Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r3tlL7uDo1b0gjdMD1pBs26QQUc.roa
File: r3tlL7uDo1b0gjdMD1pBs26QQUc.roa (raw, json)
Hash identifier: BDgQlShXvRB5v5/SN4zIukO2yALd6U1VR8GnKIaT2s4=
Subject key identifier: AF:7B:65:2F:BB:83:A3:56:F4:82:37:4C:0F:5A:41:B3:6E:90:41:47
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D9EE1F1C331C776B92F2D6B2CA56AF2B4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r3tlL7uDo1b0gjdMD1pBs26QQUc.roa
Signing time: Sat 18 Apr 2026 04:38:20 +0000
ROA not before: Sat 18 Apr 2026 04:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:e1:f1:c3:31:c7:76:b9:2f:2d:6b:2c:a5:6a:f2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 18 04:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7b652fbb83a356f482374c0f5a41b36e904147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:30:68:c8:c1:91:eb:8c:07:5e:86:b9:cb:
a4:c8:6e:f8:af:bc:e6:0e:36:74:75:2f:7c:40:58:
f4:c6:ee:84:56:5d:a0:5c:a7:2c:2d:9b:3e:ac:02:
46:67:7d:c8:b6:b7:ef:d4:d6:cd:19:76:8b:3a:1a:
0f:a9:04:55:c9:c6:33:56:20:8d:0a:b2:4d:8c:87:
46:69:79:d8:ac:f4:ec:e9:72:23:e6:96:60:c1:b6:
d3:02:e6:3e:06:8a:4a:d5:d5:ab:0e:67:e0:e6:b7:
e9:b1:e1:3e:ff:03:cf:d0:22:fa:30:cb:1f:a1:23:
82:06:00:4c:9e:cf:8c:75:c3:b8:1e:22:36:e4:62:
da:b9:11:c6:cc:ce:03:46:eb:e6:40:ee:2e:78:a0:
2b:7c:0a:33:9c:89:13:e6:d3:80:16:93:8d:e3:d8:
2d:ea:20:01:83:4c:66:fd:52:bc:27:71:b9:eb:fd:
d1:c8:23:bb:2d:36:69:76:f7:34:f3:bb:35:73:fa:
6c:e1:9f:6a:ed:03:96:9f:ba:d9:54:cc:1f:d6:de:
69:5b:5f:45:8c:67:22:b0:97:7d:2c:3d:76:d1:b2:
1f:c5:ee:4c:2c:14:da:c1:fd:9a:3b:5b:bd:a0:b7:
07:ab:b3:26:02:ff:59:d8:91:28:38:4d:6d:2a:68:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:65:2F:BB:83:A3:56:F4:82:37:4C:0F:5A:41:B3:6E:90:41:47
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r3tlL7uDo1b0gjdMD1pBs26QQUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/23
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
71:54:af:e3:d8:1e:6a:e3:38:8a:ba:8e:d4:a6:68:2d:16:ec:
de:13:ba:ad:7d:fb:08:48:b6:b2:b9:c8:4f:fa:e9:b6:3b:7c:
96:11:9d:e8:4d:27:17:97:bd:53:34:03:30:a0:c2:aa:b0:55:
1e:cf:01:d5:28:34:ea:b6:ee:71:02:96:00:2b:eb:c7:e9:95:
bb:2f:64:32:2f:94:80:b7:5e:72:26:3c:b3:da:6b:17:fc:7e:
97:1c:41:f2:7b:e0:cd:e1:2b:24:89:52:2e:9f:f8:8d:2f:8a:
5b:d0:a1:6e:c7:c6:92:f5:23:5d:d1:d9:c2:a5:9f:0d:82:a6:
ad:93:ad:23:48:3b:b2:73:d8:90:2f:f7:11:a1:fc:90:2f:27:
d6:fe:19:c2:10:77:ba:1e:1d:92:28:c8:2f:68:1a:28:42:3e:
e1:67:00:e1:8d:fb:0c:05:32:9d:83:94:1c:7a:0d:50:bd:70:
b1:01:5d:f3:bd:42:b4:c7:b2:fa:38:ed:30:6e:f5:8d:7c:e4:
93:fa:17:2d:0e:eb:78:a6:7a:dd:8d:33:2b:14:af:27:7f:33:
12:70:cf:a9:42:f9:7a:c1:ca:6c:89:ad:53:5f:d7:64:38:f9:
11:76:a5:af:58:93:8c:3e:c8:9f:67:63:36:fd:5d:8e:e2:d6:
c6:c1:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:00:55 2026 by rpki-client