Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/ixoSA4vv93EMzPFXEdYkZkFXEuM.roa
File: ixoSA4vv93EMzPFXEdYkZkFXEuM.roa (raw, json)
Hash identifier: LpzORNFMoHrs7UHue0dvdeBk04SczLGtJqFp6wF9Yy4=
Subject key identifier: 8B:1A:12:03:8B:EF:F7:71:0C:CC:F1:57:11:D6:24:66:41:57:12:E3
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019EA81949E527598D933F335DB133B34593
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/ixoSA4vv93EMzPFXEdYkZkFXEuM.roa
Signing time: Mon 08 Jun 2026 16:38:10 +0000
ROA not before: Mon 08 Jun 2026 16:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 45.151.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:19:49:e5:27:59:8d:93:3f:33:5d:b1:33:b3:45:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Jun 8 16:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b1a12038beff7710cccf15711d62466415712e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:d0:f6:bf:be:0c:be:85:0f:d5:2c:ef:65:
42:9f:6d:de:eb:29:6e:32:84:e3:2f:09:18:c6:ce:
1a:3f:a7:c2:5f:3b:8e:94:8f:57:e5:7f:6f:4e:08:
94:9c:4c:0f:c2:1a:d0:42:1f:a8:db:e1:e5:26:4a:
f6:ea:a9:c2:6f:14:dc:e1:c0:f8:9b:90:ba:72:37:
dd:81:fe:f5:38:a1:2e:7e:b9:4b:41:bb:f4:eb:06:
60:16:62:40:33:49:89:1e:33:52:eb:f6:1d:e9:8c:
fc:67:fa:9b:fa:9f:7f:0d:d2:e0:89:36:0b:11:16:
29:0f:d8:fc:3f:df:1d:0b:8a:34:15:93:86:be:6b:
90:de:13:a6:f5:69:45:dc:d0:7d:ea:cb:22:3a:46:
f3:98:ed:f8:9b:30:7c:b7:2d:db:e4:49:65:96:7a:
5a:22:d9:b6:d6:bd:6c:e0:c2:0c:f0:11:f1:04:83:
6e:70:5b:f4:ce:84:98:92:6c:df:95:e7:a8:e0:9d:
9c:f5:a2:a3:b0:04:d6:e7:e7:c0:f6:7f:07:35:16:
f0:4d:0c:97:73:3c:28:80:d1:50:a7:a7:d5:ca:96:
1f:0d:9a:dd:3b:9b:2f:3e:57:9e:26:68:68:da:be:
f0:ed:e6:1e:da:63:f4:fe:b9:b5:63:e4:a5:96:bc:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:12:03:8B:EF:F7:71:0C:CC:F1:57:11:D6:24:66:41:57:12:E3
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/ixoSA4vv93EMzPFXEdYkZkFXEuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d7:59:8d:7c:79:b7:15:dd:f9:b1:88:9e:58:22:b4:2b:0f:
9a:64:83:89:b6:dc:6f:d6:03:d5:b9:5e:fc:fc:55:4e:8f:8c:
11:6d:da:31:32:ea:60:e4:28:d0:27:32:5b:7f:65:f1:03:71:
58:b6:4f:08:3a:31:32:38:ae:6a:2b:a2:0d:5a:be:97:43:c8:
de:b8:25:b4:25:0e:da:df:9e:1a:8b:86:0f:8d:11:07:29:94:
ad:8b:a1:c9:7e:e8:58:e3:1e:c1:c2:28:0e:4c:ca:fa:31:49:
fb:b4:53:13:38:19:9a:bf:72:93:1e:12:8a:4c:a0:d3:56:ee:
0d:a0:e7:dc:85:38:68:25:4a:19:b4:c5:e9:96:e9:07:24:31:
3a:8e:07:a8:03:0d:22:86:b5:af:bf:84:b2:bc:d6:19:13:82:
10:87:17:62:d0:1d:00:2a:eb:8a:07:7a:c5:e7:92:fc:01:86:
2b:16:69:04:9f:50:37:49:33:43:bf:8f:d1:b6:d3:ed:92:5e:
ea:01:0c:e2:88:d8:5b:53:6e:a3:ff:76:3d:a7:91:d7:1d:69:
b5:ec:bf:59:8a:be:66:2b:0c:ba:f3:7e:05:83:e4:3b:0d:57:
11:01:69:9c:0e:59:f0:ce:82:ea:69:6c:c6:ae:e6:b1:98:5a:
94:a5:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:51 2026 by rpki-client