Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pYvrOQwjNJcgDAr7fAjdAo1X-X4.roa
File: pYvrOQwjNJcgDAr7fAjdAo1X-X4.roa (raw, json)
Hash identifier: s1mXvinXEn3b94iQlIlQc5WR8G319FIohPC49uv6gyI=
Subject key identifier: A5:8B:EB:39:0C:23:34:97:20:0C:0A:FB:7C:08:DD:02:8D:57:F9:7E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F4035EDDBC2B68AA81529F67F178F753E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pYvrOQwjNJcgDAr7fAjdAo1X-X4.roa
Signing time: Wed 08 Jul 2026 05:31:43 +0000
ROA not before: Wed 08 Jul 2026 05:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 45.88.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:35:ed:db:c2:b6:8a:a8:15:29:f6:7f:17:8f:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 8 05:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a58beb390c233497200c0afb7c08dd028d57f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:2a:44:47:68:9c:af:3d:26:78:ba:89:59:
96:28:00:d8:6e:0c:f6:bc:9c:39:32:30:ec:0f:49:
de:06:1d:14:4a:db:c1:f7:9a:43:5f:de:64:11:13:
9a:3a:91:4d:78:5e:06:80:93:46:2b:cf:78:59:c8:
c1:36:a0:20:d4:b3:81:b2:62:fd:3e:95:7d:e3:b6:
ff:8c:50:86:e5:3a:e9:4c:9e:d4:a1:64:be:d6:b0:
0d:b2:5e:2b:1e:51:c1:86:80:ae:d4:58:66:d6:18:
30:86:42:81:40:95:33:d3:59:5d:19:ca:8e:9c:ce:
8d:9c:3d:60:26:dc:ce:17:4c:ab:3a:1b:1d:34:de:
06:ba:db:16:38:2a:fa:e8:00:ae:16:b9:60:af:92:
80:6c:ac:2b:61:90:9e:9d:e8:31:78:51:56:bc:e4:
36:54:3b:01:4a:9e:b9:6f:47:5e:95:d0:dd:c7:61:
f9:35:d6:4f:3d:58:d9:2a:8f:db:18:a9:47:51:2f:
91:ed:dc:b0:27:9d:5d:d1:ca:78:29:3a:d5:9c:1a:
ec:0d:a6:f6:a6:98:8d:4f:52:8c:d4:36:aa:cb:7e:
43:dc:0a:dd:89:fb:e6:fe:bf:2e:b9:5a:99:f8:bc:
b7:2f:7d:93:65:2b:f2:4d:a3:e6:c3:d7:6c:c6:92:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:EB:39:0C:23:34:97:20:0C:0A:FB:7C:08:DD:02:8D:57:F9:7E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pYvrOQwjNJcgDAr7fAjdAo1X-X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:85:9f:77:24:0f:ab:39:bb:14:cc:87:fe:d4:44:f5:d1:c5:
31:92:83:ea:fa:17:c4:28:2a:06:e6:9a:c1:0e:de:92:68:f5:
4f:04:ff:14:90:26:96:a9:4b:33:b5:47:71:76:46:65:4b:82:
7d:cb:80:f0:99:90:55:9e:c3:e3:b8:68:54:82:94:5b:13:89:
22:e4:13:f0:eb:c9:da:a9:8c:03:74:2f:cb:99:31:48:15:d5:
53:01:3e:41:92:a1:ca:f2:d9:9f:3e:a1:60:68:bd:9f:cd:fd:
f2:49:aa:ca:6e:d9:5d:77:07:6e:37:77:ce:62:03:46:7b:fd:
24:00:50:9a:a0:ee:e6:41:8b:a5:05:4a:06:7e:6c:9e:08:fe:
63:a0:c8:bf:11:fc:43:e7:d8:06:52:51:b3:ce:30:4f:a1:99:
cf:d8:bf:c1:d3:f2:3e:d4:3c:75:5d:e3:7b:21:0e:69:2b:c9:
d1:0d:09:db:ef:db:ac:60:de:ee:22:f3:cc:fe:60:cc:e9:77:
b4:ae:ed:dd:4e:5c:4b:46:b8:a8:15:2c:08:90:91:17:cb:8f:
e8:56:91:66:fa:93:0e:c7:94:2d:c4:29:48:ce:43:49:4d:2a:
f2:49:c9:bf:71:a5:85:15:9a:b8:46:4f:03:54:9f:8d:9b:a4:
94:c2:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 08:05:07 2026 by rpki-client