Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa
File: 1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa (raw, json)
Hash identifier: 1UxCwpeiuCaB4NtOHBTH7GLcym81PgfYyIzfwzAklFY=
Subject key identifier: D5:50:14:29:06:32:47:2A:95:B9:F4:19:EA:64:24:60:6B:18:B2:21
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019CB8016C3A41C18488BD0B81AACAFD1794
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa
Signing time: Wed 04 Mar 2026 08:40:26 +0000
ROA not before: Wed 04 Mar 2026 08:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:01:6c:3a:41:c1:84:88:bd:0b:81:aa:ca:fd:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 4 08:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d55014290632472a95b9f419ea6424606b18b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:91:7a:a8:4a:e9:5d:92:aa:1a:ab:63:e2:
ef:cb:02:50:d8:b4:d7:0f:e6:c5:6a:ad:4a:f0:56:
f9:62:f1:37:96:45:b4:1b:33:09:57:f4:0d:b0:d9:
46:45:f2:8e:40:fc:7f:13:94:1e:97:26:41:9c:a2:
f4:10:10:db:4d:43:a1:d0:d4:47:ad:36:40:52:70:
c1:96:f2:81:06:0e:52:36:a4:ad:05:f7:f3:56:49:
76:4b:26:f8:22:c2:42:53:7c:33:66:7c:47:c3:7c:
97:f5:45:92:0e:37:4d:8f:b8:7d:05:aa:e1:fb:06:
a2:c0:e8:f8:5b:57:ac:09:a3:a9:9f:b4:ee:fe:2c:
24:68:2a:4d:d8:73:38:8f:fa:b6:11:b6:7f:8e:29:
f4:7a:b1:ae:0c:e8:66:29:44:db:e7:a4:e8:85:cb:
e7:0e:5c:65:ec:71:71:1c:d2:aa:67:cd:e2:da:19:
1e:87:f6:b2:e4:42:66:e2:59:ce:bb:b9:78:87:b9:
f9:69:b5:c9:8f:47:44:d3:36:be:da:e8:ef:5b:fc:
ab:97:2c:e1:80:ac:01:2b:cb:9e:b0:96:96:e6:3d:
3e:d7:95:29:cb:cb:9a:e9:9b:27:9d:91:04:51:62:
5f:ab:e8:78:f7:dc:23:dc:5a:9a:24:96:8d:45:a0:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:14:29:06:32:47:2A:95:B9:F4:19:EA:64:24:60:6B:18:B2:21
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1VAUKQYyRyqVufQZ6mQkYGsYsiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.217.0-194.143.218.255
194.143.221.0-194.143.223.255
195.114.196.0-195.114.198.255
195.114.203.0/24
195.114.205.0/24
213.220.0.0/24
213.220.6.0/24
213.220.11.0/24
213.220.14.0/24
213.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3f:4e:e1:77:97:94:34:dc:cf:42:2a:25:c5:8d:8f:b7:b3:
43:7f:cd:48:33:32:87:54:89:cc:29:0e:d8:c7:e9:b4:53:9d:
d6:97:a4:4b:a2:93:eb:15:2c:78:eb:e2:02:b3:56:8c:2d:3b:
b0:29:d4:b8:32:7e:ba:82:6b:87:37:34:4e:3a:f2:78:b0:f3:
18:d1:fd:30:ec:6a:5b:c0:24:d7:27:38:6b:31:2b:53:e4:cb:
d8:47:3f:1e:d6:83:f3:c5:15:3c:b7:34:74:9c:fc:7c:69:fd:
fe:35:50:43:35:84:8d:69:4a:65:4b:91:5e:d9:12:2d:2e:88:
1e:34:5f:06:db:c9:e0:5f:d2:24:63:10:c0:54:9f:71:ca:1c:
ca:69:81:d5:20:f2:79:44:7f:e9:66:9f:03:47:3b:ca:3f:18:
01:26:0c:cc:41:ae:7f:7c:ff:66:4a:de:a5:99:a1:1f:22:d0:
07:f5:ff:13:36:9f:e4:a4:b1:50:a3:82:b8:c6:f7:14:ce:95:
8a:77:63:f6:80:bd:71:35:72:00:a7:24:f3:98:01:f3:52:69:
e8:13:43:07:0b:72:b2:78:bd:59:8d:c7:d6:28:f0:2a:d4:dd:
fe:07:9f:45:b4:80:f5:16:0e:b2:e6:60:ae:af:7c:ac:67:38:
a9:05:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:15:24 2026 by rpki-client