Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/4Xxf8ftkekAr_UELDZAztr8tcU0.roa
File: 4Xxf8ftkekAr_UELDZAztr8tcU0.roa (raw, json)
Hash identifier: Suhb0XMgj5LcLtNRI4Xks0/tdSBWOUB9QpaPklfPPGI=
Subject key identifier: E1:7C:5F:F1:FB:64:7A:40:2B:FD:41:0B:0D:90:33:B6:BF:2D:71:4D
Certificate issuer: /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial: 01A0A4F10A6B8BEA68434CC3E1101051D95D
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/4Xxf8ftkekAr_UELDZAztr8tcU0.roa
Signing time: Tue 15 Sep 2026 12:00:55 +0000
ROA not before: Tue 15 Sep 2026 12:00:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211381
IP address blocks: 145.63.128.0/24 maxlen: 24
145.63.129.0/24 maxlen: 24
145.63.130.0/24 maxlen: 24
145.63.131.0/24 maxlen: 24
145.63.132.0/24 maxlen: 24
145.63.133.0/24 maxlen: 24
145.63.135.0/24 maxlen: 24
145.63.136.0/24 maxlen: 24
145.63.137.0/24 maxlen: 24
145.63.138.0/24 maxlen: 24
145.63.139.0/24 maxlen: 24
145.63.140.0/24 maxlen: 24
145.63.141.0/24 maxlen: 24
145.63.144.0/24 maxlen: 24
188.137.176.0/24 maxlen: 24
188.137.177.0/24 maxlen: 24
188.137.179.0/24 maxlen: 24
188.137.180.0/24 maxlen: 24
188.137.181.0/24 maxlen: 24
188.137.182.0/24 maxlen: 24
188.137.183.0/24 maxlen: 24
188.137.224.0/24 maxlen: 24
188.137.225.0/24 maxlen: 24
188.137.227.0/24 maxlen: 24
188.137.228.0/24 maxlen: 24
188.137.229.0/24 maxlen: 24
188.137.230.0/24 maxlen: 24
188.137.231.0/24 maxlen: 24
188.137.232.0/24 maxlen: 24
188.137.233.0/24 maxlen: 24
188.137.234.0/24 maxlen: 24
188.137.235.0/24 maxlen: 24
188.137.236.0/24 maxlen: 24
188.137.237.0/24 maxlen: 24
188.137.238.0/24 maxlen: 24
188.137.239.0/24 maxlen: 24
188.137.240.0/24 maxlen: 24
188.137.241.0/24 maxlen: 24
188.137.242.0/24 maxlen: 24
188.137.243.0/24 maxlen: 24
188.137.245.0/24 maxlen: 24
188.137.246.0/24 maxlen: 24
188.137.247.0/24 maxlen: 24
188.137.248.0/24 maxlen: 24
188.137.249.0/24 maxlen: 24
188.137.250.0/24 maxlen: 24
188.137.251.0/24 maxlen: 24
188.137.252.0/24 maxlen: 24
188.137.253.0/24 maxlen: 24
188.137.254.0/24 maxlen: 24
188.137.255.0/24 maxlen: 24
212.43.144.0/24 maxlen: 24
212.43.145.0/24 maxlen: 24
212.43.146.0/24 maxlen: 24
212.43.147.0/24 maxlen: 24
212.43.148.0/24 maxlen: 24
212.43.149.0/24 maxlen: 24
212.43.150.0/24 maxlen: 24
212.43.151.0/24 maxlen: 24
212.43.152.0/24 maxlen: 24
212.43.153.0/24 maxlen: 24
212.43.154.0/24 maxlen: 24
212.43.155.0/24 maxlen: 24
212.43.156.0/24 maxlen: 24
212.43.157.0/24 maxlen: 24
212.43.158.0/24 maxlen: 24
