Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/C-j7DHdcPeX_wLaiQQCXx01sXKk.roa
File: C-j7DHdcPeX_wLaiQQCXx01sXKk.roa (raw, json)
Hash identifier: lDDZElowGuCMiUnBVx2Enp74tiPB1NbesCh32sGC/h0=
Subject key identifier: 0B:E8:FB:0C:77:5C:3D:E5:FF:C0:B6:A2:41:00:97:C7:4D:6C:5C:A9
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019C522E50F6EE43C1596B72189C1B78AC2C
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/C-j7DHdcPeX_wLaiQQCXx01sXKk.roa
Signing time: Thu 12 Feb 2026 14:08:12 +0000
ROA not before: Thu 12 Feb 2026 14:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201188
IP address blocks: 45.151.184.0/24 maxlen: 24
45.151.185.0/24 maxlen: 24
45.151.186.0/24 maxlen: 24
45.151.187.0/24 maxlen: 24
2a0f:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:2e:50:f6:ee:43:c1:59:6b:72:18:9c:1b:78:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Feb 12 14:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be8fb0c775c3de5ffc0b6a2410097c74d6c5ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:01:a3:7f:30:5f:24:58:67:6e:7a:00:97:fe:
2f:33:5e:e7:33:7e:b5:03:d6:be:b7:97:cb:ef:a9:
60:a9:43:a4:cf:1f:bc:60:1a:f5:8b:62:f7:29:e2:
d1:b9:53:0b:ec:a7:cc:9b:a7:8c:66:dd:a9:99:4d:
41:ed:d5:a9:77:a9:df:3b:51:45:05:92:14:70:c4:
32:e5:d3:1f:44:6e:0f:da:17:32:e1:c0:0b:f1:b3:
3a:61:01:ab:be:80:3c:fa:27:8f:52:cd:91:a9:64:
9d:5b:ff:a8:17:54:07:4f:f7:45:83:29:39:1f:5a:
94:ab:bc:f2:23:ab:5e:a4:03:08:d3:20:da:3f:47:
68:70:04:be:0b:ae:91:0a:19:28:50:56:05:26:01:
73:b8:d7:f1:c8:13:53:bf:fe:82:76:75:f1:02:aa:
a4:1e:7c:cf:59:69:b3:78:70:79:8d:2b:50:67:28:
20:e0:8c:fb:e3:61:7a:ba:b3:4f:a8:bf:d1:e9:de:
41:80:7d:a4:4a:b4:bc:35:88:39:fa:fe:bc:57:8d:
89:c1:e1:0d:67:5a:6a:06:64:15:9f:b8:d4:9c:b0:
d4:2a:35:80:67:a1:3a:ec:0d:86:93:e8:48:36:c6:
3b:36:f5:6c:e5:93:b6:bb:90:ad:b4:2d:ca:64:f4:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:FB:0C:77:5C:3D:E5:FF:C0:B6:A2:41:00:97:C7:4D:6C:5C:A9
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/C-j7DHdcPeX_wLaiQQCXx01sXKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.184.0/22
IPv6:
2a0f:3500::/29
Signature Algorithm: sha256WithRSAEncryption
75:ba:74:64:f2:f4:aa:40:58:8d:35:8f:9d:d2:30:45:ac:6c:
46:1c:50:4a:e4:7d:f5:a0:fa:94:79:9a:ff:b0:e3:90:00:02:
a2:9e:27:ff:4b:af:ac:44:b2:d5:f4:42:8c:63:09:00:bd:1e:
01:2b:ca:0f:dc:25:fa:16:68:99:1e:45:55:3c:55:26:00:86:
84:dc:c2:c5:49:fc:49:da:f8:2c:0a:ae:f6:51:cd:b6:c4:42:
86:89:ee:50:c8:77:eb:5e:58:81:ad:b1:c6:9c:dd:21:83:ba:
dc:d1:6a:75:3f:da:30:98:91:5f:03:ae:b8:7f:c3:b5:c8:74:
0a:8b:5c:4e:b9:8a:7c:20:d8:46:30:63:3a:cc:d2:62:32:75:
c3:72:fc:0f:5b:64:64:6f:69:d6:96:d9:9d:6b:d9:e2:a3:d2:
3b:e7:5a:a9:e3:9e:7a:49:9d:60:03:f0:6f:2b:3e:fe:6e:a7:
ea:4d:1f:79:50:5b:64:f1:ef:4f:bc:30:aa:b8:c0:e9:87:c5:
f3:78:36:24:66:fb:af:8a:60:c9:ba:51:06:58:79:39:6f:44:
b2:da:26:0f:7a:1f:69:e8:c8:06:ba:82:cc:4f:30:38:22:48:
ec:f7:ad:b6:87:54:02:dc:d0:51:a6:83:02:d2:63:33:8d:1b:
8e:a8:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:44 2026 by rpki-client