Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LTOwjX-MpR9SlbkZ-VjTOZWGwc.roa
File: 1LTOwjX-MpR9SlbkZ-VjTOZWGwc.roa (raw, json)
Hash identifier: QQErSrdajishiOlK0de79Ldx//HmEj2mgYaJdUNjlbk=
Subject key identifier: D4:B4:CE:C2:35:FE:32:94:7D:4A:56:E4:67:E5:63:4C:E6:56:1B:07
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E44C3181CF46C9EF380638E3B92A555DD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LTOwjX-MpR9SlbkZ-VjTOZWGwc.roa
Signing time: Wed 20 May 2026 09:41:36 +0000
ROA not before: Wed 20 May 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.224.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:c3:18:1c:f4:6c:9e:f3:80:63:8e:3b:92:a5:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 20 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b4cec235fe32947d4a56e467e5634ce6561b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:e5:70:dc:f7:9e:12:61:26:d2:55:8a:58:
ad:94:5f:07:20:0c:88:22:02:06:fe:db:d5:fc:4e:
6e:3c:e1:24:ef:af:99:4a:1c:bf:7c:71:9c:8b:8e:
1a:99:5a:e6:28:a1:04:73:03:d1:18:5a:94:43:ec:
84:f1:09:41:c5:ac:a7:60:08:e6:a6:b5:ef:49:1e:
ac:59:ee:cd:10:ac:9d:0e:7d:07:a7:b8:9b:70:b5:
1f:b7:79:ec:7c:3d:4a:5d:44:ae:ed:16:4e:c7:24:
c5:0b:f5:8a:94:32:da:91:4a:52:cb:26:47:4e:b2:
1c:8a:b7:ca:4f:86:f3:52:f3:5a:29:8f:d0:5f:77:
f5:ba:67:8a:b5:63:42:b4:04:67:6f:aa:e8:dd:4c:
70:e3:18:23:fc:43:db:36:a5:08:60:2a:56:a8:a3:
cf:62:d9:06:9a:4b:6b:34:42:b3:97:b5:6f:c7:e8:
1a:3d:08:11:00:b4:d0:07:03:5a:f4:0a:a4:d1:39:
aa:09:4c:a5:31:d0:ab:2f:e2:ed:97:17:1c:10:02:
43:a6:ea:58:2d:42:74:40:f3:96:be:1a:e6:0d:1b:
16:27:a2:8d:c0:87:3a:ee:ca:81:f8:2a:3a:f2:6d:
95:46:3d:20:46:bb:95:3c:9f:3b:8b:9c:9d:7a:dc:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:CE:C2:35:FE:32:94:7D:4A:56:E4:67:E5:63:4C:E6:56:1B:07
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1LTOwjX-MpR9SlbkZ-VjTOZWGwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cc:46:62:4e:86:91:63:7f:e3:34:c0:d8:6f:28:2b:a8:ad:
6a:f2:93:5c:41:55:4f:8c:9e:50:01:5c:81:24:90:88:e3:eb:
39:a4:80:ce:cd:fe:1e:21:2f:ad:d4:2a:2b:31:86:44:3b:bc:
0a:3f:94:7d:06:6e:e4:86:7d:47:f0:76:c8:d5:c3:30:dc:c5:
53:b5:cd:ad:8b:0c:88:eb:88:45:65:5f:f3:e3:61:dc:39:3f:
35:e8:4e:3c:60:da:33:f5:37:14:ea:45:69:c3:c5:c4:67:d0:
c4:32:61:56:60:34:f4:d0:d8:76:74:12:d0:ca:4d:fd:d4:cf:
d4:f7:7b:cd:d6:80:19:c9:d9:11:49:2a:78:4b:50:32:37:1c:
06:30:61:21:16:f9:63:b5:3c:2f:92:8c:48:5f:d6:ab:4c:f1:
9e:a2:22:ae:92:06:91:71:d7:60:4f:0b:67:3d:01:63:24:be:
cb:d4:5b:68:ee:a2:14:fd:25:fb:db:c9:d9:a8:c7:92:1f:88:
6a:ec:42:b5:a1:53:e3:48:30:7b:c5:90:3b:fa:b6:d0:2c:1e:
ad:f0:ae:ec:e6:4a:21:93:31:66:9a:18:63:93:e1:60:f9:ee:
d5:71:da:2f:94:73:97:d8:fb:a2:fc:d9:49:29:17:d1:a3:57:
67:59:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 01:34:00 2026 by rpki-client