Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sg6470TQaLAr-tAqbq-_zft7VTM.roa
File: Sg6470TQaLAr-tAqbq-_zft7VTM.roa (raw, json)
Hash identifier: KyoE0iPuBZshlrYbYFHpGM2Z/abVoRBD1yw+mA9TZ5Q=
Subject key identifier: 4A:0E:B8:EF:44:D0:68:B0:2B:FA:D0:2A:6E:AF:BF:CD:FB:7B:55:33
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A168BACA3E61284342DF9AC9E32A8930E7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sg6470TQaLAr-tAqbq-_zft7VTM.roa
Signing time: Fri 23 Oct 2026 12:27:14 +0000
ROA not before: Fri 23 Oct 2026 12:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32693
IP address blocks: 80.244.15.0/24 maxlen: 24
209.216.0.0/22 maxlen: 22
209.216.8.0/22 maxlen: 22
209.216.16.0/22 maxlen: 22
209.216.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:ba:ca:3e:61:28:43:42:df:9a:c9:e3:2a:89:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 23 12:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a0eb8ef44d068b02bfad02a6eafbfcdfb7b5533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:52:e8:c8:29:71:fd:f3:82:82:af:f5:11:
8f:a1:17:ac:bb:75:61:5b:4f:25:85:d3:4e:df:b4:
a9:5c:74:92:37:42:21:7b:7a:f5:69:37:82:a6:0d:
bd:8c:d7:cd:0f:1d:b3:8a:8c:af:a7:9b:c1:e0:5c:
6c:5f:c5:71:a0:85:d6:63:e0:1a:27:e5:a9:c5:5d:
bc:71:d8:4c:d4:a4:b8:e8:b6:76:7c:af:35:74:72:
b9:7f:0e:3f:b6:1e:54:94:73:b5:c0:78:df:cb:ea:
8c:97:91:3f:80:7c:d2:a7:02:bd:b4:8e:cf:0c:83:
6d:fb:4f:70:73:84:3a:2e:40:a4:c4:35:c0:5e:3f:
50:d0:be:2f:14:61:46:33:76:14:85:83:5c:5a:d9:
d2:44:3f:46:62:36:6e:d9:1d:d8:5d:ab:f1:dd:fc:
4f:da:d8:d2:13:80:4f:e7:d7:7e:23:3f:ca:8a:38:
3c:7c:00:97:a8:d4:7a:b3:e7:04:d1:32:97:27:af:
5c:c8:62:97:36:97:23:87:8a:f1:b7:18:a1:5f:d3:
8f:ec:f1:0e:0c:d1:97:e7:e7:64:35:39:59:a9:34:
f0:38:08:43:dc:44:7a:15:ea:5f:dd:8a:56:1e:d0:
6a:bc:9e:71:be:50:b2:6f:58:38:da:6f:22:b5:46:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:B8:EF:44:D0:68:B0:2B:FA:D0:2A:6E:AF:BF:CD:FB:7B:55:33
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Sg6470TQaLAr-tAqbq-_zft7VTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.15.0/24
209.216.0.0/22
209.216.8.0/22
209.216.16.0/22
209.216.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:35:2f:06:3e:be:7b:c7:04:ca:97:2b:d7:ad:a5:f4:5a:47:
64:b6:74:cb:3d:90:b4:9c:5b:98:e8:7e:ad:61:8a:af:d3:d5:
78:ab:9b:03:41:df:70:4b:5a:b4:03:1f:f1:ce:ea:6f:24:c4:
2d:51:99:c6:cf:87:37:7a:43:a5:61:bf:54:45:cf:a0:1d:3a:
ec:2f:04:3b:93:b4:ec:fe:49:8f:71:59:92:1c:06:12:49:82:
89:6c:02:e9:e4:bc:c0:7a:14:71:8c:9e:1f:05:af:7f:1b:7c:
d0:c6:16:98:64:d0:49:9b:cf:f9:3c:6f:ca:e6:79:39:61:0d:
13:b5:d5:93:ec:4b:51:a2:b2:ac:dc:42:f8:d5:8b:66:48:30:
b6:d6:58:ed:02:88:73:88:d7:fa:2b:bb:4d:e4:26:f0:55:71:
ca:db:97:15:15:b7:06:bb:e7:db:8e:ed:55:8f:67:8b:b1:98:
19:1e:0e:92:9d:1f:bf:7a:bb:30:cc:d2:34:00:8f:4e:1b:f3:
b8:a5:19:89:9d:23:63:e9:ff:14:27:d1:db:a0:0e:03:f4:f7:
06:9c:da:b6:ff:d9:f9:a3:be:e2:93:44:a0:79:0d:5f:69:23:
72:c3:2e:9b:ba:a4:d0:c2:9a:df:2d:cf:3b:ed:0b:f0:89:0f:
5e:82:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:46:48 2026 by rpki-client