Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aF8UqBDaqNk6OfWPfuDFCXScu5o.roa
File: aF8UqBDaqNk6OfWPfuDFCXScu5o.roa (raw, json)
Hash identifier: G2+iG6kjJq5TasdDrBhkpVGXWCtZi+DSba+rUl/CmrM=
Subject key identifier: 68:5F:14:A8:10:DA:A8:D9:3A:39:F5:8F:7E:E0:C5:09:74:9C:BB:9A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1AE7789BE8159250481D9C1B18DDA9AC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aF8UqBDaqNk6OfWPfuDFCXScu5o.roa
Signing time: Mon 23 Mar 2026 13:34:30 +0000
ROA not before: Mon 23 Mar 2026 13:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:e7:78:9b:e8:15:92:50:48:1d:9c:1b:18:dd:a9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 13:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=685f14a810daa8d93a39f58f7ee0c509749cbb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:bd:d7:f5:57:bf:a0:a7:33:e9:ba:c0:58:
4a:94:38:c1:dc:ae:57:35:4e:c9:32:b2:59:92:b2:
69:2d:8b:fe:dd:92:1d:5d:27:30:4c:29:3b:09:bd:
dd:a4:f3:9e:72:1c:73:bf:61:36:21:76:51:26:cf:
3b:5d:f4:8a:92:1d:5b:41:44:f3:8a:3a:77:86:8e:
b9:ab:32:3c:7d:87:e4:1d:f7:21:d4:30:e3:36:08:
2e:cb:50:d0:5b:ab:c5:62:27:28:95:10:7a:2a:42:
d2:2c:8a:dd:f9:a8:00:ae:a3:c5:f0:8f:c4:a2:3a:
64:02:c5:2c:bf:8b:74:49:d8:2e:e6:68:6a:5c:6c:
e0:d2:6a:cd:2e:dc:e3:4e:7b:bb:81:69:da:f8:e8:
7c:d6:05:e8:3f:25:fd:ef:e4:50:77:74:5b:7f:68:
09:38:6b:f2:80:54:82:bf:a4:e3:f1:97:d0:d2:42:
8c:83:0b:8b:36:62:94:59:34:e5:a4:df:26:3f:fc:
ff:3c:ed:b7:f7:b8:2f:f9:cb:4c:49:53:44:c7:d9:
19:6a:0e:5b:7f:f6:ea:3a:65:c9:88:b4:2d:15:80:
55:74:7d:c9:dc:fd:aa:c4:93:8e:8e:ca:bf:c4:13:
20:01:0a:1e:1f:84:65:66:71:ef:db:92:4e:f9:5d:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:14:A8:10:DA:A8:D9:3A:39:F5:8F:7E:E0:C5:09:74:9C:BB:9A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/aF8UqBDaqNk6OfWPfuDFCXScu5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
Signature Algorithm: sha256WithRSAEncryption
36:cc:8a:91:b1:f5:60:58:5e:17:9f:fa:d5:23:fb:1d:24:29:
28:b9:f8:5d:3f:d7:3e:19:fc:1b:b5:cc:d1:6a:30:8e:f4:90:
2b:48:75:a7:dd:e3:bf:91:00:11:ba:33:be:95:5b:37:19:97:
99:a4:91:e9:45:9a:cf:12:d9:1e:52:dc:d3:f2:cf:d0:ec:b6:
37:3a:b1:2b:05:e7:65:7e:a5:ba:86:58:69:cd:dd:1a:a0:29:
a0:b9:1d:78:0c:53:ef:7c:c3:59:f3:50:36:53:13:2c:33:bb:
bc:1d:9e:e6:2e:d2:13:35:6f:b3:17:4a:7c:1b:93:3c:a7:a0:
e8:82:b7:53:09:43:5d:30:d7:57:94:f1:21:3b:a2:a9:ba:4d:
8f:fe:13:4d:b1:47:be:ad:e3:0d:b3:f0:d2:40:23:7a:4c:ea:
41:21:50:72:31:dc:0d:1c:ac:2e:d2:f1:ec:09:24:b3:08:77:
ab:da:98:dd:2b:38:e2:b6:3b:87:58:3d:68:c7:a0:9c:2b:fb:
0a:7a:bd:58:bd:2b:38:f5:0b:c8:33:8d:42:e4:73:d9:1c:dc:
62:b5:c4:da:c2:b2:92:9a:30:49:7b:e8:b1:a9:48:9b:ef:0c:
49:bb:d5:49:41:0b:86:99:42:20:f6:ce:60:41:e5:8d:ba:9b:
1b:e7:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:24 2026 by rpki-client