Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4HZJRxI_hVyijc_Qbl16td3Wj3U.roa
File: 4HZJRxI_hVyijc_Qbl16td3Wj3U.roa (raw, json)
Hash identifier: edaNrehmklstEy9IRUVTH2G7eaDq6pT6MQJ8UCrPUks=
Subject key identifier: E0:76:49:47:12:3F:85:5C:A2:8D:CF:D0:6E:5D:7A:B5:DD:D6:8F:75
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A19BCAD6B15472A4E31D1FE0E5CBB0D156
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4HZJRxI_hVyijc_Qbl16td3Wj3U.roa
Signing time: Mon 02 Nov 2026 10:25:24 +0000
ROA not before: Mon 02 Nov 2026 10:25:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39521
IP address blocks: 45.88.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:ca:d6:b1:54:72:a4:e3:1d:1f:e0:e5:cb:b0:d1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 2 10:25:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0764947123f855ca28dcfd06e5d7ab5ddd68f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:cb:f0:55:c1:1d:1e:3e:ff:7c:a2:0e:1e:
a5:66:0c:46:4c:21:a4:ea:7f:c5:78:c4:67:60:21:
da:ad:07:0c:ee:1a:0f:8e:38:a2:fb:e7:67:67:a3:
79:12:11:ab:bc:53:5f:e3:4a:83:09:d7:8e:78:3a:
41:73:d9:5f:dc:80:cb:63:c5:a5:1c:c0:5c:ef:da:
38:d4:9d:b7:78:18:60:d2:47:bb:71:31:95:6b:cf:
a3:23:b6:65:50:b3:47:a7:3d:b4:99:6d:25:c6:e4:
64:40:28:a7:7e:92:c4:c1:a2:16:be:a2:c3:6b:bd:
d6:36:15:fa:6d:40:eb:b1:fb:ba:f3:ea:84:05:8a:
6b:fd:4f:de:0d:b0:6b:9a:a5:5d:7c:53:58:90:85:
97:34:90:b6:e0:b2:04:d5:a1:43:10:56:a3:ab:7b:
78:31:64:3c:9e:02:f5:f3:67:35:04:02:df:94:98:
2f:be:60:16:d1:ef:6c:99:28:a3:fd:d0:44:28:d6:
9b:13:5b:e5:68:a5:e1:72:81:48:8a:46:95:e7:2b:
2d:f1:bd:b9:4e:39:91:51:be:62:8d:52:c6:8f:27:
23:4d:d7:26:56:96:20:f3:a2:fe:b3:16:d9:22:75:
e4:3b:a1:e6:f5:e7:40:21:4a:b4:33:c3:ae:58:1f:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:49:47:12:3F:85:5C:A2:8D:CF:D0:6E:5D:7A:B5:DD:D6:8F:75
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4HZJRxI_hVyijc_Qbl16td3Wj3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a9:aa:37:c4:f6:09:96:23:71:1f:cb:a3:fe:79:5a:f9:6d:
e4:9f:ff:4a:bd:af:9b:fa:ce:0c:6b:e7:ec:cb:26:21:33:3f:
84:c7:28:ca:a2:6d:ec:fb:1e:4e:39:4b:8b:04:4d:82:40:ec:
ff:1f:04:36:df:07:a1:3b:a7:25:41:44:a8:18:c3:54:06:11:
9c:10:b4:59:36:d2:67:6e:06:ec:c7:a1:67:83:23:af:0f:90:
31:b4:ed:ad:a7:8c:0f:21:3b:b1:0e:7f:93:58:75:f5:ad:a0:
20:f5:3c:3e:f1:9f:41:26:f5:b8:f8:6b:e7:ca:41:69:96:c1:
ff:e4:ed:77:96:aa:8d:02:e1:6c:d2:22:ea:00:f8:d2:a3:eb:
8f:a4:08:b0:b0:30:e2:46:a6:d4:73:41:ec:99:f4:32:26:15:
cf:b0:c1:76:49:0c:71:49:df:a8:00:98:94:72:50:9a:41:90:
f9:2e:bd:23:8e:1c:c8:02:62:e0:af:1b:35:23:2d:84:b5:54:
89:9f:0a:d5:20:6d:37:08:b9:4e:e8:3e:b6:a4:0d:fb:35:d7:
e1:61:48:e2:f3:d5:f9:fa:e4:f3:ac:67:8d:e3:75:5f:f4:26:
d7:f2:88:9e:c3:0c:6d:fb:72:25:b9:62:b5:dc:d2:de:0e:fc:
1a:16:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:42:21 2026 by rpki-client