Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7wQ2TnbfHsRJNfyvHvmQoJzjOwg.roa
File: 7wQ2TnbfHsRJNfyvHvmQoJzjOwg.roa (raw, json)
Hash identifier: f+n4ET8XWa/TyTFjYGY4LXokTGGHLNaOWs3US7sc6Ss=
Subject key identifier: EF:04:36:4E:76:DF:1E:C4:49:35:FC:AF:1E:F9:90:A0:9C:E3:3B:08
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D393A095CB23047D6C063ADD5E5B27A46
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7wQ2TnbfHsRJNfyvHvmQoJzjOwg.roa
Signing time: Sun 29 Mar 2026 10:53:17 +0000
ROA not before: Sun 29 Mar 2026 10:53:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:3a:09:5c:b2:30:47:d6:c0:63:ad:d5:e5:b2:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 29 10:53:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef04364e76df1ec44935fcaf1ef990a09ce33b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:85:5f:d8:33:13:1b:25:47:07:d1:59:06:
8b:4e:40:ce:54:0c:69:aa:30:f8:d1:95:1b:1c:42:
0d:a1:10:b5:11:5b:a3:c2:f9:dc:37:55:e1:7f:d1:
0d:2b:d0:ba:f5:9e:19:42:5d:ee:94:c5:23:d7:8a:
02:d6:4f:6c:32:dd:14:71:c0:25:6b:d7:22:9a:50:
9e:a6:9c:3b:52:39:db:b0:bb:ad:39:75:7f:a0:2f:
a4:b9:63:1d:8d:69:2a:82:11:66:c3:34:dc:6f:2e:
62:c8:59:b8:70:4b:74:b8:c5:0d:bb:e6:52:cc:36:
bd:ee:85:d0:0e:a5:00:69:28:68:4a:14:94:be:78:
44:20:0c:81:ef:c1:3a:34:3a:87:85:1d:6b:5b:ec:
67:90:f0:ab:aa:3f:1a:fd:ec:14:b8:b4:4a:e7:2b:
b3:bc:fa:05:a7:56:98:6d:ea:91:10:9c:66:34:dd:
16:6d:43:2f:bd:2e:09:d6:64:56:d7:0e:11:67:d3:
4b:38:fc:7e:1d:52:56:dd:53:8e:c4:fa:ab:ae:66:
7b:9b:69:48:ea:e5:ea:18:d8:2e:57:52:75:b1:d6:
e2:f1:f9:11:92:6e:26:14:cf:e9:3b:53:07:c8:2d:
54:5b:b7:f8:3e:93:79:8d:69:d7:64:23:e2:1d:5f:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:04:36:4E:76:DF:1E:C4:49:35:FC:AF:1E:F9:90:A0:9C:E3:3B:08
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/7wQ2TnbfHsRJNfyvHvmQoJzjOwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:58:b3:e8:11:6b:3d:65:9c:ba:96:61:3c:6a:17:cf:08:44:
3a:4e:b2:d0:4f:0f:ad:62:52:fa:44:29:a8:ee:23:63:e1:ac:
5f:85:bf:b7:44:77:52:75:62:ce:a8:c6:cd:71:27:2b:a4:01:
f9:5a:b0:16:8b:fd:ad:99:f8:8c:c5:fc:75:da:84:b2:ea:17:
62:b6:26:07:ec:db:15:73:63:c7:06:2e:83:df:c1:e9:fc:fd:
44:dd:d4:2e:e3:09:82:b5:20:69:e5:42:0a:9c:88:5d:c4:5c:
1e:5d:89:6e:b2:da:b0:37:bd:0e:5b:53:2a:f8:31:20:b8:82:
9d:6f:c1:ba:62:e6:9e:50:90:ad:c0:72:27:6b:35:3b:93:e4:
a6:69:b5:84:57:99:b0:01:86:76:b0:82:bb:1e:2a:69:36:03:
f3:3f:0f:ba:40:03:2c:0b:7c:1b:4d:2f:bf:f3:58:7f:10:5f:
2e:2e:f8:3a:90:12:d0:54:5e:4c:14:45:8b:86:b3:2b:d4:8c:
e7:ad:00:dc:68:f2:2a:07:0c:f4:58:20:b2:06:0d:51:9f:32:
7e:98:d5:4c:9a:4f:dd:23:5d:06:70:3c:c4:bb:43:81:07:58:
f9:99:55:6a:f0:69:60:b4:2f:fb:ee:ce:dd:57:31:69:4c:4d:
eb:ff:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:59:33 2026 by rpki-client