Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Uql4-JfEJX3A7VeHEMnSY9y94SQ.roa
File: Uql4-JfEJX3A7VeHEMnSY9y94SQ.roa (raw, json)
Hash identifier: c5q8IGcpagu8v/ZeyuGNewIcumoIrygzrYZ4GQELS9s=
Subject key identifier: 52:A9:78:F8:97:C4:25:7D:C0:ED:57:87:10:C9:D2:63:DC:BD:E1:24
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EAADED9B162CAC2D203A28209907B4798
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Uql4-JfEJX3A7VeHEMnSY9y94SQ.roa
Signing time: Tue 09 Jun 2026 05:33:11 +0000
ROA not before: Tue 09 Jun 2026 05:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Jun 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:de:d9:b1:62:ca:c2:d2:03:a2:82:09:90:7b:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 9 05:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a978f897c4257dc0ed578710c9d263dcbde124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:22:95:83:cd:5c:28:25:73:65:05:92:49:
9a:ce:b3:3a:36:2b:11:b8:2b:8f:15:26:30:be:19:
be:c9:4d:c5:13:fe:88:ec:7b:21:71:ce:f7:65:dc:
f9:0d:2a:46:c0:ed:4f:dd:b3:56:d3:24:a3:58:e0:
24:81:6d:35:81:31:af:13:bb:3c:20:07:90:ab:63:
6f:f6:79:96:60:24:cc:fb:08:47:07:39:91:00:bb:
32:d8:34:67:f8:3e:34:12:73:61:52:e2:02:a1:5d:
b6:5d:35:ea:cc:ee:cf:64:0e:ae:6c:ea:2e:df:b0:
9a:f9:90:a5:74:dc:a6:af:22:5a:4a:04:dc:52:a2:
3d:40:96:72:dc:11:a6:ad:08:2b:25:8e:60:02:bd:
81:a1:20:ce:d0:95:8e:e7:02:b6:14:e9:c9:15:e4:
3f:4a:62:57:48:a5:9b:bd:08:2f:2d:cc:8c:07:ee:
a7:61:fa:00:31:e2:46:34:34:59:e3:37:ae:a2:98:
c1:a5:46:8e:52:78:d5:de:ff:09:2a:2a:18:b7:ba:
29:79:69:6a:0e:0f:d3:29:b7:3f:fe:c5:ca:91:89:
31:cc:93:d2:f0:0a:b7:49:b3:95:87:18:c0:5f:e9:
26:88:a7:0d:50:ca:fd:ca:dc:0b:02:02:a7:99:62:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:78:F8:97:C4:25:7D:C0:ED:57:87:10:C9:D2:63:DC:BD:E1:24
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Uql4-JfEJX3A7VeHEMnSY9y94SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
193.200.78.0/24
194.26.215.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:b40::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:1100::/32
2a14:1103::/32
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
27:94:2d:a9:f3:f6:f8:a1:c9:6b:9f:99:f3:68:05:eb:da:f3:
32:02:1e:f6:65:95:38:3c:84:9e:fa:ca:10:29:9e:64:9f:92:
9d:b6:fc:00:16:05:70:e1:46:4b:9d:fa:41:cd:92:3b:e1:ac:
53:95:6c:b0:bd:78:7a:9b:8b:56:09:d0:1c:3e:24:81:44:4e:
66:ce:c9:11:8d:9b:08:9f:7a:e4:5b:26:d3:e8:5e:8b:06:bc:
80:99:07:82:ba:c1:c3:d4:73:6e:09:94:5a:6c:67:71:e6:4d:
a4:5e:7b:5e:6e:1c:d6:19:5e:ff:49:5e:c4:a0:a8:4f:aa:be:
ee:40:32:28:1e:51:02:2e:02:f9:06:b2:3f:fb:62:d2:b5:af:
ee:95:07:c9:1d:61:40:34:01:b2:af:23:57:f0:e1:0b:33:4b:
52:1c:e6:1d:83:e6:3a:61:c2:8a:4a:34:ed:d6:4c:09:23:dd:
20:0a:60:15:8e:5a:28:a9:19:ff:e5:6a:cb:84:01:e0:22:4d:
06:e6:59:a4:2e:4c:ca:68:52:c4:a8:1a:0e:3d:48:cd:a1:50:
28:dc:48:61:7b:99:b1:54:58:bc:7d:17:da:91:14:8c:87:0a:
7b:32:3b:85:95:4e:19:9a:7c:30:ca:6f:1b:43:bb:0b:55:76:
d7:20:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 23:18:30 2026 by rpki-client