Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ijz2ula6arv_PRu5A8Bvm37fDKg.roa
File: ijz2ula6arv_PRu5A8Bvm37fDKg.roa (raw, json)
Hash identifier: KrYLa0v0rwPYbs7ITeMeFfEQLGYsz8yu09SxNr1z0ao=
Subject key identifier: 8A:3C:F6:BA:56:BA:6A:BB:FF:3D:1B:B9:03:C0:6F:9B:7E:DF:0C:A8
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019E35E196106A1A4219243A31AD55B5A256
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ijz2ula6arv_PRu5A8Bvm37fDKg.roa
Signing time: Sun 17 May 2026 12:20:36 +0000
ROA not before: Sun 17 May 2026 12:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 45.145.226.0/24 maxlen: 24
92.119.167.0/24 maxlen: 24
194.15.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:e1:96:10:6a:1a:42:19:24:3a:31:ad:55:b5:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: May 17 12:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a3cf6ba56ba6abbff3d1bb903c06f9b7edf0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:5e:d7:df:6d:c0:61:6d:b1:58:00:34:d5:
38:28:ee:73:eb:77:2f:37:4f:7a:e9:40:76:a4:1b:
9c:c0:5c:0c:9f:ab:c1:0b:b9:04:5c:27:75:36:14:
11:8e:80:ed:fd:fb:98:64:17:5c:2d:74:aa:b1:d6:
51:4b:78:83:c9:fa:b9:68:ef:d5:5f:0a:eb:3b:3b:
b6:95:45:52:2a:ce:a0:f7:54:9f:9f:2a:49:e5:74:
a5:3a:fe:f4:0c:84:95:76:53:22:9f:9a:d7:6a:2a:
92:df:c5:5e:8f:6f:62:68:15:a6:a7:c7:41:ae:18:
c1:be:ef:62:72:f2:81:cb:76:18:4d:e5:c3:0e:41:
55:3f:26:84:b0:1d:fd:5a:db:a1:23:34:ae:92:61:
10:46:e3:4d:d7:88:c0:6f:7d:cf:00:1d:4c:0d:f8:
56:4f:e5:bd:27:05:3c:44:20:5d:84:73:33:90:89:
63:e0:da:0e:e5:d4:cf:63:74:e3:0e:00:5d:24:ea:
a6:8d:3c:99:e9:00:f2:a8:9c:3b:3c:7c:ed:5d:08:
86:31:92:71:f3:0c:68:3c:ac:4b:2c:68:39:26:ea:
a6:f5:b8:b2:cb:2b:09:61:be:8b:3e:a8:b8:da:44:
3b:3d:f7:ee:64:07:64:fa:11:18:aa:c8:bd:56:ff:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:F6:BA:56:BA:6A:BB:FF:3D:1B:B9:03:C0:6F:9B:7E:DF:0C:A8
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ijz2ula6arv_PRu5A8Bvm37fDKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.226.0/24
92.119.167.0/24
194.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2a:ab:d5:c9:2f:3e:dc:0f:0a:7a:a7:8d:cf:43:b3:eb:09:
64:72:21:4e:fd:b1:88:6e:f7:39:3b:4e:a0:ef:40:22:ed:b4:
b1:17:10:ab:62:7b:10:76:8b:cf:51:ad:93:04:bd:85:42:4b:
88:0d:db:f1:55:ad:09:44:f5:9e:d2:59:6c:e7:e4:59:14:78:
fb:f6:ce:cf:5f:03:81:43:a9:15:91:6e:a5:2a:6e:85:0c:3d:
b5:a3:41:25:9f:eb:71:3c:2e:d6:d7:79:f8:a5:08:2a:97:d2:
92:25:e5:17:1e:bd:0c:8a:3f:53:eb:90:e2:1a:6c:f3:a0:2f:
84:27:0c:8f:cd:7c:d5:ce:b1:13:f6:48:02:0c:dc:8b:ed:83:
2e:21:29:a1:1c:12:73:51:fe:ca:e5:92:02:93:ca:d3:c8:de:
6f:e0:d1:02:fd:72:eb:61:c2:d0:2d:26:65:67:a6:83:6e:1f:
c7:a3:7a:7d:68:71:d6:11:55:ae:15:60:cd:40:a7:48:5c:f5:
ca:f9:c1:81:78:e2:fb:26:ba:e2:95:52:cf:25:fa:e1:40:8b:
54:1a:06:4c:03:b4:9f:5d:b6:95:98:12:56:d8:3d:56:9e:e3:
59:38:a6:6a:ef:36:4c:15:4f:5a:cc:6e:e0:ae:bf:47:1f:61:
3d:b8:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:25 2026 by rpki-client