Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2sme1R3XEKQyyII6nXQEG2sT2ds.roa
File: 2sme1R3XEKQyyII6nXQEG2sT2ds.roa (raw, json)
Hash identifier: JiBBYdpAMfXi3ihw0h1CHEmjEU+InUv74l8/mTx0mgE=
Subject key identifier: DA:C9:9E:D5:1D:D7:10:A4:32:C8:82:3A:9D:74:04:1B:6B:13:D9:DB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E59695CD70EBC909B546E8791ECD98EF5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2sme1R3XEKQyyII6nXQEG2sT2ds.roa
Signing time: Sun 24 May 2026 09:55:37 +0000
ROA not before: Sun 24 May 2026 09:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:69:5c:d7:0e:bc:90:9b:54:6e:87:91:ec:d9:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 24 09:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dac99ed51dd710a432c8823a9d74041b6b13d9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:b5:dc:59:b7:8d:55:10:1d:0c:d4:b6:ed:
b8:dd:f2:83:84:35:d1:0b:ca:e2:1d:a8:33:17:10:
ce:04:43:5c:a4:87:b6:41:f5:c7:53:c1:a2:17:cc:
c8:25:5e:27:5f:4b:3d:41:a6:d0:bf:53:4f:c3:e5:
61:73:ad:8f:57:cb:83:ca:6b:8c:1e:f4:d9:c5:83:
d7:a8:12:05:9a:12:e4:02:d9:69:96:ae:21:d7:c6:
e9:a3:59:73:da:c2:44:3c:44:4e:d3:03:fa:ba:58:
0d:bd:64:16:fd:b4:b4:0d:20:95:37:88:ef:7a:51:
b9:f8:5e:dd:b6:76:40:b8:7d:b3:1d:25:00:c2:80:
b2:77:71:d7:da:7f:4b:c7:76:4f:4b:bc:f1:fe:5e:
bf:be:b8:5a:dd:5f:e4:05:8e:77:1d:e4:ba:25:bf:
88:7b:9d:a4:61:2d:fd:44:bd:62:4a:bb:29:24:15:
22:bc:06:16:71:ce:4c:6d:af:4a:2a:06:fb:5c:31:
d0:3f:96:d0:35:b2:ce:f1:64:3f:2a:b5:a0:7c:7a:
8b:5a:a4:20:6f:b9:76:55:3d:1d:65:5f:6b:e9:64:
c5:5b:f5:8c:de:fc:1f:b0:7e:51:56:6c:76:a0:ea:
44:ba:53:f4:47:9e:39:9e:2c:cb:5b:8b:77:83:cd:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:9E:D5:1D:D7:10:A4:32:C8:82:3A:9D:74:04:1B:6B:13:D9:DB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2sme1R3XEKQyyII6nXQEG2sT2ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:51:1e:c1:b4:3c:15:d0:17:11:de:f8:67:8f:84:e1:10:f3:
ee:a8:91:c6:5c:72:26:08:b7:56:27:5e:fe:c1:c1:93:c1:ea:
64:33:d2:db:32:23:e7:cb:ea:1a:54:aa:16:2f:8a:14:e1:35:
77:09:d0:c2:22:e1:6a:67:00:2b:97:6a:8e:59:c3:07:06:62:
02:40:5c:55:97:61:22:c2:8e:93:f6:a6:5d:bf:c0:b5:6b:1c:
1a:8d:d8:33:26:12:60:45:fa:42:0d:ee:f7:bf:44:5d:75:11:
79:8b:ff:73:ea:02:cc:aa:19:7b:23:74:98:62:68:07:f1:9f:
75:20:f8:b1:3d:78:a4:86:3d:c1:05:09:2a:8e:72:22:29:f8:
02:9d:a6:80:00:d1:60:69:29:68:53:d2:af:8f:6b:e7:b7:d7:
5c:af:44:9a:9d:c9:20:32:5d:62:06:9e:e6:df:a0:9c:10:9b:
7c:a7:96:2c:8e:bf:37:d7:b8:fe:39:6a:a0:dd:05:83:4a:da:
56:cb:5b:12:f5:8c:aa:20:e9:25:9f:0c:21:d5:ff:be:5f:50:
13:57:03:3d:fe:1f:43:8b:e4:b0:57:a4:e0:ac:35:30:94:f1:
bb:c2:d7:dc:da:49:76:c1:a3:dd:36:6e:9e:6c:44:cb:5a:df:
7b:7a:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:55:43 2026 by rpki-client