Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/c06qYYgLyh_K1LDLs8wAxDjXsWU.roa
File: c06qYYgLyh_K1LDLs8wAxDjXsWU.roa (raw, json)
Hash identifier: /vePR0Zb4oPggxgM/ps4A3SA5Qty9Kzrexk+Zf+4ADQ=
Subject key identifier: 73:4E:AA:61:88:0B:CA:1F:CA:D4:B0:CB:B3:CC:00:C4:38:D7:B1:65
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D59D247DA3FB44FE2025B1D8CACD0CFCC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/c06qYYgLyh_K1LDLs8wAxDjXsWU.roa
Signing time: Sat 04 Apr 2026 18:47:26 +0000
ROA not before: Sat 04 Apr 2026 18:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:59:d2:47:da:3f:b4:4f:e2:02:5b:1d:8c:ac:d0:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 4 18:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=734eaa61880bca1fcad4b0cbb3cc00c438d7b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:56:e7:58:9e:d8:30:61:8d:83:2f:a0:c0:
1b:ab:00:ff:a8:a4:37:6d:a1:57:dc:2f:7a:cc:98:
8a:a8:6a:e5:ec:d8:80:8c:1d:5a:05:50:f2:e3:cc:
65:0c:00:4b:b7:4b:cc:1b:52:fe:60:bc:66:db:50:
1a:54:ec:97:eb:23:de:85:0a:b6:ba:fb:03:ca:23:
34:47:0e:fb:72:64:49:a7:4c:6b:c8:7f:7b:0d:0c:
a5:8e:a4:1f:30:6a:0b:38:4e:5b:67:cd:60:1a:42:
99:72:48:f7:55:5e:9a:de:3c:fe:fb:9f:f5:bc:e8:
e8:53:2e:10:81:91:42:88:ed:9a:1b:cb:bc:fd:09:
38:c2:0e:e7:50:6f:0b:8a:2c:85:31:26:d0:d8:b0:
8d:4e:38:92:10:2e:b4:c4:89:cf:14:79:4b:a8:08:
bc:50:23:0c:d7:1a:b6:d3:6b:2d:28:c1:f4:29:d7:
f5:17:f5:9e:a0:ff:e4:47:d8:15:0b:ed:ad:9c:c7:
50:29:3a:90:3c:59:db:72:d1:98:42:83:1a:c2:ae:
84:61:3b:43:a8:4b:f8:37:b3:42:54:b0:3a:b8:12:
82:59:24:f8:97:6f:72:e8:5a:e5:d0:57:a4:8a:f8:
30:e0:ce:a9:99:ea:5f:ce:7a:5c:ab:9b:2a:aa:db:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:AA:61:88:0B:CA:1F:CA:D4:B0:CB:B3:CC:00:C4:38:D7:B1:65
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/c06qYYgLyh_K1LDLs8wAxDjXsWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:61:03:01:35:02:da:b0:99:ee:ad:0c:95:99:8c:93:5c:99:
3b:04:25:f3:e5:57:69:c3:68:df:4a:37:99:33:01:9d:07:19:
25:66:91:fa:55:07:eb:f2:6c:cd:d5:3b:f5:ed:5b:56:49:e5:
61:77:90:ef:97:03:78:06:48:c5:2c:51:6c:2a:38:34:20:72:
51:53:b8:3a:1b:db:e5:7b:20:1d:04:95:4c:50:32:a9:d1:a3:
a5:d7:94:e6:cf:85:c5:4c:8c:b3:cd:44:7a:b3:9c:bb:58:bd:
04:db:3f:6c:8a:68:4e:33:73:d6:93:46:f4:5b:b8:81:87:1a:
c1:00:f0:c3:1e:90:8b:70:e6:ba:ae:6d:7a:ad:cf:61:7f:8c:
8b:fa:d7:67:76:25:69:3b:c9:5e:9c:13:e6:51:ea:3c:9d:3c:
5f:d7:fd:8b:7b:0f:23:00:f9:8d:af:6c:b9:94:4e:23:37:cb:
4e:70:9f:a5:80:ab:b4:b3:2a:19:b9:f9:3c:c3:eb:76:96:fe:
e8:71:bc:28:3a:6c:f2:98:a1:98:87:02:09:78:ba:44:75:67:
70:02:f0:fa:f2:bb:4a:af:fa:a8:8f:ee:53:a8:e2:f4:be:52:
30:c3:d9:81:ba:c4:fc:15:17:63:90:18:cc:c2:ea:89:df:f9:
41:ec:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 13:42:52 2026 by rpki-client