Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeUZLDtBVcO9L8HApfeCG9QP1_g.roa
File: VeUZLDtBVcO9L8HApfeCG9QP1_g.roa (raw, json)
Hash identifier: P3THE33HsR1dqZmB+VHDGCqagawz969pdOpdPFZa+dU=
Subject key identifier: 55:E5:19:2C:3B:41:55:C3:BD:2F:C1:C0:A5:F7:82:1B:D4:0F:D7:F8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EBB6EA7D199FD57D5A16BA3F0290F5308
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeUZLDtBVcO9L8HApfeCG9QP1_g.roa
Signing time: Fri 12 Jun 2026 10:44:11 +0000
ROA not before: Fri 12 Jun 2026 10:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 194.15.150.0/24 maxlen: 24
194.26.235.0/24 maxlen: 24
212.52.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:6e:a7:d1:99:fd:57:d5:a1:6b:a3:f0:29:0f:53:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 12 10:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e5192c3b4155c3bd2fc1c0a5f7821bd40fd7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:2e:66:da:ed:ba:8e:de:76:4a:15:98:80:
82:eb:8c:33:e5:45:19:38:48:d3:7f:80:3a:e2:37:
80:95:b1:d8:e6:eb:8d:70:34:d5:f9:38:5d:c9:8d:
e5:4a:b5:13:be:90:b3:cf:af:e4:07:25:60:cd:32:
5a:f4:dd:cc:0a:44:df:6c:6f:8c:08:c0:f4:b4:e2:
e0:1d:b6:29:f0:ce:96:ff:19:2f:cf:a4:87:77:7b:
7d:1f:37:31:d9:c5:b6:a8:cd:35:e0:8f:69:02:c1:
9f:60:b2:a4:46:e9:c5:d2:9b:b6:be:a2:a8:65:9b:
3f:34:f6:78:2f:fa:80:6f:52:65:c8:22:a8:11:52:
79:a9:3e:b9:71:33:e2:1b:26:aa:4e:72:8d:a2:a7:
69:51:22:d5:7b:6f:fa:d3:a2:f5:64:63:e9:a9:92:
ae:67:32:83:ff:e6:7d:60:87:c7:c1:b5:73:2a:a4:
60:f2:8f:03:6e:eb:91:b2:02:3c:9d:a6:1e:f4:15:
5b:32:18:b2:8f:01:af:4a:7e:bd:fe:7d:3c:23:6d:
5a:42:33:06:0b:c9:0c:c8:4d:7a:54:28:a6:c9:0f:
5f:0f:c2:f7:d9:77:68:9e:91:c2:68:c6:f0:95:69:
20:33:9b:42:97:11:ea:4f:25:d6:f0:93:d7:fb:f2:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:19:2C:3B:41:55:C3:BD:2F:C1:C0:A5:F7:82:1B:D4:0F:D7:F8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VeUZLDtBVcO9L8HApfeCG9QP1_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.150.0/24
194.26.235.0/24
212.52.2.0/24
Signature Algorithm: sha256WithRSAEncryption
80:aa:60:d2:5f:48:c1:ed:83:1b:b6:5b:ff:84:85:9d:53:f7:
88:ee:47:24:cd:8c:ec:3b:a4:06:44:81:34:8e:2a:2a:cc:9d:
79:c0:92:a7:72:39:a9:52:31:15:fe:2b:ae:fb:b1:6b:d3:90:
87:4e:a9:f7:53:7d:51:ed:f3:69:e2:eb:87:2e:df:7a:37:14:
9e:6b:af:52:a7:5d:14:8d:04:83:61:b7:8a:49:f3:0d:24:31:
53:fc:9a:a4:eb:7b:0b:9f:8d:c4:34:e4:57:28:7e:16:b2:a3:
8e:50:35:35:92:7e:6b:e8:e6:5b:84:c1:0c:63:19:2a:cb:f7:
cf:32:cc:a2:f6:c4:73:9e:ab:0a:7a:90:30:d9:62:ad:da:d1:
ce:8f:80:e9:ff:ab:40:70:2b:0c:20:b7:b1:b2:f2:e4:ba:a4:
c2:85:a2:bc:63:c4:c4:c2:ea:fb:22:c7:36:d2:be:1f:b5:23:
0a:7f:99:e3:c0:c7:b7:42:7b:89:5b:72:cd:f6:2c:d0:18:fc:
67:79:c3:91:e8:db:d4:78:7a:93:dc:2e:3e:85:a8:23:1d:56:
a9:4b:ce:c2:b7:94:85:fd:e1:54:7e:50:2a:ff:78:dc:aa:29:
79:a4:2b:7d:6a:f3:1e:79:8f:0e:ce:ea:33:ef:3e:07:4b:ea:
0d:17:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:30:53 2026 by rpki-client