Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AMeChWQUy49e3IuwBUGIPbGiNvM.roa
File: AMeChWQUy49e3IuwBUGIPbGiNvM.roa (raw, json)
Hash identifier: YGpqN2e4JIxoSeKVf8llUQXH+xnQzY6HIcCsRl+UikQ=
Subject key identifier: 00:C7:82:85:64:14:CB:8F:5E:DC:8B:B0:05:41:88:3D:B1:A2:36:F3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EF4548D2F841FA5BE95C1ACA1133BC0E4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AMeChWQUy49e3IuwBUGIPbGiNvM.roa
Signing time: Tue 23 Jun 2026 11:54:02 +0000
ROA not before: Tue 23 Jun 2026 11:54:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:54:8d:2f:84:1f:a5:be:95:c1:ac:a1:13:3b:c0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 23 11:54:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00c782856414cb8f5edc8bb00541883db1a236f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:f7:8e:31:df:f7:8c:e8:95:cb:cf:61:66:
61:67:0a:2a:5a:41:05:4e:37:d7:ce:a5:9a:df:08:
f4:41:c7:7e:f6:d9:0a:35:90:2e:80:81:ec:13:f5:
c3:de:b4:90:04:e2:85:5e:de:0e:fb:40:b0:96:2a:
ac:2a:b9:8a:0f:7e:36:d2:d2:24:ef:35:12:d7:da:
a1:df:74:bd:e3:e2:b7:51:70:03:0b:29:f9:f7:6f:
7b:fc:ad:e3:12:9d:6a:ec:1a:80:a8:37:bb:1c:c8:
67:e7:aa:44:94:48:a2:43:2a:99:9b:df:dc:8d:65:
70:f7:be:2d:db:cb:f7:f5:42:58:d0:ca:b8:a6:d5:
b9:36:75:23:96:60:33:2d:f7:f5:9a:62:eb:0d:4d:
b8:00:82:2f:2c:85:02:65:91:da:77:d2:78:d6:6f:
ec:cd:3f:d0:32:63:0e:4b:ab:d6:32:0a:f2:e2:b5:
ce:60:f9:4f:30:7f:d3:ea:30:76:c5:99:ec:fc:b8:
3e:84:c6:ed:93:12:07:f6:aa:a0:cf:c2:f0:d2:e6:
26:55:e7:ba:49:ed:b3:91:10:cb:ae:0e:4d:97:e4:
f3:5d:d2:a3:7d:d3:35:e5:ae:ba:5c:db:84:ba:1d:
43:b1:ee:ad:2c:f9:8a:4b:c7:5c:5a:39:21:b4:55:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:82:85:64:14:CB:8F:5E:DC:8B:B0:05:41:88:3D:B1:A2:36:F3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/AMeChWQUy49e3IuwBUGIPbGiNvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ce:40:3c:19:03:fd:83:90:95:27:ca:b9:05:f4:84:9f:fb:
fa:d2:83:8e:ef:ff:99:96:b6:64:62:8f:af:6e:d9:3a:31:e1:
f0:07:ed:63:be:c5:14:46:fd:33:49:be:30:00:16:5d:50:5f:
7b:6a:a2:c8:0c:2e:bb:ff:ee:66:eb:7c:f8:7b:33:bb:c1:75:
0d:e3:f5:98:4b:c0:f6:57:90:89:fb:50:9a:1b:ea:89:c0:0e:
b0:a5:ea:16:0a:63:4a:7a:b3:8e:42:94:5c:11:c4:88:e8:a0:
62:f4:23:c2:56:62:97:a1:d3:2a:cb:11:a7:4a:80:6e:6a:e5:
94:80:b6:76:be:2f:70:e2:a5:53:4a:72:43:ea:0d:28:f8:d5:
05:39:ed:7a:99:e5:48:0c:99:3e:13:e8:37:0f:9d:bd:a7:6c:
a0:a3:a3:11:b0:57:db:b2:dd:1a:8d:6b:c5:59:20:bf:7d:38:
42:ef:26:a1:70:99:cf:4b:9c:cb:82:01:84:ef:db:74:8e:02:
1d:93:e5:71:41:58:c7:32:7e:8e:41:6d:83:3a:40:54:05:3e:
11:a3:49:93:f7:f8:a9:55:f2:18:f0:00:95:f7:d8:68:12:2e:
fb:f0:0b:a6:14:d7:01:94:5a:cc:64:52:d5:f9:b1:e8:b2:11:
d5:38:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 04:24:17 2026 by rpki-client