Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1Shs9AdIwKrhj6pd-5ULSr08KAM.roa
File: 1Shs9AdIwKrhj6pd-5ULSr08KAM.roa (raw, json)
Hash identifier: nv519X8X8lnK/YyHcH1P95Zc7b+e+4fAu0jg+JHCS+I=
Subject key identifier: D5:28:6C:F4:07:48:C0:AA:E1:8F:AA:5D:FB:95:0B:4A:BD:3C:28:03
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E8DB2DF57ACA48ED7636687D73A4FDF68
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1Shs9AdIwKrhj6pd-5ULSr08KAM.roa
Signing time: Wed 03 Jun 2026 13:36:10 +0000
ROA not before: Wed 03 Jun 2026 13:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:b2:df:57:ac:a4:8e:d7:63:66:87:d7:3a:4f:df:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 3 13:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5286cf40748c0aae18faa5dfb950b4abd3c2803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:35:97:c2:40:61:d3:d8:3b:81:fe:45:f5:
c7:1e:ba:4e:9c:53:99:f8:e1:12:e0:5a:5e:5b:62:
b9:ae:c2:be:0a:a7:84:d8:cd:05:0f:5b:84:44:12:
33:44:7e:f0:a1:49:fe:24:17:ed:dd:9f:c6:82:30:
e2:1e:2b:a8:8e:f0:b6:f7:0f:40:19:39:f0:ec:c1:
2a:c2:e7:28:0e:b9:a9:1e:5f:8a:6e:a1:88:c5:ed:
87:7d:a9:a8:bb:3e:d9:77:86:0d:6f:94:e5:e8:4f:
5e:2c:44:06:ab:3d:ae:6b:d6:4d:a3:de:bd:f9:17:
15:a6:93:61:9c:c1:35:66:f1:a7:dd:7e:87:51:dc:
52:8e:bd:db:a3:7b:eb:12:09:98:6e:a7:7e:60:17:
7b:fc:37:58:bf:be:39:89:45:a1:04:a9:0b:bd:0c:
c2:22:b6:76:a8:b9:1d:da:56:52:e6:bf:a3:a7:3e:
86:1b:39:06:07:3c:0d:7c:f6:36:b4:94:4c:61:9e:
6a:ad:48:a5:b4:5c:c8:b2:6d:30:e9:eb:2c:7b:50:
c2:bb:7a:9c:50:ec:97:86:0f:ea:f1:0c:9c:1d:5f:
ee:7e:62:71:4a:b3:ca:4c:68:1f:54:4b:ba:33:89:
17:04:8d:55:62:16:80:a4:5b:58:99:67:a3:d4:20:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:6C:F4:07:48:C0:AA:E1:8F:AA:5D:FB:95:0B:4A:BD:3C:28:03
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1Shs9AdIwKrhj6pd-5ULSr08KAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:94:1f:65:42:b7:19:24:6c:21:27:14:b9:48:03:4e:fc:54:
c8:43:0a:b7:2e:9e:ad:57:a9:60:b0:e8:ab:9d:3a:45:dd:17:
2c:35:4b:60:3f:ab:93:be:58:38:e5:28:e9:63:2e:7c:b9:a6:
21:4d:3b:72:34:36:cf:e3:6a:68:0e:07:25:8f:45:fa:11:b3:
54:ea:2f:7b:10:94:1e:40:bc:d0:ed:08:95:42:a1:13:87:fb:
9f:fb:70:f6:7b:52:d5:2a:fc:f9:88:dc:75:87:e6:9b:72:4e:
a7:61:55:5c:6d:40:ca:00:8f:2e:00:b1:16:32:32:be:ed:4d:
7d:27:c1:70:cb:b5:74:99:8c:17:4a:23:97:94:2f:d5:98:42:
88:14:1b:ca:63:ff:c4:3b:ee:52:46:53:15:57:ca:70:10:fb:
ec:60:05:89:26:5b:5b:c1:58:d0:9b:31:10:f5:14:62:41:17:
52:2a:41:b2:4c:ba:10:c8:76:88:be:cc:c9:45:7b:49:2a:a3:
dc:96:ee:71:25:b1:8c:4f:b9:e7:66:50:96:19:98:85:be:71:
d6:de:f4:45:06:0c:2d:b3:43:5d:c8:77:bc:56:73:fa:30:f3:
ea:62:b5:02:5d:09:79:f6:e7:b1:81:53:39:d2:5e:07:57:46:
23:d7:40:02
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ6Nst9XrKSO12Nmh9c6T99oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjAzMTMzNjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTI4NmNmNDA3NDhjMGFhZTE4ZmFhNWRmYjk1MGI0YWJkM2MyODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Y1l8JAYdPYO4H+RfXHHrpOnFOZ
+OES4FpeW2K5rsK+CqeE2M0FD1uERBIzRH7woUn+JBft3Z/GgjDiHiuojvC29w9A
GTnw7MEqwucoDrmpHl+KbqGIxe2Hfamouz7Zd4YNb5Tl6E9eLEQGqz2ua9ZNo969
+RcVppNhnME1ZvGn3X6HUdxSjr3bo3vrEgmYbqd+YBd7/DdYv745iUWhBKkLvQzC
IrZ2qLkd2lZS5r+jpz6GGzkGBzwNfPY2tJRMYZ5qrUiltFzIsm0w6esse1DCu3qc
UOyXhg/q8QycHV/ufmJxSrPKTGgfVEu6M4kXBI1VYhaApFtYmWej1CDjaQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNUobPQHSMCq4Y+qXfuVC0q9PCgDMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvMVNoczlBZEl3S3JoajZwZC01VUxTcjA4S0FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALVxNAwQA
TUhRAwQAW8ZfAwQAkhNdAwQAvF2KAwQAwgl3MA0GCSqGSIb3DQEBCwUAA4IBAQAd
lB9lQrcZJGwhJxS5SANO/FTIQwq3Lp6tV6lgsOirnTpF3RcsNUtgP6uTvlg45Sjp
Yy58uaYhTTtyNDbP42poDgclj0X6EbNU6i97EJQeQLzQ7QiVQqETh/uf+3D2e1LV
Kvz5iNx1h+abck6nYVVcbUDKAI8uALEWMjK+7U19J8Fwy7V0mYwXSiOXlC/VmEKI
FBvKY//EO+5SRlMVV8pwEPvsYAWJJltbwVjQmzEQ9RRiQRdSKkGyTLoQyHaIvszJ
RXtJKqPclu5xJbGMT7nnZlCWGZiFvnHW3vRFBgwts0NdyHe8VnP6MPPqYrUCXQl5
9uexgVM50l4HV0Yj10AC
-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:24 2026 by rpki-client