Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/syz1xj0e_cF00dc3z_Anvk5N0Dc.roa
File: syz1xj0e_cF00dc3z_Anvk5N0Dc.roa (raw, json)
Hash identifier: PoCrEpEZj7Hn4ph2mA6eFZcZllnIXsaLNLRvbbuj3HE=
Subject key identifier: B3:2C:F5:C6:3D:1E:FD:C1:74:D1:D7:37:CF:F0:27:BE:4E:4D:D0:37
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01A0A13876B676202CB8268216882EAAAB0D
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/syz1xj0e_cF00dc3z_Anvk5N0Dc.roa
Signing time: Mon 14 Sep 2026 18:40:27 +0000
ROA not before: Mon 14 Sep 2026 18:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 45.15.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:38:76:b6:76:20:2c:b8:26:82:16:88:2e:aa:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Sep 14 18:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32cf5c63d1efdc174d1d737cff027be4e4dd037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:c0:c7:7b:00:61:b8:f2:c1:53:e8:82:81:
22:5d:31:98:fc:a6:bb:6a:66:97:f0:09:f2:d4:3d:
85:44:7c:9b:25:a0:b5:1a:80:39:d1:3f:97:b0:74:
6a:9f:7a:57:e4:27:0e:86:49:bd:2c:7f:7e:95:30:
ed:52:19:a3:ed:36:4f:3a:f1:08:ef:0b:4b:ab:27:
de:8d:9e:f0:d8:3c:12:ee:62:a4:08:91:22:e4:a9:
8f:df:8b:dd:41:f2:12:56:4a:c0:48:eb:45:17:ad:
59:30:45:42:e0:1d:87:27:cb:5b:a8:b2:76:f9:91:
2f:43:75:29:11:c3:67:5b:eb:b2:9e:77:1e:43:7d:
06:c3:6e:61:c3:37:b0:32:91:f6:5c:98:d3:31:db:
17:3d:44:12:f7:1f:16:fd:27:a6:97:3d:b1:d5:dd:
ea:a6:70:4e:9e:77:cc:09:7c:59:10:fc:e2:ea:bd:
14:52:72:08:b6:9a:a7:a9:49:8e:00:3e:f1:03:97:
3c:c1:3a:e8:b6:48:26:7b:64:b0:4e:e4:ec:a4:e0:
d3:67:ad:d7:37:60:08:03:da:e2:60:6d:9b:bf:4a:
ca:73:2b:c4:24:a5:cb:6a:a9:3c:2d:86:34:ae:4d:
52:89:b9:b6:34:5c:1b:53:10:29:db:ce:3c:ac:8a:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:F5:C6:3D:1E:FD:C1:74:D1:D7:37:CF:F0:27:BE:4E:4D:D0:37
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/syz1xj0e_cF00dc3z_Anvk5N0Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.18.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0a:5f:10:b3:6b:1d:70:63:f8:e1:c2:49:86:8b:36:28:4d:
6d:17:c0:00:a8:e4:07:e4:50:5f:7a:b7:ae:f5:6a:2c:3c:72:
ef:61:0f:63:8a:0b:34:e5:ed:4d:21:b2:f3:22:62:71:93:ba:
45:ed:2f:bb:3a:30:21:f4:e6:56:d3:38:2e:11:a5:30:8b:ca:
0b:cb:0b:33:03:2b:ac:68:38:68:f5:e1:1b:41:f0:86:f9:5b:
ef:3d:54:b9:7a:f7:4f:6f:a9:3f:f4:64:2c:30:17:df:15:41:
a1:09:da:fb:ae:b4:47:86:13:29:ab:a9:5c:bd:92:03:6f:1c:
87:9b:84:32:2b:2f:4f:23:d2:18:dd:b2:8c:2b:9c:8c:b3:ac:
a4:09:0e:44:21:b5:ca:c1:d8:9d:a5:73:45:e8:9f:35:da:b7:
51:c5:f2:cb:bf:6a:82:56:0f:ec:b4:25:1c:dd:c2:9e:92:e4:
f8:62:70:bf:5b:e3:9a:57:58:66:4d:a1:7c:21:47:4a:04:83:
8b:13:04:d6:af:67:7b:df:64:37:b2:33:bb:b7:8a:9c:8b:6a:
c6:df:e6:bb:2f:af:cd:d5:aa:76:54:eb:03:fd:bb:a6:bb:15:
46:25:ec:ea:1b:fa:9a:70:24:89:ed:f9:52:b5:62:be:28:a8:
a1:52:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:21:53 2026 by rpki-client