Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/firyRSgN6cMP-MEm4qAH09cKeeI.roa
File: firyRSgN6cMP-MEm4qAH09cKeeI.roa (raw, json)
Hash identifier: WTVF6KBDaYAOM3ozHsxZRHJ8Z1UpHrr2NEvlY0VP31A=
Subject key identifier: 7E:2A:F2:45:28:0D:E9:C3:0F:F8:C1:26:E2:A0:07:D3:D7:0A:79:E2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EBB6EA8FBE85A6C7A5E79772EFEE9D59A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/firyRSgN6cMP-MEm4qAH09cKeeI.roa
Signing time: Fri 12 Jun 2026 10:44:11 +0000
ROA not before: Fri 12 Jun 2026 10:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 178.211.132.0/24 maxlen: 24
212.46.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:6e:a8:fb:e8:5a:6c:7a:5e:79:77:2e:fe:e9:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 12 10:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e2af245280de9c30ff8c126e2a007d3d70a79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:92:39:7c:0b:89:50:68:13:3c:60:d0:63:
84:3a:da:17:79:c6:8f:c7:82:d7:aa:ed:15:27:ca:
f2:b5:5d:5f:d6:6d:bc:a5:10:7b:5f:4c:13:ce:f2:
0f:d1:ca:db:51:20:fa:0a:45:17:7d:d5:d7:b1:f9:
e1:4a:b0:ae:29:9f:5d:e8:73:eb:38:30:0b:a3:ad:
5b:4d:4d:31:11:34:2c:6a:7b:2c:8c:ed:ce:75:28:
01:cb:a6:f7:27:6b:16:5d:e4:ac:e4:8b:95:e2:0f:
63:3e:39:4d:2d:c4:c6:63:5e:23:80:d0:20:5a:7a:
c3:cc:c2:89:03:8d:20:9c:31:80:58:52:cc:0c:28:
69:dd:73:94:b0:d5:01:58:d0:05:8c:ba:29:8a:0f:
78:f1:87:2a:d2:bb:13:6c:ed:ff:5e:5a:02:ab:e4:
8f:8b:0d:b3:5c:7a:f8:9c:72:82:64:4a:d4:60:d0:
ec:b5:b3:bb:45:b5:20:4b:07:34:4f:da:44:fd:c7:
a4:92:0c:dd:3c:d9:77:77:d9:39:28:15:4b:50:fd:
25:fb:99:17:6e:5e:06:a6:62:0f:81:ab:97:8d:93:
48:d0:d3:19:4f:83:12:9e:80:ee:b6:72:47:d3:6f:
f9:96:c0:4d:98:e8:22:ef:1c:95:66:bc:2c:9c:44:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:F2:45:28:0D:E9:C3:0F:F8:C1:26:E2:A0:07:D3:D7:0A:79:E2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/firyRSgN6cMP-MEm4qAH09cKeeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.132.0/24
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e4:13:1f:4c:c0:11:ba:ca:32:db:01:b3:ba:fc:b7:4a:3a:
44:ae:eb:11:22:28:6c:6c:1a:46:ee:4b:7e:ef:7f:10:54:12:
d6:fc:4d:d5:e1:dc:9d:c4:cf:23:2e:e4:cf:fc:f3:5a:ae:58:
fe:2c:24:97:35:d3:79:44:b0:4d:ba:4a:4c:47:78:57:e4:dd:
b2:32:26:09:aa:9f:bd:a6:de:d3:5e:2f:e3:4b:11:20:24:ad:
d8:cf:34:e4:84:d1:de:65:2b:cd:b5:33:52:a3:83:01:48:4a:
af:e0:5d:cc:cb:61:42:9f:d1:f7:4a:4b:81:c1:ee:1b:3d:bf:
79:f8:0d:3f:14:97:24:20:f4:8e:1e:27:5d:bd:e6:5b:c7:ba:
54:97:de:7d:15:d9:f1:88:19:6e:0e:0e:88:d6:ab:e8:d1:d6:
0a:fa:97:74:63:2a:60:e9:9c:4c:4e:ea:42:52:3d:a4:8c:22:
8d:c7:46:9e:b8:4a:6a:13:74:6d:98:41:e6:8d:d2:f8:18:32:
52:b8:ba:fd:03:37:d5:b1:f6:24:a6:c0:4f:1d:8e:d7:b8:31:
2e:4a:d1:cc:52:32:ef:ee:79:6a:87:03:29:8c:2d:9d:8c:66:
e3:2c:cb:31:66:fc:95:13:d0:ba:99:d1:85:af:00:37:aa:10:
aa:1b:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:30 2026 by rpki-client