Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rbQHs4qykBW9xptUvqt4vLy1Ok0.roa
File: rbQHs4qykBW9xptUvqt4vLy1Ok0.roa (raw, json)
Hash identifier: POTGE2KhI/pHim26K02YCPI3+dZboo4AMTkXswqMNj0=
Subject key identifier: AD:B4:07:B3:8A:B2:90:15:BD:C6:9B:54:BE:AB:78:BC:BC:B5:3A:4D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F5B75BAF0029431621E51ECB85549D0FF
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rbQHs4qykBW9xptUvqt4vLy1Ok0.roa
Signing time: Mon 13 Jul 2026 12:31:09 +0000
ROA not before: Mon 13 Jul 2026 12:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 45.88.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:75:ba:f0:02:94:31:62:1e:51:ec:b8:55:49:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 13 12:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adb407b38ab29015bdc69b54beab78bcbcb53a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:d4:2f:8b:42:6e:b8:33:b2:96:eb:3a:c8:
a1:a8:7f:6d:7a:08:21:c3:d2:dc:af:5d:19:32:dc:
23:8a:84:43:91:97:69:b9:86:84:68:51:a8:af:ff:
61:f6:90:c1:ea:49:b8:dd:d2:08:c3:48:65:b3:43:
b2:ce:64:c5:cd:54:30:51:71:35:54:c1:74:69:ac:
e3:80:50:f2:55:73:89:9a:9e:8b:52:dd:68:08:86:
1d:39:8c:b5:38:23:84:0b:95:b5:57:ec:0e:1b:62:
10:b9:10:4a:ea:fd:f3:51:d9:81:8b:be:15:d5:45:
ea:6c:0a:3f:fb:ee:90:a6:1d:af:2f:02:56:c6:3b:
3d:d1:67:91:68:2a:3a:ae:45:86:47:5f:22:91:7d:
95:2f:ab:fd:28:98:d6:22:cd:1b:b7:85:47:be:33:
6c:ea:a4:85:1a:7d:7f:b8:c6:cb:3a:d7:ef:42:a8:
9d:d8:89:26:33:e6:da:f0:ec:33:dd:87:b7:16:b8:
e3:a5:52:7b:d9:70:2b:b2:b3:45:d3:62:e0:6b:56:
46:84:d8:77:8a:6f:3f:09:92:e2:77:2b:24:46:80:
6d:31:a0:49:a1:23:67:3a:09:67:fa:99:aa:2a:b4:
45:6e:fd:60:46:9b:b9:0f:a6:f8:73:40:a5:de:2b:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:07:B3:8A:B2:90:15:BD:C6:9B:54:BE:AB:78:BC:BC:B5:3A:4D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rbQHs4qykBW9xptUvqt4vLy1Ok0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9a:e7:a4:fa:cb:82:2a:57:3b:35:0a:f0:c4:53:9e:79:54:
b6:f3:64:56:14:2f:c2:e8:e9:4b:4a:af:e4:ed:5f:b9:b9:32:
21:68:cc:a6:fa:22:90:f3:c3:20:ef:a2:5b:f6:5c:65:2f:60:
7c:a7:e8:c9:55:8b:7f:65:68:48:65:ca:46:e9:db:b9:f1:dd:
95:d1:cc:53:76:7e:3c:ea:56:bb:90:7a:02:9e:2d:ae:ce:a9:
99:d5:d4:37:98:3a:fb:e8:5f:de:b5:cf:80:d5:d6:06:fb:2b:
5a:ee:f4:b0:07:19:ad:8b:cb:c2:39:04:61:70:6e:ee:28:99:
10:03:5f:8c:7e:4a:36:74:b1:0b:96:d3:18:49:ee:82:7e:cb:
b2:d6:ac:8d:97:1c:1c:c2:3e:d3:17:41:41:a3:6a:38:65:50:
79:64:84:d5:51:41:6c:c0:9f:ac:c8:43:52:87:1b:07:3d:d4:
d9:88:9c:06:0b:7f:50:0b:b5:43:25:7a:b0:02:ad:58:e0:0a:
57:da:12:cd:d8:ac:31:f1:c9:b5:54:eb:d8:de:e7:a4:bc:ed:
a3:73:3a:73:47:6d:38:2e:20:1e:65:09:3e:21:4a:78:92:6d:
a1:78:02:be:4f:4d:3b:ee:3c:f4:4c:ca:e3:fd:e4:53:6e:81:
c4:34:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 07:47:04 2026 by rpki-client