Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-PJNnzuBbzH60HL-VhNhzXEZ9qg.roa
File: 1-PJNnzuBbzH60HL-VhNhzXEZ9qg.roa (raw, json)
Hash identifier: ms6wf83jJA5VxvU9MTmDRxfh8xa664kHyuE2veQYyXg=
Subject key identifier: F8:F2:4D:9F:3B:81:6F:31:FA:D0:72:FE:56:13:61:CD:71:19:F6:A8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F486851139BFA567E47ECD929C631AF9A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-PJNnzuBbzH60HL-VhNhzXEZ9qg.roa
Signing time: Thu 09 Jul 2026 19:43:43 +0000
ROA not before: Thu 09 Jul 2026 19:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.88.144.0/24 maxlen: 24
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:68:51:13:9b:fa:56:7e:47:ec:d9:29:c6:31:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 9 19:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8f24d9f3b816f31fad072fe561361cd7119f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:2b:39:13:ee:61:6a:48:16:06:ad:c7:04:
c2:b7:6a:4f:c9:ae:f0:3f:47:42:5f:20:ec:e1:fe:
29:e3:41:6b:c2:9b:e1:7d:4b:b7:e2:34:32:10:91:
89:f7:7d:c8:ed:72:a9:e7:43:96:09:67:ad:c4:79:
e1:95:d2:9e:c4:da:91:7b:b2:77:03:3e:f7:3b:45:
ee:e6:01:c5:1c:82:9d:2c:91:e3:d2:36:5e:92:be:
6a:69:26:f7:b2:fe:c0:70:48:b4:7b:31:88:76:34:
77:9f:99:a9:fa:6d:5d:77:f9:35:db:14:c0:7e:8b:
02:24:f2:3d:a4:75:f0:ed:51:32:f7:76:79:8a:46:
72:ed:21:b1:a2:8a:72:2c:cc:c9:4a:c3:bf:b9:e2:
0c:7a:be:7b:b4:88:8f:03:2f:c3:d5:4e:be:c7:74:
59:5b:ee:a1:9c:86:46:28:3c:0a:98:48:33:d4:af:
04:e4:16:d9:b6:99:c9:47:22:8a:f2:bf:82:7b:93:
49:24:2a:fd:94:90:a6:10:3a:51:a4:50:88:96:e5:
e4:72:be:89:85:2e:da:4f:9c:84:7f:02:0e:41:ce:
6b:25:64:74:ea:ba:1a:92:0e:3c:f7:91:bd:1a:b6:
ed:9f:c8:8b:39:29:09:6f:e4:42:c9:07:b5:33:4e:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:4D:9F:3B:81:6F:31:FA:D0:72:FE:56:13:61:CD:71:19:F6:A8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-PJNnzuBbzH60HL-VhNhzXEZ9qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
IPv6:
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
66:df:33:a7:1f:76:3f:e7:ed:9b:e2:dd:0a:71:e7:23:7e:66:
97:3d:fd:33:cd:99:82:b7:e4:36:bb:e4:e3:35:a0:ba:ea:73:
5e:33:19:34:01:fb:ae:69:fc:9b:ed:f3:39:a3:c2:82:d2:c6:
45:f2:ed:7c:be:80:59:c6:53:36:78:ea:65:97:12:27:f0:14:
d0:51:36:1c:f4:a6:44:4a:7a:ce:e7:f7:79:18:72:c2:11:c9:
dc:f9:16:c7:b9:bb:bd:e3:09:dc:80:d8:20:a6:55:66:6d:72:
19:92:10:8a:2e:e8:da:a8:b3:5b:90:5e:c4:4b:06:8b:fa:00:
6c:3e:83:a4:53:bd:a5:62:af:de:7c:6d:6c:7a:d4:48:5f:1b:
29:a0:98:c9:ee:d1:45:da:58:36:0c:1b:70:5f:6d:51:10:af:
32:c6:e5:18:3d:80:f5:3c:d9:46:83:ed:a3:a6:d6:6a:d6:06:
0e:3c:5d:1e:02:01:5b:18:44:6d:8b:a7:e0:b0:11:14:c9:5b:
af:a3:04:a6:a8:0b:4d:9e:a6:9e:2d:7e:4c:cc:78:bf:e9:cc:
8c:67:07:49:2f:e2:57:54:5c:7e:ac:4c:d1:3c:61:50:05:6b:
c5:48:9e:37:fc:94:de:08:23:b5:83:5d:4c:24:9d:45:3c:65:
47:fd:89:5f
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ9IaFETm/pWfkfs2SnGMa+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNzA5MTk0MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGYyNGQ5ZjNiODE2ZjMxZmFkMDcyZmU1NjEzNjFjZDcxMTlmNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn0rORPuYWpIFgatxwTCt2pPya7w
P0dCXyDs4f4p40FrwpvhfUu34jQyEJGJ933I7XKp50OWCWetxHnhldKexNqRe7J3
Az73O0Xu5gHFHIKdLJHj0jZekr5qaSb3sv7AcEi0ezGIdjR3n5mp+m1dd/k12xTA
fosCJPI9pHXw7VEy93Z5ikZy7SGxoopyLMzJSsO/ueIMer57tIiPAy/D1U6+x3RZ
W+6hnIZGKDwKmEgz1K8E5BbZtpnJRyKK8r+Ce5NJJCr9lJCmEDpRpFCIluXkcr6J
hS7aT5yEfwIOQc5rJWR06roakg4895G9Grbtn8iLOSkJb+RCyQe1M07LwQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPjyTZ87gW8x+tBy/lYTYc1xGfaoMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvMS1QSk5uenVCYnpINjBITC1WaE5oelhFWjlxZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWUvM2NhYTUxLTdhMjEtNDk5ZC1hNTQ1LWJhZmJkZmM4MTMy
YS8xL1R4UVJMUVhwMkhZVW5TZDQxSTdhcWpKTnNLVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA+BggrBgEFBQcBBwEB/wQvMC0wDAQCAAEwBgMEAC1YkDAd
BAIAAjAXMA4DBQAqEDyFAwUAKhA8hgMFAyoTwkAwDQYJKoZIhvcNAQELBQADggEB
AGbfM6cfdj/n7Zvi3Qpx5yN+Zpc9/TPNmYK35Da75OM1oLrqc14zGTQB+65p/Jvt
8zmjwoLSxkXy7Xy+gFnGUzZ46mWXEifwFNBRNhz0pkRKes7n93kYcsIRydz5Fse5
u73jCdyA2CCmVWZtchmSEIou6Nqos1uQXsRLBov6AGw+g6RTvaVir958bWx61Ehf
GymgmMnu0UXaWDYMG3BfbVEQrzLG5Rg9gPU82UaD7aOm1mrWBg48XR4CAVsYRG2L
p+CwERTJW6+jBKaoC02epp4tfkzMeL/pzIxnB0kv4ldUXH6sTNE8YVAFa8VInjf8
lN4II7WDXUwknUU8ZUf9iV8=
-----END CERTIFICATE-----
Generated at Sat Jul 11 08:01:52 2026 by rpki-client