Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-jDX_k9dqu1A6X6fPZSnEUZ4Du0.roa
File: 1-jDX_k9dqu1A6X6fPZSnEUZ4Du0.roa (raw, json)
Hash identifier: jG3D3XwAPofQymmsUXF7/rWUpRxhGPSfsSbeB60ONqs=
Subject key identifier: FA:30:D7:FE:4F:5D:AA:ED:40:E9:7E:9F:3D:94:A7:11:46:78:0E:ED
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EEF2401109446AF4222BA7BA9FBC4258F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-jDX_k9dqu1A6X6fPZSnEUZ4Du0.roa
Signing time: Mon 22 Jun 2026 11:42:54 +0000
ROA not before: Mon 22 Jun 2026 11:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:24:01:10:94:46:af:42:22:ba:7b:a9:fb:c4:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 22 11:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa30d7fe4f5daaed40e97e9f3d94a71146780eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:c5:a8:93:08:c2:cc:26:bc:ad:0d:20:40:
73:59:df:ac:af:21:78:ff:e3:86:c0:ec:4f:70:a5:
fc:d1:5b:6e:72:47:f6:06:a6:f2:80:be:5b:a2:4b:
cf:35:92:30:89:99:0f:d7:a0:58:a6:73:8f:b2:38:
06:2b:90:27:95:72:95:a1:53:38:60:dc:20:29:4a:
2e:75:2a:c7:0a:b3:11:b4:c0:ce:2a:d1:b8:c2:16:
93:68:c7:0e:ef:be:28:7c:f1:59:1c:23:26:54:30:
27:fb:3b:fc:9f:f7:eb:d8:e0:75:d1:f6:a6:f0:2a:
fc:ee:17:e6:ac:ea:d0:58:04:ea:d5:41:63:4d:b4:
79:0e:74:d9:2d:de:21:33:df:b6:e9:09:0e:65:a0:
90:c9:e4:1a:bd:b9:96:10:52:41:2f:4b:e8:ed:7e:
0f:59:2e:0f:e8:8f:8c:dd:20:78:3e:da:c1:ec:e6:
9f:29:7b:ac:79:0d:2e:01:5c:4a:14:c9:33:cd:b6:
d8:5c:4c:e3:7d:14:7d:bf:cd:52:5c:b3:d9:da:ab:
fa:3d:a0:6e:06:df:02:39:82:e7:be:b5:02:38:ac:
03:40:df:72:76:94:f6:05:fb:b5:5a:eb:60:cb:98:
5f:c9:78:71:0b:7f:1e:e9:94:4d:7a:9f:e7:f7:55:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:D7:FE:4F:5D:AA:ED:40:E9:7E:9F:3D:94:A7:11:46:78:0E:ED
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1-jDX_k9dqu1A6X6fPZSnEUZ4Du0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2f:8b:ae:7c:a5:20:71:6f:a2:c0:e4:df:c0:43:83:e8:92:
85:93:1b:e6:fa:a9:04:06:97:3b:af:e7:02:5b:45:86:e0:bf:
f6:f6:4f:b5:4e:38:e7:f7:b2:c7:41:92:c7:e9:e9:97:f3:0f:
34:60:c3:23:04:99:9a:2f:8e:f8:7d:a2:ba:34:ab:4c:7e:f9:
24:a6:85:8f:fd:88:c3:29:db:34:5a:b3:a7:72:63:bf:ce:7b:
b9:af:e1:51:c9:2e:28:91:74:0d:57:86:4d:f8:d2:3d:1f:6b:
fe:5b:cb:53:2e:e2:3c:11:ba:79:82:6f:16:a3:c5:98:7d:e2:
18:81:b5:d3:1c:06:b5:32:f6:45:a9:ea:c1:ba:d1:60:46:ee:
17:d4:a6:e5:b7:fd:b8:f6:7a:bd:40:9f:8c:62:20:30:95:ec:
43:df:7d:2b:16:a3:a6:ab:51:d5:af:c2:fd:5f:59:9a:ed:c4:
7b:d1:55:95:b9:e8:81:f3:d0:e8:bf:02:0b:11:ab:9b:e0:db:
6a:bc:f5:80:30:ce:0b:13:3e:ba:13:bb:09:07:79:80:62:99:
77:eb:d6:f5:9f:9f:0e:2c:a8:49:01:e7:e2:ee:68:14:7e:8a:
b9:8b:d3:da:6d:f7:8c:8a:15:80:02:44:83:a4:c8:c0:48:b5:
bd:69:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 03:37:02 2026 by rpki-client