Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pUt-c3yKpsm0kFvvR3TSn4yCI_U.roa
File: pUt-c3yKpsm0kFvvR3TSn4yCI_U.roa (raw, json)
Hash identifier: WLB60nhbJgCHw2NBTYzvSrZYsS1DrmJMr9/B58n7oOM=
Subject key identifier: A5:4B:7E:73:7C:8A:A6:C9:B4:90:5B:EF:47:74:D2:9F:8C:82:23:F5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1600D6897D7C8D504E358A341052B265E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pUt-c3yKpsm0kFvvR3TSn4yCI_U.roa
Signing time: Wed 21 Oct 2026 20:00:53 +0000
ROA not before: Wed 21 Oct 2026 20:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 45.155.64.0/24 maxlen: 24
80.244.15.0/24 maxlen: 24
94.103.187.0/24 maxlen: 24
94.231.215.0/24 maxlen: 24
176.118.33.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:0d:68:97:d7:c8:d5:04:e3:58:a3:41:05:2b:26:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 21 20:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a54b7e737c8aa6c9b4905bef4774d29f8c8223f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:0b:d0:1d:ad:31:59:96:9f:bb:09:3b:b8:
51:3a:2d:81:19:a4:90:c8:f8:b2:dd:f8:a2:92:47:
02:4d:e3:36:42:87:44:41:4d:73:8c:f8:13:2b:99:
9a:1a:0f:22:27:2a:6e:af:09:a0:92:a3:36:bc:b6:
59:08:b4:de:fb:5f:73:47:ee:25:17:da:10:c4:95:
0d:a1:29:6a:ad:da:36:bc:70:95:2d:26:de:c3:4b:
48:bd:5b:48:df:48:f3:af:0a:e4:7e:4b:3b:f6:9f:
c9:79:46:e3:b7:27:1c:fa:cd:d5:d6:c0:87:d8:37:
e9:ff:31:47:a6:51:97:93:95:46:9e:8c:e2:5b:40:
a3:6a:f7:01:9a:99:ab:22:55:4e:a1:3c:21:4c:c9:
09:ac:9e:45:ac:b9:7e:fd:6d:f5:99:93:8c:fd:35:
1a:15:cf:30:11:aa:c2:ec:12:89:1a:bf:db:5d:a3:
a9:f7:47:94:e5:bf:e6:db:c5:8a:b2:81:2d:22:ea:
e3:ea:f8:4d:a4:09:72:1d:18:0b:8f:ac:90:fc:ec:
41:6f:3c:02:29:23:e9:fb:48:26:92:dc:d8:ef:30:
7c:5e:50:82:69:6d:11:bf:e9:94:5e:66:27:31:e8:
ae:25:4e:1d:5a:02:93:94:cd:9f:73:da:a7:34:95:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:7E:73:7C:8A:A6:C9:B4:90:5B:EF:47:74:D2:9F:8C:82:23:F5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pUt-c3yKpsm0kFvvR3TSn4yCI_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
80.244.15.0/24
94.103.187.0/24
94.231.215.0/24
176.118.33.0/24
185.244.106.0/24
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7b:d4:fb:45:f6:30:82:61:84:0b:d0:18:03:81:19:b9:75:
82:3e:4c:94:41:89:cd:ca:d8:86:d2:a7:cb:5d:77:23:30:b0:
e0:26:be:3d:39:ad:ca:32:97:36:d0:5d:ad:33:37:07:b9:9c:
59:2c:33:79:16:9a:2a:59:f0:7d:32:cb:2f:d2:66:05:01:65:
dc:fb:5a:db:e6:61:d0:12:c8:aa:38:2f:ea:6d:52:05:01:c7:
bf:db:f0:66:09:1f:60:26:79:d7:e4:0d:7c:65:00:1f:6d:1e:
04:86:68:ee:5f:3e:cf:cc:83:20:4e:b1:48:db:bd:c6:10:b3:
66:55:28:d1:03:93:f8:76:7d:2e:74:0f:e6:85:60:03:18:72:
d9:b0:b9:e6:66:f6:48:72:78:84:9c:df:1d:e4:73:bc:cd:74:
aa:45:87:14:26:cd:98:51:da:a2:f2:11:0f:6c:1e:8d:d2:cf:
97:d4:89:b1:c4:78:8e:8d:6f:b6:00:0a:f0:4e:19:c5:92:b6:
39:e8:fe:70:fa:b2:51:0c:b7:bd:5a:9d:fc:f5:43:88:cc:a4:
bf:56:cd:af:37:ca:24:f5:05:71:7e:9e:71:cf:83:bc:04:0a:
fc:fe:d1:cf:3c:f5:95:d3:cc:e1:de:4b:44:75:28:60:f1:a9:
b9:48:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:01:33 2026 by rpki-client