Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3sd5cFxLUUUjl4DF4r2M6h0FOE.roa
File: R3sd5cFxLUUUjl4DF4r2M6h0FOE.roa (raw, json)
Hash identifier: Da93leDV8e/PFctZKpcVGoLpAo8Ok55PjiwcD4urMOU=
Subject key identifier: 47:7B:1D:E5:C1:71:2D:45:14:8E:5E:03:17:8A:F6:33:A8:74:14:E1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E45C4AB3D3FB862C3E24F4C99D06BC198
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3sd5cFxLUUUjl4DF4r2M6h0FOE.roa
Signing time: Wed 20 May 2026 14:22:57 +0000
ROA not before: Wed 20 May 2026 14:22:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:c4:ab:3d:3f:b8:62:c3:e2:4f:4c:99:d0:6b:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 20 14:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=477b1de5c1712d45148e5e03178af633a87414e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:0f:36:08:5b:ab:4e:34:ad:20:19:a0:b2:
e3:42:45:ce:c3:14:e6:0c:ef:68:2e:a6:88:f3:85:
e8:98:51:ad:ac:2e:2f:f6:55:59:4c:2f:68:5f:da:
0d:ee:27:bb:82:29:f3:7b:1a:69:84:38:32:df:c3:
18:f7:48:89:ad:ab:08:2e:ed:dc:be:6f:e9:2c:f6:
53:98:ce:89:2e:0c:a9:bc:69:40:73:50:2e:4a:d9:
d3:66:f1:bd:57:43:55:5e:2f:27:78:c1:4c:cc:9e:
91:f1:b5:c3:b2:35:12:71:85:44:11:ee:fc:53:0d:
28:db:c1:94:ec:bd:4a:43:7b:ba:98:8f:30:6d:12:
c4:ff:86:06:57:a5:3b:29:7a:07:20:35:cc:c3:79:
1f:17:fb:cd:fe:90:b6:a7:ed:ad:ae:0f:71:32:73:
41:5d:90:73:e1:0e:1c:12:87:6c:f2:90:10:83:d8:
74:2b:fa:69:54:a4:91:44:15:86:e8:45:88:71:b8:
fb:88:bb:eb:bd:8f:06:31:16:f3:82:1c:6c:f2:46:
2d:fa:be:5e:fd:b7:e9:4d:9b:23:26:ff:1c:65:19:
d6:aa:7c:dc:f9:6b:f2:7c:94:d4:62:91:e4:5d:a8:
54:5d:5f:5d:ff:53:aa:77:ac:3e:65:1b:fa:bb:c7:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:1D:E5:C1:71:2D:45:14:8E:5E:03:17:8A:F6:33:A8:74:14:E1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3sd5cFxLUUUjl4DF4r2M6h0FOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
160.19.94.0/23
193.200.78.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:1100::/32
2a14:1103::/32
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
c0:7e:32:5f:fd:ff:53:2c:2e:f2:59:39:a2:53:64:3e:9a:76:
d4:d7:72:e1:87:65:cf:4f:b1:30:e4:f9:eb:98:d2:45:eb:fc:
9a:c6:d6:c5:75:7b:ad:97:19:7c:80:2c:e2:34:40:e5:bb:e5:
6b:9d:9b:2c:bb:93:2d:5c:4d:94:24:e6:00:8c:d5:d4:64:6c:
65:e1:5e:60:ae:f4:4b:6c:b5:41:5e:d5:7c:20:1e:73:a0:b7:
5b:3e:53:aa:f0:18:f5:6e:80:48:15:d6:50:b8:58:4a:33:c3:
c4:90:17:64:22:ca:77:61:8e:2b:2c:4c:fc:7c:ce:2f:c5:9f:
c1:ea:cb:96:da:7e:99:03:33:fc:b4:99:2e:d8:52:f5:46:50:
f9:7f:b2:1c:cc:2b:37:ed:d6:65:03:dd:9f:08:1a:f4:58:a1:
e1:34:94:e9:b6:cd:a6:1c:dd:d5:f9:3b:03:d3:0a:8c:5c:2f:
4c:59:a8:83:a3:c6:e7:41:71:b3:57:e1:8e:94:00:64:d3:a0:
2b:c6:aa:43:24:ff:49:e6:61:70:f0:96:03:88:65:d2:df:b8:
87:32:96:23:69:a7:31:d8:19:02:de:96:71:7f:48:e5:d1:6f:
06:95:c6:98:82:20:67:94:fa:b1:c7:b3:d0:60:aa:0e:89:87:
1a:b4:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 01:33:59 2026 by rpki-client