Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DyfwB-ZFDHpGzGmSHPN0QHk-Phc.roa
File: DyfwB-ZFDHpGzGmSHPN0QHk-Phc.roa (raw, json)
Hash identifier: YGzQ3KAm0EEJbsMyhEk0MmAQ8T9ZwjufJ8rC0v05NwE=
Subject key identifier: 0F:27:F0:07:E6:45:0C:7A:46:CC:69:92:1C:F3:74:40:79:3E:3E:17
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A18DD679F53F67EAA9B3CDA48B37644A3D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DyfwB-ZFDHpGzGmSHPN0QHk-Phc.roa
Signing time: Fri 30 Oct 2026 17:23:25 +0000
ROA not before: Fri 30 Oct 2026 17:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 45.88.145.0/24 maxlen: 24
45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:d6:79:f5:3f:67:ea:a9:b3:cd:a4:8b:37:64:4a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 30 17:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f27f007e6450c7a46cc69921cf37440793e3e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:b7:cb:68:57:1c:97:89:32:4d:39:75:70:
1a:52:8d:a8:eb:bc:8f:c8:16:00:94:f2:56:44:68:
09:f7:b1:14:d7:0d:44:8e:60:cb:13:70:2f:05:09:
6a:79:11:a6:7e:79:dc:a7:0d:a4:33:d8:ad:10:85:
22:60:f9:39:9d:5c:1f:b0:27:61:e5:3a:e4:53:b3:
5f:26:12:f2:d4:5b:e8:8c:cc:2f:c6:f1:d2:de:aa:
81:d5:ca:5e:f6:26:99:c4:1e:8f:01:80:59:36:2b:
f3:37:40:82:70:59:33:dc:f3:58:df:7a:24:5a:3e:
5a:be:3f:c5:ac:50:23:e9:19:e8:82:f2:6a:dd:ca:
61:44:9c:cd:a9:c8:ee:8c:cf:69:9a:a8:41:a2:70:
0a:73:85:af:5b:e7:e8:8e:5c:9a:12:dd:23:33:63:
8b:2e:c2:5a:d0:c8:09:6e:01:5b:8c:33:83:46:b1:
a1:e2:e9:38:7c:3b:31:bd:f3:ff:c5:90:26:03:9a:
58:45:1f:34:e8:a2:4e:cb:80:fa:00:d3:a5:f8:87:
37:50:cb:33:4f:b2:c8:31:b2:b9:d3:9a:a6:52:b8:
53:8d:9d:d3:1f:a0:e6:09:49:d3:d8:41:fa:2a:74:
28:c8:a0:17:e7:d7:3b:83:ff:62:c0:26:e3:80:74:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:F0:07:E6:45:0C:7A:46:CC:69:92:1C:F3:74:40:79:3E:3E:17
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DyfwB-ZFDHpGzGmSHPN0QHk-Phc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7d:10:5e:da:34:20:4c:e5:b5:b2:af:35:62:9a:e3:b5:4a:
f5:3c:c8:39:c1:08:61:1b:d4:0c:7f:6b:75:9b:82:6a:35:bb:
12:3e:c5:cf:9e:18:b5:31:07:61:9f:f7:e9:72:da:08:1d:94:
d4:12:d7:78:f9:ec:b4:d2:84:63:4e:33:21:06:15:fc:97:b1:
9f:52:7c:c5:be:95:f8:8b:04:65:40:b7:18:5d:7c:92:58:16:
77:21:a1:ae:fb:65:04:29:d0:96:18:ad:2d:68:21:7a:24:e4:
c2:27:ee:7d:8e:25:6f:41:1a:e8:60:9d:b9:13:92:a7:54:f9:
b8:f9:1b:f8:dd:11:45:e3:b6:2f:b2:32:fd:62:46:ad:26:b0:
e9:25:51:02:4f:72:7c:9e:2e:7e:ff:67:32:2e:d1:eb:89:58:
51:cd:39:24:4b:f1:dc:25:7c:75:10:39:e5:2f:d1:0f:4c:68:
7e:33:b9:b5:1a:85:94:f5:3d:26:78:8b:d6:61:cf:7c:7c:96:
5a:d6:9b:11:b8:f1:52:84:8c:f8:37:2a:26:95:a2:e6:9a:62:
5e:ed:b1:0c:ab:6c:29:20:d3:2b:18:2d:19:72:fc:d4:ee:52:
a0:17:cd:93:a6:e7:af:d8:2b:fd:da:e8:66:db:e1:bc:38:f7:
12:73:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 04:09:49 2026 by rpki-client