e9:f0:f0:a2:94:05:77:10:03:45:83:ba:13:8e:
0c:6e:03:f7:fe:38:a0:eb:b3:5d:2d:0e:76:33:28:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:79:99:21:17:A0:C0:B5:3B:2F:01:9A:65:4E:27:38:93:19:BB
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
57:3d:38:3d:5b:8c:69:bc:a0:6e:68:67:26:74:93:b3:51:59:
d9:13:9e:e9:a4:27:61:5b:70:b1:01:5e:55:72:cd:c3:df:60:
2a:a4:c5:8f:ec:4c:13:c1:85:ba:42:7f:bc:b2:4a:a4:f4:65:
67:97:7c:72:4e:1c:28:d4:24:cb:94:b3:9f:04:d4:76:9b:a7:
6d:95:1b:8f:d3:cf:54:4f:f8:c4:67:f5:48:1e:6d:b9:b3:96:
18:2f:cd:14:cc:f5:d0:35:f9:7a:a3:0e:8d:86:0a:39:2a:35:
14:80:f7:e9:c4:cb:50:af:65:1d:9e:9d:04:ba:16:81:24:05:
6a:d1:c8:7a:36:12:71:ea:dd:0e:66:51:33:82:a4:37:d6:9d:
4b:97:ec:aa:2f:ee:7a:08:ff:fa:7a:0e:7c:7c:f3:cc:6c:24:
4b:56:6d:98:50:cb:82:9f:7e:bd:00:75:20:8f:48:0d:2b:f0:
87:a5:41:0c:16:6f:9b:47:98:6e:c6:b9:d6:e7:6b:99:11:10:
fb:a2:8b:c0:2e:61:6b:38:3e:c1:f4:4f:de:61:9b:5d:33:97:
a6:01:21:37:28:5d:da:4d:e6:e9:f8:d9:48:bc:3e:09:3b:90:
8a:65:de:89:8e:8b:08:a0:8e:2a:30:f5:f4:79:25:00:c6:8d:
c5:11:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:04:07 2026 by rpki-client