Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa
File: Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa (raw, json)
Hash identifier: 0y2jpGlKXD4RZy+O7hfV7TOL/ignRhvtpZ28boX0Mgc=
Subject key identifier: 06:B8:79:A8:02:4F:03:D1:4C:38:96:53:7A:DC:68:E6:0D:D7:75:C8
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A0BE013CAB0669A09FCA933DBDE849E051
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa
Signing time: Sun 20 Sep 2026 08:49:07 +0000
ROA not before: Sun 20 Sep 2026 08:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 45.95.226.0/24 maxlen: 24
45.140.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:01:3c:ab:06:69:a0:9f:ca:93:3d:bd:e8:49:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 20 08:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06b879a8024f03d14c3896537adc68e60dd775c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:79:28:11:4f:3f:2d:6e:e6:9b:d1:51:63:
fd:86:2b:08:80:5c:1a:c2:07:87:55:36:7a:e8:3c:
5d:69:95:d6:06:8e:16:23:b7:ed:41:e4:f1:c6:72:
ef:ac:11:19:37:c9:bf:96:2c:68:8a:52:9b:89:e4:
41:53:7c:78:ef:2c:fa:28:08:ab:83:1a:61:36:7f:
86:60:f3:a2:4d:58:c2:17:02:f1:40:5d:f3:8a:de:
06:49:a8:ac:9f:1f:09:b8:9c:ea:b6:51:b4:47:d3:
7d:18:8d:53:fc:4f:3e:74:f4:b4:74:e1:8d:e7:23:
94:46:13:1a:56:cf:91:8b:46:05:8e:f7:00:a1:34:
f2:e6:b9:68:21:f5:22:9a:bc:1d:d8:ec:04:b4:c9:
4f:b2:a7:96:4c:4d:15:35:ae:38:23:90:71:35:f9:
8d:c5:ac:90:8e:8b:44:a1:91:ba:5a:a9:c2:f9:8d:
80:ac:97:a9:4e:a8:b8:e6:c6:59:f5:c8:74:73:b2:
64:cd:41:e3:04:2f:e3:7f:fd:50:65:3c:b5:92:2f:
c0:13:52:e6:25:b1:57:ba:c7:a6:7c:6f:97:0f:79:
17:f5:75:c5:74:7e:82:0c:fb:d3:5d:7c:bd:eb:50:
70:df:af:3a:25:42:c5:2d:47:0d:1d:0d:9d:e5:5d:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:79:A8:02:4F:03:D1:4C:38:96:53:7A:DC:68:E6:0D:D7:75:C8
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
45.140.58.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9e:2f:27:0e:ff:c9:ed:6e:08:a9:e6:3d:3b:cf:3b:92:47:
ed:20:37:bd:12:28:c0:ef:f6:ff:fe:f8:35:d2:e8:06:03:28:
fc:dd:a0:b2:08:99:90:43:91:ca:d5:a5:7d:32:aa:64:65:ca:
a6:39:2b:56:dc:8a:0a:64:12:0d:99:cd:fa:df:0d:8b:1f:ea:
77:f7:80:07:f9:a3:90:bf:e8:32:b1:cd:5d:8b:6c:40:03:1f:
b5:d5:b7:0f:f5:e1:7d:61:02:0e:d2:0f:81:6d:3e:a3:53:27:
80:34:b6:d2:7b:9d:37:dc:fc:d6:85:0b:04:a7:5c:c8:3c:ed:
74:c7:f8:ec:32:55:da:5b:11:0c:45:ad:e7:b2:51:2f:64:51:
63:ca:82:6d:f7:4c:c6:7e:7d:2c:a1:a8:41:fa:7f:1f:5e:eb:
cd:f6:8a:36:93:03:98:02:66:71:15:a5:ab:4a:db:f5:0f:6b:
4f:3b:ad:e7:7c:f0:35:6a:7f:6d:e4:95:12:21:b4:0e:40:0d:
00:3a:de:a5:50:1c:e4:16:89:02:ea:a6:1d:14:e6:ba:73:38:
c2:c4:d6:03:56:96:50:d9:1f:a1:e8:4a:7f:7a:ac:a6:4a:2f:
71:73:fd:e7:b9:d0:60:3c:9e:69:7f:5b:63:6f:f6:1b:db:e8:
c2:e9:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:59:30 2026 by rpki-client