Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YBd1uHEzgziok6OzHHXOpvCW6Z8.roa
File: YBd1uHEzgziok6OzHHXOpvCW6Z8.roa (raw, json)
Hash identifier: 0kAyu5Kdun6qD9gX10wcs7Ri2PA9pM5svfHR2xAfziw=
Subject key identifier: 60:17:75:B8:71:33:83:38:A8:93:A3:B3:1C:75:CE:A6:F0:96:E9:9F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FEB12478F39D012FAA68C8DE3034A5939
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YBd1uHEzgziok6OzHHXOpvCW6Z8.roa
Signing time: Mon 10 Aug 2026 09:47:51 +0000
ROA not before: Mon 10 Aug 2026 09:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.88.145.0/24 maxlen: 24
185.224.2.0/24 maxlen: 24
193.25.166.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 09:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:12:47:8f:39:d0:12:fa:a6:8c:8d:e3:03:4a:59:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 10 09:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=601775b871338338a893a3b31c75cea6f096e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:fb:18:b3:1b:25:4a:47:b5:ed:c9:9b:f5:
ba:86:e5:35:36:4c:c9:ac:69:b8:14:43:f9:6b:c3:
af:6f:eb:34:5a:f2:07:94:3b:7c:9e:d3:3e:34:66:
ef:e9:3c:78:96:28:6a:a9:ed:dd:80:27:47:c3:47:
e2:53:a1:db:72:27:11:00:d7:5e:22:73:50:92:47:
db:b7:03:62:34:72:f0:68:d0:83:7d:42:39:ef:ce:
ed:fa:be:86:8c:10:f4:92:8f:e7:a1:93:bf:1b:b7:
4e:08:64:a7:69:b8:e8:31:8b:f2:a3:06:b9:ae:01:
69:4b:6a:1d:d2:c3:35:9e:bc:7d:6d:dc:99:90:e4:
6f:3c:7c:bc:34:f7:8a:1e:21:c9:50:65:49:b1:6b:
e7:14:bb:69:b3:5a:45:31:98:43:1f:d1:41:b0:90:
0d:e8:2c:f6:b8:be:57:c5:49:0f:c3:6d:3e:6f:62:
70:23:ee:e2:63:c0:98:79:2a:b0:6f:3f:52:a8:20:
aa:75:75:67:23:bf:b9:8f:20:82:28:91:b3:25:e3:
32:8a:48:14:e6:0f:81:c3:f7:70:a8:e0:fe:10:d9:
14:5a:dd:be:7c:a3:e2:e8:d1:8d:33:c1:e2:78:89:
de:47:fd:39:16:8a:3a:bb:63:e3:9e:f6:89:46:b5:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:75:B8:71:33:83:38:A8:93:A3:B3:1C:75:CE:A6:F0:96:E9:9F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YBd1uHEzgziok6OzHHXOpvCW6Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
185.224.2.0/24
193.25.166.0/24
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e5:e8:a6:c0:73:5a:bf:d1:de:3c:91:85:aa:d2:15:bd:8c:
19:27:30:39:1c:9d:48:cd:1d:05:a7:f6:89:01:67:ae:9f:ce:
60:30:b2:fb:35:6c:6a:74:d3:79:c1:8d:d8:80:d1:f1:0d:dc:
9d:7d:6a:d0:00:f2:81:25:57:22:96:dc:05:08:4d:ba:8a:f8:
50:92:70:eb:8f:2d:9b:f3:1f:44:07:e0:5f:aa:a2:85:10:46:
f3:6d:2f:0b:ef:4b:1c:e9:c3:d3:fe:fb:37:69:d5:2a:19:e7:
15:82:dc:f5:c6:13:26:9b:21:4a:9f:fc:6d:b5:1f:25:b2:ce:
fc:ff:b1:e2:ff:2a:3f:99:ef:16:c0:f8:32:d2:e9:d9:c0:ae:
a2:0f:06:3a:fe:30:d2:73:aa:0d:a3:7b:3d:2f:ef:a1:9a:83:
f8:eb:69:03:c5:3a:91:40:39:14:ca:d0:4e:1b:ff:68:cb:cb:
3d:a7:0c:34:90:35:6b:43:ac:29:34:94:1f:db:f1:7d:f2:85:
3f:90:a4:74:da:1b:c4:c6:ba:8a:eb:ad:6f:56:6c:a3:16:26:
c0:bd:de:9d:0d:50:94:a7:0f:70:99:17:42:c0:cb:19:d4:a2:
da:2f:fb:da:d6:e4:b7:ac:08:73:8d:a2:91:db:65:17:02:36:
df:a6:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 19:03:35 2026 by rpki-client