Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gUJwZ-hiiMW-ibevyP8IsjX3a7s.roa
File: gUJwZ-hiiMW-ibevyP8IsjX3a7s.roa (raw, json)
Hash identifier: G1MXOPDahi8AcnQqeEPdBSjzuN34wqHjiqSJjjUMfyg=
Subject key identifier: 81:42:70:67:E8:62:88:C5:BE:89:B7:AF:C8:FF:08:B2:35:F7:6B:BB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F40CDE988BB70C8E0B253348D69846D2E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gUJwZ-hiiMW-ibevyP8IsjX3a7s.roa
Signing time: Wed 08 Jul 2026 08:17:44 +0000
ROA not before: Wed 08 Jul 2026 08:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 45.88.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:cd:e9:88:bb:70:c8:e0:b2:53:34:8d:69:84:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 8 08:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81427067e86288c5be89b7afc8ff08b235f76bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:39:56:5a:53:84:11:06:bf:a0:bf:12:ba:
ca:0b:a2:ae:90:a3:c5:33:6c:f5:4e:e8:1b:ba:20:
e8:ec:7a:dd:c2:2b:c5:fd:44:18:33:54:b5:6c:d5:
7a:e1:81:fd:26:a9:8c:ea:33:0f:54:79:27:75:52:
37:6a:71:ef:8b:e9:a1:57:fd:88:9b:61:e6:27:d2:
f7:30:6f:53:44:c8:d4:e5:21:27:58:a6:79:3c:9b:
80:48:2b:e9:8e:e9:0d:09:ba:6b:45:dc:2b:ea:ba:
c4:81:ad:49:93:97:af:6c:02:7d:6d:17:6f:75:0c:
f9:87:d8:81:23:5d:01:00:62:58:51:73:be:26:83:
70:39:22:06:98:6f:b0:51:69:e8:72:b7:66:e6:02:
75:4e:12:42:e2:4d:19:a4:85:9f:8a:f0:8e:f4:20:
6f:b2:43:4a:55:83:18:c7:7a:e5:c0:82:b3:1f:56:
f7:09:11:21:fd:16:7a:96:3f:16:15:d4:f2:13:27:
b1:ea:67:ed:29:b4:f3:64:72:d9:c0:a9:83:b1:51:
4b:b0:1b:ea:10:f4:1a:37:c2:8a:4a:cf:ab:9e:d2:
0f:81:c3:58:ec:27:86:35:62:c8:93:ce:be:56:8a:
9c:3b:9b:80:48:23:31:7c:cb:3f:42:1c:e5:e6:6f:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:42:70:67:E8:62:88:C5:BE:89:B7:AF:C8:FF:08:B2:35:F7:6B:BB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gUJwZ-hiiMW-ibevyP8IsjX3a7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:9b:51:1f:d3:58:72:b0:05:79:fb:f0:e8:65:77:68:b6:43:
21:d8:3f:d4:2c:b3:47:5b:74:db:ab:93:ce:8e:db:b3:aa:d0:
3f:7f:fd:02:a3:06:2e:6e:d2:30:0d:4e:22:b6:ce:da:1d:ec:
c4:7c:a0:9a:6a:a6:c4:c8:84:d1:72:e4:61:3b:6f:65:ef:bc:
2b:cf:8e:df:c7:89:4a:7a:d0:5f:0c:12:db:ca:db:d0:2d:62:
0f:36:1f:19:a2:c9:f7:ca:4d:f3:ff:82:49:03:87:53:37:f0:
f4:67:6d:16:e3:ad:fd:59:52:bd:e4:71:10:f8:49:4b:13:7b:
a5:20:eb:68:19:79:04:ea:3b:02:7c:a0:9a:2d:4d:5f:ca:1a:
7e:75:34:5f:48:0f:66:13:77:ef:75:6c:4a:b4:c5:d1:8a:2d:
68:63:2f:85:56:bc:3d:67:f1:88:8b:00:da:42:06:d7:4d:62:
5d:1b:53:1d:4a:91:be:0c:7b:f8:12:56:dc:1a:42:0d:56:fa:
35:8f:6f:01:13:8d:45:10:05:09:b7:be:85:b2:f6:7c:94:ba:
a9:7e:f0:76:59:eb:53:c2:91:1c:6f:80:95:47:4c:62:b3:f9:
7d:2f:75:b9:01:6f:af:a4:c8:a3:02:a7:09:90:c0:41:61:cc:
2e:c7:9f:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9AzemIu3DI4LJTNI1phG0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNzA4MDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTQyNzA2N2U4NjI4OGM1YmU4OWI3YWZjOGZmMDhiMjM1Zjc2YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWg5VlpThBEGv6C/ErrKC6KukKPF
M2z1TugbuiDo7HrdwivF/UQYM1S1bNV64YH9JqmM6jMPVHkndVI3anHvi+mhV/2I
m2HmJ9L3MG9TRMjU5SEnWKZ5PJuASCvpjukNCbprRdwr6rrEga1Jk5evbAJ9bRdv
dQz5h9iBI10BAGJYUXO+JoNwOSIGmG+wUWnocrdm5gJ1ThJC4k0ZpIWfivCO9CBv
skNKVYMYx3rlwIKzH1b3CREh/RZ6lj8WFdTyEyex6mftKbTzZHLZwKmDsVFLsBvq
EPQaN8KKSs+rntIPgcNY7CeGNWLIk86+VoqcO5uASCMxfMs/Qhzl5m+DLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIFCcGfoYojFvom3r8j/CLI192u7MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZ1VKd1otaGlpTVctaWJldnlQOElzalgzYTdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLViSMA0G
CSqGSIb3DQEBCwUAA4IBAQA/m1Ef01hysAV5+/DoZXdotkMh2D/ULLNHW3Tbq5PO
jtuzqtA/f/0CowYubtIwDU4its7aHezEfKCaaqbEyITRcuRhO29l77wrz47fx4lK
etBfDBLbytvQLWIPNh8Zosn3yk3z/4JJA4dTN/D0Z20W4639WVK95HEQ+ElLE3ul
IOtoGXkE6jsCfKCaLU1fyhp+dTRfSA9mE3fvdWxKtMXRii1oYy+FVrw9Z/GIiwDa
QgbXTWJdG1MdSpG+DHv4ElbcGkINVvo1j28BE41FEAUJt76FsvZ8lLqpfvB2WetT
wpEcb4CVR0xis/l9L3W5AW+vpMijAqcJkMBBYcwux59A
-----END CERTIFICATE-----
Generated at Sat Jul 11 08:03:35 2026 by rpki-client