Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b72d80xkFb_T6UvCZlekcz1GfXQ.roa
File: b72d80xkFb_T6UvCZlekcz1GfXQ.roa (raw, json)
Hash identifier: R5zR6kwKUVk09A3XHJ0UNLUQs+/GYX99Ol1ywR45bH4=
Subject key identifier: 6F:BD:9D:F3:4C:64:15:BF:D3:E9:4B:C2:66:57:A4:73:3D:46:7D:74
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A05E660A71A7FCB0654D1A6ACF15341B4E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b72d80xkFb_T6UvCZlekcz1GfXQ.roa
Signing time: Tue 01 Sep 2026 19:15:40 +0000
ROA not before: Tue 01 Sep 2026 19:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 45.155.64.0/24 maxlen: 24
80.244.15.0/24 maxlen: 24
94.103.187.0/24 maxlen: 24
94.231.215.0/24 maxlen: 24
176.118.33.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:66:0a:71:a7:fc:b0:65:4d:1a:6a:cf:15:34:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 1 19:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fbd9df34c6415bfd3e94bc26657a4733d467d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:f6:8e:3f:4a:09:be:73:c7:42:24:22:ac:
87:28:20:bb:05:83:48:1f:59:20:7c:9b:ca:6b:dc:
a5:12:58:6a:59:e7:4a:3e:c7:da:2c:b6:93:ee:9f:
5d:ed:03:40:11:78:4c:8d:13:4a:92:2e:e7:6b:6c:
55:43:7a:2f:8f:a6:83:c4:01:9e:29:bf:a3:2f:89:
92:96:8e:12:de:0f:7e:43:29:ee:76:42:b6:76:ca:
7f:52:37:f1:a5:67:82:ae:d3:7b:0d:85:72:0b:0a:
cf:8e:0c:cd:0f:ba:6f:ff:ac:ce:57:aa:e7:20:77:
42:60:41:a7:9c:23:9d:ba:6c:ac:d9:83:c5:fe:55:
fc:f0:9c:f8:80:04:f3:eb:f0:19:30:cb:55:f2:ed:
df:02:2f:69:25:ef:3c:f0:4c:ef:ce:93:87:92:21:
05:e6:bc:7a:87:cc:ec:8c:d3:84:ca:68:5b:a0:b3:
78:5a:ce:22:e3:70:d9:f7:f7:60:88:74:46:6a:28:
dc:93:42:20:33:46:63:87:5b:bf:65:c3:d6:aa:55:
eb:8d:32:b6:f2:8d:29:18:a4:a1:d8:92:d0:92:56:
45:c6:99:0c:1c:62:9a:6b:4c:e0:dd:46:2c:a4:22:
45:9b:c5:ac:a2:70:ac:fa:90:dd:9e:e3:d4:d4:b1:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:9D:F3:4C:64:15:BF:D3:E9:4B:C2:66:57:A4:73:3D:46:7D:74
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b72d80xkFb_T6UvCZlekcz1GfXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
80.244.15.0/24
94.103.187.0/24
94.231.215.0/24
176.118.33.0/24
185.244.106.0/24
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
97:58:7a:57:f1:da:bc:82:ec:ee:2f:ba:6e:d7:ac:ea:69:7b:
4f:71:ca:49:32:ed:2c:6a:08:6d:9d:f6:e4:57:bc:6d:73:bb:
99:56:91:a3:52:c5:b9:a5:0a:55:0a:1f:fd:cd:63:8c:b0:c3:
28:fc:82:1a:f7:69:66:7b:5a:f8:4e:69:f8:c1:06:7b:a3:89:
59:e7:b9:e2:cc:eb:10:ab:33:07:95:1b:f0:d0:36:e5:d7:8d:
a2:da:25:52:b4:ee:c3:57:20:27:47:68:e8:3e:69:a2:90:0b:
3c:5d:dc:86:89:fd:96:e7:e0:df:c9:0e:a4:91:a8:31:df:3a:
b8:b4:1d:b9:36:0e:cf:e5:a0:1e:c4:90:17:49:3a:23:53:3f:
4e:46:2b:d0:ec:4f:47:e7:3b:1b:e7:70:51:ad:af:47:42:6f:
75:36:74:e5:26:e5:68:71:48:93:09:c2:76:eb:a2:f5:8f:40:
c8:89:2f:22:cf:96:51:6b:cc:13:dc:ee:68:c8:d5:08:4b:d0:
ee:99:4d:ea:fd:1d:f5:1e:21:e0:32:c6:2b:27:bb:91:b6:c2:
94:35:f8:dd:e2:f5:d3:c4:21:6a:17:fe:81:a7:6f:97:97:22:
52:12:b5:86:41:4c:d7:87:72:64:9e:b3:54:51:49:d7:44:91:
26:d6:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:05 2026 by rpki-client