Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rlrTaEhXSQMIq59voENHJKPD6EM.roa
File: rlrTaEhXSQMIq59voENHJKPD6EM.roa (raw, json)
Hash identifier: t6Ww7Z1vIE0fB7evWAYXFGmrJXFKVg0FkIcoBtEKBM8=
Subject key identifier: AE:5A:D3:68:48:57:49:03:08:AB:9F:6F:A0:43:47:24:A3:C3:E8:43
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E8789AD7F526FF33BE5A3453435A911DE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rlrTaEhXSQMIq59voENHJKPD6EM.roa
Signing time: Tue 02 Jun 2026 08:53:27 +0000
ROA not before: Tue 02 Jun 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215620
IP address blocks: 45.15.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:89:ad:7f:52:6f:f3:3b:e5:a3:45:34:35:a9:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 2 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae5ad3684857490308ab9f6fa0434724a3c3e843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:97:de:4e:0d:dd:ad:3f:71:c8:cf:05:25:
9a:53:b6:53:27:6a:a1:a5:2f:64:8f:a3:47:6b:e9:
1d:52:18:62:08:ad:d0:e2:de:ca:79:28:d3:52:02:
71:9f:02:77:7b:79:3d:3d:13:b1:c3:a1:07:ea:eb:
7d:25:cb:05:fb:87:4a:80:90:b0:a8:5b:fd:c2:04:
5d:4d:31:53:01:1a:42:82:96:01:aa:8c:c5:0e:6c:
72:eb:6a:54:3d:09:fb:9e:41:8f:ed:27:8c:0f:84:
0c:f0:df:f1:37:ed:96:da:d2:1a:7c:f0:84:3b:4b:
3f:cc:01:59:da:33:5f:bd:15:3f:30:51:13:49:8e:
f9:0e:7a:1f:96:dc:7b:0a:71:ad:a1:c2:94:ed:1d:
29:b5:7b:24:a5:50:5b:c7:4e:2d:e5:f1:88:df:b1:
fc:4d:22:e1:e4:3f:cd:d7:df:83:1c:bb:d8:c8:0d:
ba:46:f4:a8:26:5f:f8:f5:76:a1:e0:82:27:38:9b:
3b:bf:8b:ab:44:1c:74:6e:da:90:d2:d1:45:a0:df:
0b:32:27:30:8d:3c:d0:ef:7e:3e:53:17:f0:d2:40:
3e:c4:8f:70:cb:23:4a:4d:f6:fa:05:af:38:1b:41:
4c:d2:5d:84:aa:5f:9f:07:7b:5b:25:c4:74:90:4f:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:D3:68:48:57:49:03:08:AB:9F:6F:A0:43:47:24:A3:C3:E8:43
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rlrTaEhXSQMIq59voENHJKPD6EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d9:3c:a5:7b:6a:07:56:65:99:78:20:00:f7:8d:e3:bc:31:
73:d8:1a:ff:ed:9f:ce:d3:70:47:8c:ab:b3:ee:4b:2a:5c:69:
37:00:cc:48:64:a9:ab:af:43:00:5a:7e:4d:b5:eb:af:00:53:
1a:7d:6f:fb:d9:41:70:38:bd:db:cc:53:f0:4c:47:ca:7a:be:
0e:c3:c1:ee:f0:2e:31:85:5e:bc:cd:4e:ae:b7:d4:d5:97:a3:
a1:eb:71:b5:d9:73:60:39:99:d0:7b:65:f3:f6:2c:8f:bc:a0:
fd:10:fc:f9:d2:d2:9b:84:a0:98:01:f5:0c:e4:1b:80:a8:6c:
54:71:bf:2e:2c:ea:be:8a:db:dc:bd:bc:96:92:79:64:a2:49:
ea:41:c5:a1:25:10:d2:69:62:b4:51:d6:31:b7:2a:17:6e:9a:
0f:26:77:f8:b0:c5:54:8f:3c:6c:a0:9b:20:92:c5:5b:7f:e3:
3a:71:d3:72:e7:d0:af:41:68:51:bc:45:02:f6:27:d4:4d:0a:
23:f3:ac:72:69:bc:9d:fa:f6:70:c7:e6:f3:b9:ce:3f:80:ff:
44:a8:17:1d:da:1a:36:d6:27:f5:4a:88:5c:4b:7e:3f:83:2e:
3a:42:6d:3f:05:1f:77:80:17:f1:4a:d2:c5:47:18:f2:55:79:
99:1a:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:23 2026 by rpki-client