Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8xxpU5Op1gVeb-aVT8Y4RijW37E.roa
File: 8xxpU5Op1gVeb-aVT8Y4RijW37E.roa (raw, json)
Hash identifier: ucwhlAQNBpYptC6Dt05B5bCFdOFJ7TV+uODparKpEKw=
Subject key identifier: F3:1C:69:53:93:A9:D6:05:5E:6F:E6:95:4F:C6:38:46:28:D6:DF:B1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D94C3EA78E338514B0EC92C780CEB0212
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8xxpU5Op1gVeb-aVT8Y4RijW37E.roa
Signing time: Thu 16 Apr 2026 05:29:20 +0000
ROA not before: Thu 16 Apr 2026 05:29:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:c3:ea:78:e3:38:51:4b:0e:c9:2c:78:0c:eb:02:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 16 05:29:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f31c695393a9d6055e6fe6954fc6384628d6dfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:87:f3:cf:e7:45:14:9b:4b:dc:bb:1f:7a:
e1:15:37:6e:82:ce:6d:6d:72:0f:15:36:79:bc:cc:
c7:c3:c2:83:83:5a:34:24:43:da:21:13:ec:59:91:
d8:2f:e9:f8:1e:e8:f9:b7:55:61:26:98:d8:2a:91:
2a:63:f7:53:f8:10:00:42:58:40:6a:d3:03:4f:14:
59:36:ec:c7:ab:c0:15:94:b8:61:b1:d0:6f:c5:8a:
10:48:50:c6:0a:f1:9e:74:24:92:11:16:3c:4e:95:
0b:70:f9:eb:47:28:37:08:33:ee:42:a9:15:68:79:
ba:a6:54:58:98:51:84:64:18:8f:f0:b3:8f:c4:9b:
2c:ad:e9:5d:fc:23:20:ae:44:e1:4e:fa:c4:b6:55:
94:03:06:5a:af:a4:cb:fb:6b:48:7b:82:69:4f:20:
b9:d7:6f:e6:5b:ae:3e:93:f7:8b:9a:92:7d:53:46:
4b:4b:49:b7:0f:8e:f2:f4:dc:b0:cb:12:53:64:54:
62:11:90:ec:6e:63:75:dd:be:99:ae:f7:0a:0a:93:
50:fb:d0:4b:bd:44:4e:3d:60:7c:b4:3d:a5:82:f0:
7c:cc:c4:df:65:d2:7b:61:5d:b8:f3:55:cc:8a:0e:
b8:90:63:88:c6:ed:89:30:3a:ac:09:3f:8d:e2:77:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:69:53:93:A9:D6:05:5E:6F:E6:95:4F:C6:38:46:28:D6:DF:B1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8xxpU5Op1gVeb-aVT8Y4RijW37E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:be:5b:92:e4:a9:8b:f6:7d:cb:dc:3b:8f:f5:8a:63:ba:03:
a1:d7:18:58:c2:ab:45:b1:40:fe:85:f9:02:7d:b4:b3:ed:67:
c1:85:64:5e:70:71:3f:ca:e0:1b:44:42:38:ea:b7:a4:12:2c:
22:d8:d8:85:a3:7b:84:01:0d:8e:1c:2b:7e:de:bc:c6:ef:cd:
bf:89:29:bd:18:e3:92:10:12:45:36:93:c2:9f:3a:e3:1f:11:
47:25:36:65:cc:91:ce:37:17:06:61:29:bd:4e:93:7f:6c:4c:
8a:75:04:cb:f2:52:5e:7e:4e:3b:62:7b:0f:d3:39:04:b7:cb:
29:90:26:cc:79:43:2e:8c:26:33:e8:0a:ea:c0:8a:e9:26:ce:
40:b8:91:34:65:75:df:98:55:7b:d0:b2:36:13:91:1d:0b:2a:
67:66:89:e9:bd:03:91:c2:e2:78:e6:15:99:48:30:86:48:a4:
9d:2e:9d:1e:88:65:8a:78:38:35:d3:b1:f1:83:bb:1a:82:9c:
1e:c4:15:06:ad:4e:00:47:29:d4:8d:a3:b4:d2:5a:1b:ee:fb:
27:e7:b0:a9:32:27:e0:1f:bb:ee:82:2c:89:ea:1a:3a:b2:6f:
1f:21:27:c2:a7:21:bf:1e:d9:8e:08:63:c7:a7:27:c1:2d:8c:
a1:a4:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:54 2026 by rpki-client