Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/evI3xOrC7T29svK6Vu2UFTtu7qs.roa
File: evI3xOrC7T29svK6Vu2UFTtu7qs.roa (raw, json)
Hash identifier: vbp7FMoDnpgP89lz7+NHQJX0vnnXIwhU3nPpcKP/yjI=
Subject key identifier: 7A:F2:37:C4:EA:C2:ED:3D:BD:B2:F2:BA:56:ED:94:15:3B:6E:EE:AB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DCF07DDAAE9F990097878054B70D797AE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/evI3xOrC7T29svK6Vu2UFTtu7qs.roa
Signing time: Mon 27 Apr 2026 13:01:32 +0000
ROA not before: Mon 27 Apr 2026 13:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:dd:aa:e9:f9:90:09:78:78:05:4b:70:d7:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 27 13:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7af237c4eac2ed3dbdb2f2ba56ed94153b6eeeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:d4:57:43:2b:00:0f:50:8d:b5:91:73:29:
98:1b:f0:0b:6c:05:6c:6d:ef:e3:7e:31:ed:90:25:
dd:18:79:42:94:dd:fd:b2:a9:58:28:ef:a6:54:04:
1f:05:5b:51:5c:4c:70:03:d8:94:2e:bb:af:49:e3:
e6:d5:3b:b2:6d:f4:f7:6a:b2:3e:6b:ac:11:7e:cb:
2c:26:f7:eb:09:e8:e5:2c:08:ea:9d:9a:85:12:2d:
07:dc:71:aa:86:c1:a3:ed:3b:c4:94:e3:30:88:4e:
4e:57:ab:d9:82:bd:95:70:58:79:34:20:06:c1:10:
15:84:09:e3:d1:9d:e7:12:f9:43:52:50:d4:c1:8b:
34:64:df:42:61:5f:84:ef:c1:18:71:e5:91:1b:d2:
96:ac:79:13:8d:ec:35:59:8b:41:3c:02:3b:17:ee:
63:b0:d9:dc:ad:f0:48:30:f8:d6:d4:81:f6:2c:27:
c5:f8:8d:f1:8d:9d:7d:17:89:d1:58:d4:50:0b:ea:
5d:7c:13:50:0d:f0:46:cb:47:3d:50:d2:d2:10:69:
52:dd:ef:5c:08:0d:4d:f6:bc:5e:29:73:38:0c:0b:
d9:60:a8:a1:58:2a:e6:db:ae:17:f0:ee:a0:df:ba:
62:c5:fe:e2:dc:e3:5b:59:b4:30:69:99:14:70:c9:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:37:C4:EA:C2:ED:3D:BD:B2:F2:BA:56:ED:94:15:3B:6E:EE:AB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/evI3xOrC7T29svK6Vu2UFTtu7qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
160.19.94.0/23
193.200.78.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:89:b8:ee:bd:9f:ac:d9:d7:a0:a6:bd:a9:34:bc:27:b3:10:
22:97:54:aa:f9:14:79:4d:50:b5:e0:20:8c:04:7f:2c:67:5d:
92:49:e0:7b:24:50:b3:b4:48:ba:62:07:83:32:ed:db:7a:42:
4b:6c:0e:eb:86:02:56:cb:cc:c6:9b:dd:10:ec:7e:31:fb:24:
cd:72:4a:f1:b7:11:3a:e3:57:24:6f:1a:b3:cd:18:f8:a7:c2:
9d:78:0e:05:99:84:b1:36:6c:39:d3:d6:05:ba:8a:7c:11:9b:
c1:9e:08:da:bc:b1:e7:21:24:b2:1d:23:d0:ce:86:cd:b9:0e:
b4:d8:00:f7:0d:c2:d0:7c:9c:48:f6:74:c1:35:26:e2:ae:dd:
1a:b1:18:d8:b9:4a:4a:c3:ef:9d:e4:f2:66:27:47:8e:b9:07:
63:d5:e0:2a:b1:fb:ba:fd:ae:76:22:79:45:38:c6:b7:da:86:
13:ff:ec:39:ed:77:fe:b6:c8:87:a6:f3:6b:48:c9:98:44:5e:
d0:9c:f5:a4:97:62:e0:d7:34:b6:c6:7f:bd:f5:67:c9:3a:0d:
9a:f7:2e:90:9b:93:01:bc:bd:9f:10:8c:8a:47:42:4a:9d:80:
04:91:d9:70:37:aa:79:7f:12:93:48:43:00:9d:fa:4f:65:96:
70:60:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:45:39 2026 by rpki-client