Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rIswO5eBRHsnLjGfEUDWfwR3pnM.roa
File: rIswO5eBRHsnLjGfEUDWfwR3pnM.roa (raw, json)
Hash identifier: uy7GoyCsebF64GI5MYfv8MiBVRLKjldhgcxgx1QxcTI=
Subject key identifier: AC:8B:30:3B:97:81:44:7B:27:2E:31:9F:11:40:D6:7F:04:77:A6:73
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A04C19C663FD61BB414D21658FA99FA372
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rIswO5eBRHsnLjGfEUDWfwR3pnM.roa
Signing time: Sat 29 Aug 2026 05:59:12 +0000
ROA not before: Sat 29 Aug 2026 05:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 160.19.94.0/24 maxlen: 24
2a0b:ac00::/29 maxlen: 29
2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:19:c6:63:fd:61:bb:41:4d:21:65:8f:a9:9f:a3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 29 05:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac8b303b9781447b272e319f1140d67f0477a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:d4:7d:3c:37:c2:d4:75:6a:b2:82:0b:97:
a0:ed:c5:74:60:e6:8b:24:5f:93:72:70:22:f0:4d:
01:c8:3f:b0:66:66:a6:2f:5d:d4:89:6c:2e:0e:de:
62:a9:58:38:c3:c4:9f:2e:b9:8b:54:05:61:1b:61:
0e:03:65:70:0e:ee:9c:9d:92:d4:38:ba:94:53:e4:
9f:35:a3:a8:90:c1:7d:bd:be:2f:33:58:c7:76:a6:
54:f0:8a:46:36:45:83:13:dd:bc:da:40:fa:af:0a:
90:42:4a:1a:84:d7:2f:7b:ee:35:e2:c5:db:e7:b1:
68:20:b3:62:78:56:28:11:61:39:cc:45:1a:ef:20:
13:41:24:97:e5:1f:d2:7e:14:3d:3b:c0:a8:39:b1:
a9:d5:75:78:91:ec:ac:31:80:52:38:fd:08:1c:bc:
0f:b4:e9:1a:a5:59:73:20:5f:0e:91:ec:76:4d:0c:
b1:08:ce:0a:38:39:12:9c:7f:ac:11:16:91:39:61:
5c:ac:59:71:c5:cf:f2:d3:c6:c5:ca:00:9b:f5:3f:
f4:ed:43:e8:a8:f1:6c:86:47:4a:53:bd:99:57:d3:
64:40:1a:9e:85:82:f0:5e:9e:75:47:ab:ab:2a:28:
1c:06:96:f6:bd:2c:5d:4e:3a:a0:63:d6:02:16:90:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:30:3B:97:81:44:7B:27:2E:31:9F:11:40:D6:7F:04:77:A6:73
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rIswO5eBRHsnLjGfEUDWfwR3pnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/24
IPv6:
2a0b:ac00::/29
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:bb40::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:a1:25:15:51:d1:21:4c:c8:b5:c1:65:e1:36:01:83:11:9d:
42:3a:75:47:3d:22:89:24:93:2d:c4:ec:d7:54:fa:a6:16:13:
ee:86:5a:9c:d3:df:85:c4:12:be:86:f5:72:da:7c:51:77:94:
63:80:42:6f:eb:5a:1c:25:7b:d9:01:a8:12:a0:a7:61:ae:fb:
10:50:ad:e2:97:2a:8a:15:17:ed:a6:95:1d:9b:19:3b:c5:f8:
bb:8a:0a:5e:3e:8f:ab:8c:be:0a:a5:50:14:8e:5d:1d:04:cb:
28:bf:3c:9f:2e:8c:e3:47:3d:30:a5:c8:19:4d:1c:23:7f:54:
a9:8b:95:3e:71:da:87:72:82:9a:64:92:31:3f:a0:ab:63:60:
11:82:1e:de:3d:47:7e:2a:5f:86:2c:4d:48:8a:d2:90:17:a8:
fc:3f:16:47:56:2b:48:23:da:c8:1c:58:c5:d3:e7:65:85:63:
17:0d:3a:47:bf:2b:96:77:ef:cf:b9:41:68:45:41:38:1d:4d:
12:80:29:a3:ba:d1:6b:bf:08:f9:bc:e5:e1:81:11:f6:75:8e:
90:8d:5c:ee:fc:5e:f6:0f:3b:14:fc:b9:78:43:84:73:c9:96:
0a:bd:0d:28:a4:2f:d4:7f:06:3e:56:1b:0a:e4:29:90:81:20:
a4:1e:f1:ea
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAaBMGcZj/WG7QU0hZY+pn6NyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwODI5MDU1OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhiMzAzYjk3ODE0NDdiMjcyZTMxOWYxMTQwZDY3ZjA0NzdhNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpnUfTw3wtR1arKCC5eg7cV0YOaL
JF+TcnAi8E0ByD+wZmamL13UiWwuDt5iqVg4w8SfLrmLVAVhG2EOA2VwDu6cnZLU
OLqUU+SfNaOokMF9vb4vM1jHdqZU8IpGNkWDE9282kD6rwqQQkoahNcve+414sXb
57FoILNieFYoEWE5zEUa7yATQSSX5R/SfhQ9O8CoObGp1XV4keysMYBSOP0IHLwP
tOkapVlzIF8Okex2TQyxCM4KODkSnH+sERaROWFcrFlxxc/y08bFygCb9T/07UPo
qPFshkdKU72ZV9NkQBqehYLwXp51R6urKigcBpb2vSxdTjqgY9YCFpC4UQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFKyLMDuXgUR7Jy4xnxFA1n8Ed6ZzMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvcklzd081ZUJSSHNuTGpHZkVVRFdmd1IzcG5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAMBAIAATAGAwQAoBNeMEcE
AgACMEEDBQMqC6wAAwUAKhA8gzAOAwUAKhA8hQMFACoQPIYDBQMqED+AAwUDKhB3
wAMFAyoTtMADBQMqE7tAAwUDKhRowDANBgkqhkiG9w0BAQsFAAOCAQEALaElFVHR
IUzItcFl4TYBgxGdQjp1Rz0iiSSTLcTs11T6phYT7oZanNPfhcQSvob1ctp8UXeU
Y4BCb+taHCV72QGoEqCnYa77EFCt4pcqihUX7aaVHZsZO8X4u4oKXj6Pq4y+CqVQ
FI5dHQTLKL88ny6M40c9MKXIGU0cI39UqYuVPnHah3KCmmSSMT+gq2NgEYIe3j1H
fipfhixNSIrSkBeo/D8WR1YrSCPayBxYxdPnZYVjFw06R78rlnfvz7lBaEVBOB1N
EoApo7rRa78I+bzl4YER9nWOkI1c7vxe9g87FPy5eEOEc8mWCr0NKKQv1H8GPlYb
CuQpkIEgpB7x6g==
-----END CERTIFICATE-----
Generated at Mon Aug 31 22:58:09 2026 by rpki-client