Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jnTCikBuo0XmWP73KjrVH52qeZ4.roa
File: jnTCikBuo0XmWP73KjrVH52qeZ4.roa (raw, json)
Hash identifier: QriHmWc1u9vsjO3YacT07KG3HByxdlTf/QopG1WSfLE=
Subject key identifier: 8E:74:C2:8A:40:6E:A3:45:E6:58:FE:F7:2A:3A:D5:1F:9D:AA:79:9E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DEC3A7D25F3CABFCCE32A60F113446A4C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jnTCikBuo0XmWP73KjrVH52qeZ4.roa
Signing time: Sun 03 May 2026 05:05:49 +0000
ROA not before: Sun 03 May 2026 05:05:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:3a:7d:25:f3:ca:bf:cc:e3:2a:60:f1:13:44:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 3 05:05:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e74c28a406ea345e658fef72a3ad51f9daa799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:09:b3:7d:c8:9b:93:03:14:04:63:75:12:
46:7b:44:5e:97:43:7f:f7:ee:27:a8:cc:2a:93:90:
a1:64:4e:fe:f9:c3:5f:29:05:58:82:d3:af:ec:eb:
76:a5:9f:97:38:1a:ed:b1:f3:b1:e3:b9:30:95:19:
50:28:e6:75:0e:29:0f:11:3c:10:4e:6b:97:44:3b:
4e:a3:48:cf:c5:7e:9b:35:05:c5:4a:88:69:0a:6d:
3b:88:81:b6:08:c5:9e:68:98:91:c5:dc:57:82:f9:
0f:5f:97:ab:cf:14:48:f4:f0:0f:02:6f:23:90:f4:
d2:5d:a7:08:99:d3:bd:05:c7:e3:66:29:e4:25:78:
43:70:93:5d:9c:4e:ab:24:0a:39:9e:bf:02:cc:8f:
ef:4d:e0:00:ff:e4:43:9e:cd:75:c7:cd:8a:b1:5f:
e8:62:ee:ff:98:f5:f2:b6:44:34:8a:d8:83:a8:6e:
8b:d3:f0:63:9c:4c:b8:fb:27:7f:a9:5d:f2:7e:11:
97:c9:ed:22:41:35:c6:f4:2c:1e:7c:74:39:9e:d8:
18:a3:75:ee:bb:a3:7b:f4:25:1a:ba:1d:52:fe:f8:
24:0b:8b:e1:6f:37:97:fe:4b:dc:e4:e7:73:74:08:
ed:86:78:e3:55:f9:63:e7:56:6d:74:bb:4b:a6:f0:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:C2:8A:40:6E:A3:45:E6:58:FE:F7:2A:3A:D5:1F:9D:AA:79:9E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/jnTCikBuo0XmWP73KjrVH52qeZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
160.19.94.0/23
193.200.78.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3c81::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
94:17:fc:db:a5:56:08:40:08:33:a8:96:bf:da:9c:d2:85:b4:
6f:48:d1:17:80:c8:aa:e2:e8:b0:cc:e1:31:b4:5c:0c:e6:26:
77:e5:ae:b0:36:4e:5f:8c:a1:d3:54:ed:02:f1:80:98:d1:46:
b5:b3:44:ff:04:ea:78:0c:14:8d:9e:b9:18:49:ab:95:47:e4:
7b:4f:8f:00:32:ee:7c:cb:ad:c9:da:43:a2:9a:08:9e:b3:7d:
99:8e:af:8d:5a:28:75:b5:36:9a:8f:5d:9f:96:f5:29:bf:ff:
c3:75:17:39:c9:84:1b:5d:d0:a0:37:f8:39:6c:b0:bf:ff:3f:
66:68:76:a1:ca:eb:2e:4a:48:64:2d:2a:61:39:b9:e2:13:b5:
f2:4b:51:b0:25:a5:b0:44:83:b9:7f:fd:27:0f:40:49:2e:f8:
cc:ba:dc:d1:45:2d:27:43:f1:59:1b:67:e7:2f:fb:6f:a3:79:
48:d5:18:10:70:ee:e5:e9:cf:38:5c:4e:fc:a8:75:ca:ba:1a:
f4:d0:65:f9:63:02:a0:ad:ac:78:aa:74:2b:e6:af:da:ba:8d:
7b:34:1a:e8:db:5f:83:ab:3e:da:a4:d8:2f:38:a9:5d:09:eb:
03:9d:51:f2:57:36:cc:8d:fa:92:a1:fa:e8:d6:ec:a9:e1:43:
89:43:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 09:33:02 2026 by rpki-client