212.43.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:f1:0a:6b:8b:ea:68:43:4c:c3:e1:10:10:51:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Validity
Not Before: Sep 15 12:00:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e17c5ff1fb647a402bfd410b0d9033b6bf2d714d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:f7:b8:82:c4:f1:e9:c2:65:19:5f:9d:a5:
fd:17:01:6f:e2:16:74:22:6e:ad:19:69:a0:e8:77:
94:3c:2a:20:88:e2:f4:91:a8:99:c8:c5:28:23:f0:
c1:23:14:d3:45:04:19:b1:26:41:cb:7a:40:8e:7b:
c0:35:d8:8f:7f:95:28:02:54:fd:77:3e:2d:5f:7c:
da:5b:c7:6f:fb:11:62:52:a6:ce:ed:76:eb:72:ab:
d1:2a:cc:6b:a3:78:d4:87:c7:df:de:24:b4:c1:a7:
cd:cd:bf:bd:20:4c:3f:ca:ce:d4:17:9b:37:16:1a:
b7:27:35:2f:87:1a:86:46:90:7f:96:b0:06:8e:22:
b3:da:a1:ac:0c:e5:4e:d7:86:c8:f5:90:f4:fd:aa:
c1:2e:f9:9d:cb:fe:24:25:85:f2:df:a1:70:8e:71:
05:10:ad:d9:72:b3:c1:d0:d5:1d:90:2f:f9:a1:43:
82:fa:76:23:ed:9a:67:f7:37:52:fa:6a:32:94:8f:
1a:ab:fe:c0:19:d2:dd:a7:34:98:69:61:b2:d6:df:
67:11:24:fb:d8:c9:fe:29:fb:27:0e:aa:c0:bd:89:
66:4f:5f:d7:66:b5:53:81:bd:df:7c:fa:f1:30:02:
53:e5:f4:15:0a:79:81:2a:90:54:4a:75:d3:f6:36:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:5F:F1:FB:64:7A:40:2B:FD:41:0B:0D:90:33:B6:BF:2D:71:4D
X509v3 Authority Key Identifier:
keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/4Xxf8ftkekAr_UELDZAztr8tcU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.63.128.0-145.63.133.255
145.63.135.0-145.63.141.255
145.63.144.0/24
188.137.176.0/23
188.137.179.0-188.137.183.255
188.137.224.0/23
188.137.227.0-188.137.243.255
188.137.245.0-188.137.255.255
212.43.144.0/20
Signature Algorithm: sha256WithRSAEncryption
82:9e:fa:4b:cd:70:83:bc:f4:4d:9e:9b:1b:59:3f:03:48:1c:
13:16:67:51:38:6a:db:a8:fc:e1:39:40:cd:01:08:1a:40:7d:
89:4d:f6:a9:73:ce:6b:66:5f:c8:84:b5:7c:6c:f3:4a:48:16:
03:82:bf:d6:df:9f:cd:2f:74:6e:06:7d:18:3f:b7:81:1f:fc:
6d:72:16:9f:66:dd:3b:d7:c3:bd:52:6c:d8:1b:f3:01:5d:83:
02:00:04:17:3a:a7:12:eb:c7:83:b8:fd:4a:f0:74:98:c4:c6:
d1:de:9a:66:eb:0e:66:d4:88:d6:cd:aa:42:31:aa:d3:23:90:
21:fa:db:88:a2:0c:16:5a:e4:44:a5:d9:ae:5f:0e:55:63:ca:
56:76:47:04:05:27:1e:af:e7:a8:bb:01:52:70:c8:06:f5:a5:
2b:8b:f5:ac:0d:c8:47:8d:f0:25:d7:47:f8:29:c4:c8:41:96:
84:9c:2c:aa:23:3f:42:81:cc:07:7f:c5:cf:f8:00:bb:ac:06:
f8:e4:ee:ae:12:bc:fa:4f:ff:d2:e8:4c:35:92:95:e9:90:6c:
d8:a6:c0:21:0e:6b:72:44:c7:14:3c:17:6f:f9:71:a9:78:57:
3d:a3:c0:8a:e7:aa:ef:2c:77:5f:d7:d7:88:8d:3a:2f:6a:dc:
ca:94:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:52:58 2026 by rpki-client