Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0U7oqETcawj9LXf2YZZnfUlJsEQ.roa
File: 0U7oqETcawj9LXf2YZZnfUlJsEQ.roa (raw, json)
Hash identifier: E/gRY+SMSvbqz6hrrhoxw426vXzWXjo7c+jwkC4ILOE=
Subject key identifier: D1:4E:E8:A8:44:DC:6B:08:FD:2D:77:F6:61:96:67:7D:49:49:B0:44
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A03DE70C4142E036A791F2A7B4924C5D93
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0U7oqETcawj9LXf2YZZnfUlJsEQ.roa
Signing time: Wed 26 Aug 2026 11:49:07 +0000
ROA not before: Wed 26 Aug 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205220
IP address blocks: 160.19.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:e7:0c:41:42:e0:36:a7:91:f2:a7:b4:92:4c:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 26 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14ee8a844dc6b08fd2d77f66196677d4949b044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:c1:4c:77:a3:ca:44:34:86:6e:df:11:aa:
42:d5:ef:84:b2:c2:d8:5c:cc:71:52:7c:90:a4:35:
63:75:de:64:f6:93:3f:3e:14:64:10:58:5b:37:44:
4c:09:e7:4e:e6:99:75:3a:81:f5:49:91:d1:90:80:
24:1e:ec:91:39:b0:eb:7d:4b:13:7b:11:39:9f:0b:
e1:99:ef:6e:3a:e6:86:02:e6:96:d0:68:4a:4a:d9:
c5:e3:22:89:74:12:2b:8b:ea:b6:31:7d:b3:fc:d3:
29:f7:9f:b6:ba:02:31:7d:04:ee:1e:da:43:12:f9:
3f:e6:35:6d:98:a5:ab:2a:6a:08:eb:fa:65:82:81:
c2:5a:23:79:61:f0:70:37:3a:6e:08:cc:9d:c9:bd:
f0:b9:3c:ca:f4:34:a3:cb:71:74:3e:88:45:9d:77:
a8:1a:8f:3a:6d:15:65:79:e1:91:42:f4:a5:ae:c2:
a3:90:59:8c:5b:ae:2e:3c:32:2a:df:36:bc:d7:a6:
fe:f6:27:42:64:a2:60:41:1a:d3:31:62:cf:b2:92:
ab:3f:6e:af:85:6c:67:e7:d4:35:25:6c:25:28:11:
91:ce:18:d9:eb:de:bb:bd:b0:fe:9d:77:3f:56:84:
d0:20:cc:63:9e:8f:7d:2a:d2:ff:b1:4b:ac:ec:68:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:E8:A8:44:DC:6B:08:FD:2D:77:F6:61:96:67:7D:49:49:B0:44
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0U7oqETcawj9LXf2YZZnfUlJsEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.95.0/24
Signature Algorithm: sha256WithRSAEncryption
05:75:70:dd:76:0d:b2:a2:ca:9e:ac:5f:95:9e:9e:4d:08:2c:
70:21:14:d0:3d:b8:2c:0a:c5:ce:b5:43:b2:7f:4d:b0:02:5c:
32:ea:ac:94:c6:d3:c4:e7:17:54:db:90:bd:80:0f:29:86:17:
0d:45:a0:56:05:5a:5d:51:45:ab:ba:39:13:f3:97:65:b4:e3:
f8:82:2c:66:f9:22:d5:a4:49:d1:c9:bf:ad:ba:24:4e:4b:6f:
f1:dc:13:f5:c0:8d:f6:e1:34:52:22:50:6a:07:f7:e4:d7:b1:
b4:51:94:6e:05:78:70:dc:26:5a:de:65:0d:c0:61:b7:0e:c5:
4a:07:31:2b:64:80:c4:31:e9:4e:51:81:c9:2e:37:2b:26:fc:
66:f4:a7:26:b8:64:d0:ed:cd:14:2e:1f:f6:be:5a:a6:84:99:
f9:fb:1f:86:d3:56:ec:aa:d4:54:a5:0c:53:c2:61:1c:16:93:
f1:63:c2:c4:ba:e1:9e:d6:a8:92:3c:43:10:6d:83:56:15:ba:
d6:a4:2e:43:2d:76:95:73:7f:61:f3:b0:97:0a:b5:92:55:27:
07:96:f5:92:e7:28:91:8a:6e:85:6b:ec:17:f3:02:13:c8:6e:
28:62:9a:8a:79:4e:08:96:f6:4b:1a:d0:f1:ff:c0:91:ff:72:
f2:2f:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:25:21 2026 by rpki-client