Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRM_i8rKGeH_s_O6czK2cZoNCLQ.roa
File: oRM_i8rKGeH_s_O6czK2cZoNCLQ.roa (raw, json)
Hash identifier: X5nq+DFiAhm4+0L2HQXJdu2oU67o37aHXMj4QODAl3k=
Subject key identifier: A1:13:3F:8B:CA:CA:19:E1:FF:B3:F3:BA:73:32:B6:71:9A:0D:08:B4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EDF2DE90EFA0444B3B9BAEAD075E200F7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRM_i8rKGeH_s_O6czK2cZoNCLQ.roa
Signing time: Fri 19 Jun 2026 09:19:48 +0000
ROA not before: Fri 19 Jun 2026 09:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
91.198.95.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
194.9.119.0/24 maxlen: 24
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:2d:e9:0e:fa:04:44:b3:b9:ba:ea:d0:75:e2:00:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 19 09:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1133f8bcaca19e1ffb3f3ba7332b6719a0d08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:4b:53:bd:4f:e4:09:07:10:dc:fe:0b:cc:
bf:e0:cb:63:22:61:4d:a9:d9:f1:35:64:9f:cc:d0:
51:53:e6:dd:39:32:93:0d:ee:7d:ea:74:69:e0:b8:
2d:30:75:37:b5:06:b0:b3:e2:c0:63:fd:cc:1a:c9:
99:cf:0f:bc:69:f9:0f:ad:bc:cc:1b:7e:b6:97:41:
fa:94:01:9b:c3:6e:69:ce:60:ec:02:ee:75:4c:eb:
05:b8:30:60:2f:e0:84:c4:1c:11:6a:97:d4:24:ed:
bb:a1:b5:ea:a5:61:2b:d0:c9:d8:fc:80:b4:8d:2e:
14:42:85:2a:52:cf:06:c1:2f:af:79:bc:6e:26:e2:
d7:f9:3a:a9:52:e2:48:db:4e:a3:da:9c:70:e1:16:
f0:69:7d:c9:2d:5f:e6:57:38:6b:cf:a9:1c:a5:0c:
21:c1:65:bd:a6:7f:4b:58:23:7a:ae:71:76:70:22:
ca:a0:6a:34:8e:50:22:36:41:39:85:82:f9:94:fd:
63:4a:c4:f4:e4:1e:65:43:e5:0c:b2:bf:b1:41:7b:
a2:fd:9b:75:ae:c7:5e:d2:4e:19:7e:8e:43:ae:c9:
b9:58:72:9b:4c:31:f6:98:89:24:84:d5:0f:4d:59:
7c:56:69:be:61:c3:c3:b0:c4:c1:78:09:52:8f:a7:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:3F:8B:CA:CA:19:E1:FF:B3:F3:BA:73:32:B6:71:9A:0D:08:B4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oRM_i8rKGeH_s_O6czK2cZoNCLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
91.198.95.0/24
91.227.114.0/24
146.19.93.0/24
188.93.138.0/24
194.9.119.0/24
IPv6:
2a13:bb40::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
18:ce:4f:ec:f4:7b:f8:1d:d8:48:7c:f1:bf:2f:f9:26:94:67:
40:8f:e0:36:42:00:95:0e:1e:09:3a:e8:df:d8:ae:aa:d3:70:
4d:d9:0c:db:18:8f:02:4e:b6:05:f7:9a:19:a4:30:fa:44:38:
dc:fd:90:cc:9d:1c:a1:70:92:76:74:19:4c:35:9a:2d:1b:44:
16:15:ed:cb:79:35:47:a5:0a:49:c2:b9:b8:97:3e:2b:02:6e:
21:e6:d1:8b:26:3b:81:41:ef:5a:ce:95:cb:09:31:17:ad:ac:
5b:38:d5:96:9b:f3:98:eb:5f:d0:db:cd:21:1a:94:29:13:65:
5d:9f:1c:e4:29:f6:48:da:db:1c:43:8a:54:48:59:c7:e9:ce:
6e:0b:5b:3b:0d:02:1b:24:ed:62:29:c3:e6:db:5c:85:23:39:
73:49:72:d9:5c:e8:20:12:1b:d7:06:50:46:4a:f3:59:74:d2:
bf:b6:c7:23:d3:30:2a:65:63:60:94:9f:18:ac:4f:3e:d5:7e:
71:51:19:c9:a9:32:d2:e4:9b:2c:dc:47:f5:c7:c1:3c:94:f6:
19:4b:60:8c:29:0a:bb:97:5a:6c:f6:b5:e5:4f:6c:b7:fa:64:
ba:a8:5c:e9:20:10:06:22:4c:d7:3f:82:74:dd:54:36:08:85:
13:28:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:51:39 2026 by rpki-client