Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M8BcKfWXUpXAmAgyEFgMCrTOD00.roa
File: M8BcKfWXUpXAmAgyEFgMCrTOD00.roa (raw, json)
Hash identifier: ltKtQlJsHI7AIXdQV28KPTuhpvGikkZ0babtnvwSmpU=
Subject key identifier: 33:C0:5C:29:F5:97:52:95:C0:98:08:32:10:58:0C:0A:B4:CE:0F:4D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1455361D701359D3BA6E1885BCF6A93EB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M8BcKfWXUpXAmAgyEFgMCrTOD00.roa
Signing time: Fri 16 Oct 2026 15:27:34 +0000
ROA not before: Fri 16 Oct 2026 15:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 45.88.144.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:53:61:d7:01:35:9d:3b:a6:e1:88:5b:cf:6a:93:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 16 15:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33c05c29f5975295c098083210580c0ab4ce0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:cd:b3:3b:12:28:2b:bc:ec:a8:89:6d:16:
e8:5a:fd:02:f7:d8:f9:62:5b:4d:89:c0:c1:6d:1f:
cf:0a:65:a5:50:9b:fb:29:53:98:f4:04:f3:c4:44:
7a:8f:36:33:88:dd:97:e3:a9:55:64:1d:30:02:d6:
97:60:f8:40:fd:22:1d:45:9c:4d:58:65:19:30:09:
e1:70:70:22:ff:58:33:11:4a:ba:be:10:cf:cb:bf:
35:c9:99:82:52:ae:ad:06:66:94:48:0d:5a:96:0d:
1e:e9:08:de:3b:cf:3c:a8:6b:c0:8e:83:f9:65:91:
9b:d7:68:ad:da:c6:f0:38:43:d1:dd:66:61:17:d8:
dd:fc:3b:02:6a:21:b2:36:55:1b:cf:66:fd:d2:31:
11:b1:de:9a:26:5b:0d:f4:1d:6b:f8:75:73:c3:12:
fd:49:66:dd:0e:58:b8:d6:7a:71:7e:46:f2:eb:a0:
90:61:13:9f:86:0a:c5:50:d5:1f:75:08:f6:95:f3:
72:4a:ee:4c:5e:5b:e3:33:52:a0:32:d3:3a:8e:2b:
3d:f1:04:c0:e1:8d:2b:c0:87:ce:75:db:e3:58:7f:
c3:52:9a:87:bf:9c:21:0f:c4:6a:35:b7:af:a4:ee:
2f:d0:44:b8:b1:6b:4c:b3:2b:49:f5:67:27:69:01:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:5C:29:F5:97:52:95:C0:98:08:32:10:58:0C:0A:B4:CE:0F:4D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M8BcKfWXUpXAmAgyEFgMCrTOD00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5e:9f:b9:48:03:da:6f:7a:50:92:1c:08:4c:b8:e4:e6:ad:
12:3c:82:b4:e0:ee:d6:79:47:4c:2a:e0:b6:59:ad:fb:56:a4:
ec:9b:fc:ee:82:fd:dc:9c:b5:64:09:4d:7f:91:4a:b6:86:e7:
44:44:c6:97:0a:f6:66:2c:ee:a1:9b:f4:91:ee:ab:be:6f:46:
3b:37:43:71:cb:dc:8f:3e:52:ff:0d:e1:21:2c:6c:13:78:81:
f7:ac:52:09:85:33:05:5b:61:cb:92:a5:de:f9:98:ef:e5:e0:
85:47:81:ac:52:2b:7d:be:8d:68:4b:03:93:e0:dc:9c:fa:31:
8c:a0:c9:e2:75:49:4f:b1:4f:14:b9:a7:4e:9f:bf:7b:64:00:
b3:17:db:b4:a6:6f:c2:f4:36:8b:5f:1c:dd:97:d5:83:3b:f7:
c1:62:37:bb:f2:13:76:81:1f:2a:d0:41:c4:ce:86:44:5e:38:
8d:25:ba:23:b4:9c:23:1a:f9:32:b0:78:2a:cc:78:f6:00:c1:
14:23:81:28:91:b8:c3:1d:36:b9:54:fe:06:e8:ea:68:ae:6a:
3b:cb:a3:2c:e5:74:f1:4e:68:74:e6:61:31:47:06:f4:0a:b0:
4f:37:bb:63:83:1c:80:a1:e4:5c:3a:2f:91:c7:0a:96:65:ba:
9b:3c:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:09 2026 by rpki-client