Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/filfZEQbsumh1pTMomdVz4-1RmE.roa
File: filfZEQbsumh1pTMomdVz4-1RmE.roa (raw, json)
Hash identifier: Ad4h+75FtM1aj6V6vecWAt54JHUEWJiNdSchfm9kP4g=
Subject key identifier: 7E:29:5F:64:44:1B:B2:E9:A1:D6:94:CC:A2:67:55:CF:8F:B5:46:61
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A15E4503BDB26D6C926993B45C28426F59
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/filfZEQbsumh1pTMomdVz4-1RmE.roa
Signing time: Wed 21 Oct 2026 11:42:23 +0000
ROA not before: Wed 21 Oct 2026 11:42:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 45.88.145.0/24 maxlen: 24
193.25.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:45:03:bd:b2:6d:6c:92:69:93:b4:5c:28:42:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 21 11:42:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e295f64441bb2e9a1d694cca26755cf8fb54661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:9d:2f:3c:3f:0d:6d:92:3c:68:ab:01:9e:
7b:c7:6b:c6:56:f6:12:e0:1a:b0:93:0a:1b:0c:1d:
b3:22:42:82:fd:4e:c1:67:ec:8e:4d:28:c8:9b:00:
fc:65:d9:d9:0e:6b:ca:3d:c5:5b:6c:f1:a4:8d:99:
0b:eb:db:62:cf:70:33:63:42:87:a1:89:18:51:36:
99:a4:16:17:41:a4:28:84:b1:ed:8a:ce:4d:1a:fe:
23:57:72:09:41:20:2c:44:b9:8d:0c:5a:5c:7f:4c:
24:1a:61:79:ac:99:84:ad:74:79:33:2a:14:5f:a4:
8f:1f:4c:11:50:4b:b4:50:9f:81:b6:c2:fe:5e:14:
12:32:cf:ac:95:1a:41:70:0e:b7:03:7e:5d:59:aa:
2a:d2:01:01:81:c8:05:0d:26:44:25:42:99:5a:3e:
5d:e4:3e:ef:09:a1:3b:a2:12:d9:0a:8c:3c:0d:73:
c6:23:0d:c7:7e:5d:8b:14:02:bc:8a:82:3b:6d:23:
85:01:43:ed:b0:65:b7:24:97:9b:de:74:ba:3e:ab:
ad:a6:44:b2:0b:57:ef:ac:c6:de:42:a6:fc:59:d1:
09:26:eb:99:fc:ab:44:82:f6:fe:47:f7:65:94:dd:
7d:7f:68:58:53:b3:52:df:69:79:60:d1:a7:8c:ad:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:5F:64:44:1B:B2:E9:A1:D6:94:CC:A2:67:55:CF:8F:B5:46:61
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/filfZEQbsumh1pTMomdVz4-1RmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
193.25.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:84:1c:21:55:5f:f9:70:c4:9d:3b:b3:33:00:b1:7a:37:8c:
fd:9b:f9:6b:7f:8c:41:33:80:eb:cf:0d:2e:8c:4d:23:48:f0:
e0:01:ab:5c:67:b9:62:8d:b2:96:15:87:1e:9c:e1:e6:80:86:
17:03:06:56:8f:fd:ee:2a:6b:5a:26:a6:6a:b6:2a:4a:91:47:
27:8c:24:76:7b:50:4b:e5:76:67:84:32:a1:03:30:c0:3a:32:
8a:52:0b:70:a7:a0:13:71:98:e3:9f:89:e0:44:93:36:18:95:
a5:8c:f6:79:0a:55:38:e4:2b:92:5e:ec:91:8d:b9:b1:e6:a7:
07:aa:62:18:15:c3:11:6f:78:c0:a7:97:40:49:f4:e5:83:3c:
7e:1d:79:eb:4c:ed:70:c9:7d:52:cf:0f:2c:d5:8e:b3:80:1d:
0e:7d:83:67:fc:35:82:2e:a6:e8:a7:e1:09:d0:43:a2:a4:40:
d1:0e:ae:e7:86:d0:f3:2f:4c:0e:4e:59:b8:96:34:df:40:3b:
18:db:8e:3f:f0:3f:42:a7:03:03:be:65:40:96:d2:87:59:59:
10:4f:11:05:8b:68:9e:88:11:69:9c:f1:d6:55:bc:4a:f1:be:
f1:79:95:05:dc:72:c8:cd:30:5f:ce:9a:a3:54:20:10:13:49:
7b:3c:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:16 2026 by rpki-client