Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLpP4c-WZCeiR-vpI5GwebdK76s.roa
File: bLpP4c-WZCeiR-vpI5GwebdK76s.roa (raw, json)
Hash identifier: cpDMyto4MMVGuqP0FaF/vVHZqeWtkt26UKGQrwDIyBE=
Subject key identifier: 6C:BA:4F:E1:CF:96:64:27:A2:47:EB:E9:23:91:B0:79:B7:4A:EF:AB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A043EE5C5AC8D3220C090A178754113959
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLpP4c-WZCeiR-vpI5GwebdK76s.roa
Signing time: Thu 27 Aug 2026 15:54:49 +0000
ROA not before: Thu 27 Aug 2026 15:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a14:1100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 14:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:ee:5c:5a:c8:d3:22:0c:09:0a:17:87:54:11:39:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 27 15:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cba4fe1cf966427a247ebe92391b079b74aefab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:a6:f6:b1:1d:35:83:5e:54:c4:1f:96:01:
99:d5:17:52:55:19:af:5d:4b:5c:42:69:13:9c:5c:
02:8d:8c:2e:aa:4f:24:3c:19:36:84:e0:b1:fa:7d:
69:18:f0:6e:c4:ab:19:57:6c:a0:a6:3e:32:a1:98:
c3:60:ec:23:1a:34:f6:e2:1a:ed:17:90:67:a8:ca:
9f:97:2d:48:87:f5:ff:46:db:b6:81:17:69:ec:76:
38:5d:93:6b:e3:1c:5f:5f:98:ef:f9:0e:e3:d7:3b:
63:cb:de:3d:32:fe:28:28:86:96:1c:ca:16:42:b6:
31:d6:43:44:92:10:59:9d:82:8f:64:2b:f7:6f:07:
a9:4c:c0:86:b7:1e:2f:a2:82:eb:4b:25:49:e8:51:
ac:22:ed:a3:2f:f8:42:5f:41:f3:98:aa:20:ef:d8:
f7:74:be:a2:ae:42:b9:9d:19:e4:34:ee:f4:19:85:
96:7e:79:89:6f:ef:24:29:ae:e1:28:98:4e:76:01:
7b:d2:3f:a3:5f:24:34:a5:e7:19:43:90:e2:06:77:
9c:40:fd:69:d1:ac:55:30:cb:68:26:ed:84:81:de:
cb:4f:ab:51:86:4c:d9:ce:dd:66:ff:b6:6b:fd:80:
c3:15:41:7a:77:8d:67:58:4c:4d:e6:cc:57:b9:be:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:4F:E1:CF:96:64:27:A2:47:EB:E9:23:91:B0:79:B7:4A:EF:AB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bLpP4c-WZCeiR-vpI5GwebdK76s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a14:1100::/29
Signature Algorithm: sha256WithRSAEncryption
ab:73:dc:6f:fe:2e:f5:da:de:80:ce:01:79:38:9b:13:fe:51:
88:30:c0:bf:92:cf:c5:4e:37:15:9b:e8:2b:3a:ce:0b:30:46:
96:e2:40:60:b2:3c:01:c3:70:90:2b:d9:9f:29:2d:32:8d:12:
6a:39:86:d1:af:16:4a:aa:4c:7d:07:3a:13:c1:fd:1d:23:86:
c9:50:a6:1a:a5:b9:b0:ee:14:7e:01:fc:e1:a0:e1:10:64:00:
d9:42:5f:5f:9f:24:24:f9:0d:5d:68:cd:07:02:7a:54:40:6e:
eb:9a:1a:4d:ff:21:2c:46:a9:99:3b:98:65:03:7a:cb:1a:75:
98:66:3a:3c:d5:bf:05:cb:a8:00:05:13:e8:80:34:56:29:94:
0a:f7:20:45:f4:10:e5:1a:1d:39:f5:ff:6c:3d:3b:d4:3d:f1:
42:1b:5b:67:70:e9:a5:68:f1:2a:6f:06:72:ff:91:14:be:11:
f9:8e:4d:37:f3:be:0a:3e:fd:a2:ce:b0:4c:27:09:6e:df:8e:
ef:88:24:cf:5e:8f:8e:95:ea:dd:86:44:85:a4:f4:1a:a4:7a:
73:a7:34:26:e3:0f:6b:e1:ae:6d:a7:48:54:11:70:a5:de:50:
9c:c5:f7:4a:31:bd:05:c1:2e:95:38:7e:03:98:35:25:dc:98:
a2:f3:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:42:05 2026 by rpki-client