Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7T8SGeNl5eNARi-ZaMq2rGAz8YI.roa
File: 7T8SGeNl5eNARi-ZaMq2rGAz8YI.roa (raw, json)
Hash identifier: rg5OGMyHS+wlQQ8u+6ROa/3cQrQzKC0DOx9gc8vjhoU=
Subject key identifier: ED:3F:12:19:E3:65:E5:E3:40:46:2F:99:68:CA:B6:AC:60:33:F1:82
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DD34A2C4A5B8FB3E605C8AD0AC0B5CB4E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7T8SGeNl5eNARi-ZaMq2rGAz8YI.roa
Signing time: Tue 28 Apr 2026 08:52:26 +0000
ROA not before: Tue 28 Apr 2026 08:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 45.88.145.0/24 maxlen: 24
45.88.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:4a:2c:4a:5b:8f:b3:e6:05:c8:ad:0a:c0:b5:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 28 08:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed3f1219e365e5e340462f9968cab6ac6033f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:e0:d8:6f:14:d8:ba:b0:2a:a7:a2:f4:30:
e0:80:90:62:e0:5a:a6:65:69:eb:d4:af:2d:e7:b1:
cc:7a:63:55:59:b8:86:11:f2:23:95:b6:3a:d6:81:
6b:a0:7f:0e:cd:df:0d:40:ca:b9:2f:40:07:ad:d9:
42:9a:1e:18:45:50:f9:e0:d7:15:40:19:bb:95:7e:
af:b3:12:28:a5:1b:2b:91:bc:ab:2c:6c:3f:a3:6f:
25:38:bd:6d:d7:d6:2b:a0:ab:70:e2:59:6d:ea:18:
59:b7:d7:12:16:b6:0a:7a:4c:f4:01:46:06:f9:f1:
36:d8:15:f5:b6:48:87:87:33:4c:e0:16:b2:ef:56:
4a:c2:77:f7:90:1d:b4:16:db:cf:fa:be:bf:fd:fc:
f4:64:ef:c7:49:8e:3d:e7:ec:08:57:e6:f3:4c:19:
48:6f:95:7b:7c:9a:09:b4:e1:f0:0a:25:9d:60:4d:
b2:34:ab:7e:7a:ac:dd:50:ce:2c:85:44:b2:4f:da:
d5:03:57:fe:ca:f5:d3:54:6a:cf:fa:f5:64:12:4b:
50:42:73:7c:36:17:09:34:a2:ec:24:20:b9:84:ed:
de:cf:f8:25:a3:62:d4:92:26:59:f9:dc:cb:9e:87:
e0:ac:bf:09:cd:8c:11:3b:86:98:c7:2b:0a:13:00:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:12:19:E3:65:E5:E3:40:46:2F:99:68:CA:B6:AC:60:33:F1:82
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7T8SGeNl5eNARi-ZaMq2rGAz8YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0-45.88.147.255
Signature Algorithm: sha256WithRSAEncryption
ad:de:f7:27:c3:72:9f:9b:d0:3a:bc:12:74:73:d7:60:b6:9a:
7a:11:a6:01:2a:f7:54:c9:a7:57:fd:6d:06:01:63:45:88:b0:
0d:dc:35:12:99:dd:13:cc:fb:af:a1:8d:9e:93:af:51:12:b2:
ad:a5:87:aa:24:94:71:a6:2e:7d:83:d2:fd:c3:ff:6e:4b:b9:
a8:7a:75:f7:ab:60:e1:ad:76:6e:1c:fd:c2:b4:a2:89:cd:a7:
f3:1e:72:00:21:7c:88:0b:b1:92:5f:9d:33:8d:cd:b2:f0:be:
28:56:c0:b8:1d:19:81:0e:e4:6d:a0:dd:ca:48:38:96:90:ae:
65:af:52:e2:03:2a:9b:e1:bc:f9:a1:a2:3f:c7:11:fc:d5:a2:
bd:b6:49:ed:81:58:1b:8c:df:b3:d4:df:6d:4e:b3:43:38:7e:
c5:0d:54:1e:8b:64:e3:bc:58:0a:82:de:30:f3:60:e3:44:12:
ec:f9:6d:71:9d:b9:40:3b:70:a9:c3:f1:64:22:16:4a:71:d5:
3a:e6:2b:2c:cf:14:0e:7e:ce:80:58:46:69:7a:af:e9:ec:d7:
5d:fa:45:5a:d2:0e:a9:76:c2:92:da:d8:63:10:4c:9a:79:d8:
d6:b7:b6:06:54:9e:47:57:0f:d4:97:29:b9:7c:6e:b4:00:98:
b7:56:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:45:21 2026 by rpki-client