Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KvjgnWIt6vGOFDBJoTPubWNYuc0.roa
File: KvjgnWIt6vGOFDBJoTPubWNYuc0.roa (raw, json)
Hash identifier: quCZWYKxWOXnxnLcE081wnrlgvqD4ATkafA3iLbhlDA=
Subject key identifier: 2A:F8:E0:9D:62:2D:EA:F1:8E:14:30:49:A1:33:EE:6D:63:58:B9:CD
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E87C52F6D4649D1F585E06491A40776E5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KvjgnWIt6vGOFDBJoTPubWNYuc0.roa
Signing time: Tue 02 Jun 2026 09:58:27 +0000
ROA not before: Tue 02 Jun 2026 09:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 45.155.64.0/24 maxlen: 24
62.233.51.0/24 maxlen: 24
80.244.12.0/24 maxlen: 24
80.244.15.0/24 maxlen: 24
94.103.187.0/24 maxlen: 24
94.231.215.0/24 maxlen: 24
176.118.33.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:c5:2f:6d:46:49:d1:f5:85:e0:64:91:a4:07:76:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 2 09:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2af8e09d622deaf18e143049a133ee6d6358b9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:1e:28:05:ec:bf:44:ef:2a:c7:52:64:cf:
4b:20:eb:a2:cb:84:9e:d1:a8:32:4e:b1:07:1a:7d:
02:d1:a4:fa:e2:7c:e4:86:0d:4c:a1:33:43:7b:d0:
00:3f:6b:a8:16:44:d9:6e:45:1e:17:a7:8a:9c:9e:
87:61:3d:87:36:fa:39:b8:61:5c:38:54:f5:4f:e8:
81:04:fe:ba:6f:70:67:e1:c3:88:a1:a1:f0:7e:c1:
99:e2:66:37:42:d3:cc:ff:a0:a3:ad:85:e2:1b:0d:
3f:47:f5:de:15:3e:95:17:a7:ed:ea:8c:26:f5:d9:
a5:c0:69:95:7d:d0:ae:66:81:30:48:11:cd:41:f6:
9d:02:2d:a3:e4:e3:4a:04:34:fe:af:e8:04:d0:06:
c6:5d:e3:ce:73:0d:20:07:d2:36:8c:50:80:a7:55:
a6:dc:6c:d9:1a:87:b5:bb:d5:51:d1:24:f8:c7:16:
38:07:1b:f3:e7:3c:93:79:61:30:16:da:bc:0a:62:
29:3c:de:f8:89:e6:a7:b7:09:50:9d:57:3a:b1:7b:
97:b4:02:23:57:99:68:b6:67:1c:23:56:90:4d:40:
08:61:dc:6f:d9:ad:dc:81:48:a7:a9:08:e0:47:44:
1c:45:82:e5:27:27:93:36:42:23:9e:03:f5:8b:1e:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:E0:9D:62:2D:EA:F1:8E:14:30:49:A1:33:EE:6D:63:58:B9:CD
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KvjgnWIt6vGOFDBJoTPubWNYuc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
62.233.51.0/24
80.244.12.0/24
80.244.15.0/24
94.103.187.0/24
94.231.215.0/24
176.118.33.0/24
185.244.106.0/24
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f6:5d:a2:d8:68:54:df:c3:18:1e:b7:af:81:e9:80:fa:c6:
34:67:54:56:92:2d:7e:9b:eb:3f:07:72:fc:78:d2:38:e0:3a:
02:61:0b:26:c2:4d:f7:ca:81:fb:77:09:b1:21:61:f5:6d:3f:
1b:f0:6a:67:2c:bc:df:20:3b:e0:50:9a:a1:d4:f0:fb:00:e9:
bc:4a:d2:18:36:dc:d9:e4:19:ff:10:11:16:df:b9:30:b6:b6:
9e:69:4b:14:64:ac:39:7d:d5:c4:94:39:d7:54:79:d0:83:c9:
1a:3b:84:e4:a2:54:7b:a8:03:da:ff:57:1c:cf:af:60:d6:a7:
51:31:f2:f3:b3:9e:8b:66:4d:1e:3b:00:14:d3:26:de:ae:27:
73:43:a9:48:c0:9c:9f:80:d0:56:e1:cc:ec:76:5c:ba:7e:e4:
08:42:f4:16:9b:81:f7:2b:67:db:11:a8:0f:04:c3:fc:de:62:
ba:12:19:1d:66:14:97:ce:ce:dc:77:c4:17:b2:37:f5:a1:7e:
a2:53:b5:b9:cf:60:4c:a4:1b:a5:34:ef:c4:a1:83:32:24:7c:
72:79:fa:5b:38:7b:09:59:f6:e8:4a:fb:45:4b:6c:d2:f1:ff:
1a:dc:f2:3e:33:6a:9e:f5:d7:59:c3:4f:59:47:28:e9:a1:3a:
6c:6b:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:24 2026 by rpki-client