Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u0AXyNs0jD0Fw1lbypn44d2uRbE.roa
File: u0AXyNs0jD0Fw1lbypn44d2uRbE.roa (raw, json)
Hash identifier: TgJyD20toIG472FUs2SP9xCpw2EP2/Yo1wp9R2/+IgE=
Subject key identifier: BB:40:17:C8:DB:34:8C:3D:05:C3:59:5B:CA:99:F8:E1:DD:AE:45:B1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EBB6EA84292EF62D7B57C5361BA27534F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u0AXyNs0jD0Fw1lbypn44d2uRbE.roa
Signing time: Fri 12 Jun 2026 10:44:11 +0000
ROA not before: Fri 12 Jun 2026 10:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 91.202.209.0/24 maxlen: 24
185.242.110.0/24 maxlen: 24
185.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:6e:a8:42:92:ef:62:d7:b5:7c:53:61:ba:27:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 12 10:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb4017c8db348c3d05c3595bca99f8e1ddae45b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:fe:e5:65:2e:47:7f:bc:e5:69:c5:54:3c:
ba:54:25:b9:d7:da:8a:19:00:a2:28:73:0a:81:f8:
a6:62:9d:cb:d8:e5:3a:f9:95:43:02:e6:4f:7c:96:
9f:41:a1:80:2d:8f:37:30:33:ff:b6:0d:1f:6f:db:
e8:cf:ea:06:b1:f8:2b:31:bb:47:0d:35:04:1f:a1:
90:05:53:2f:b3:dd:5a:3e:a5:8b:ed:e6:cf:44:30:
05:05:1d:12:28:00:0d:31:fa:c4:13:e3:57:2a:ff:
64:bb:f7:a6:89:23:44:bb:7f:9d:9a:af:a7:5f:58:
0f:6c:7b:10:96:bd:c6:00:8f:bd:16:a6:78:54:ed:
ac:47:dd:1a:30:e0:ce:b3:c1:21:49:07:2f:fb:fd:
b7:e3:c0:ee:8a:c9:68:ce:ab:ac:50:ad:0d:98:9e:
dd:3a:72:a6:54:25:40:87:c9:0f:8e:df:6c:f9:71:
73:40:1b:39:e7:ca:34:fa:6d:d8:dc:66:58:4c:9c:
4c:5b:54:6b:15:d1:82:54:a0:8c:e3:37:56:67:44:
58:1c:3e:81:ed:7c:9d:fe:ec:df:57:d2:4f:dc:5c:
cd:06:04:93:37:67:20:d8:58:0f:76:a9:a1:76:57:
f0:51:b1:79:54:25:a3:98:0a:9f:e6:71:8f:d5:f8:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:17:C8:DB:34:8C:3D:05:C3:59:5B:CA:99:F8:E1:DD:AE:45:B1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/u0AXyNs0jD0Fw1lbypn44d2uRbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
185.242.110.0/23
Signature Algorithm: sha256WithRSAEncryption
50:be:5e:ef:a2:e1:ad:a4:46:13:87:af:63:8f:3a:6b:bf:d9:
34:95:4f:59:10:88:69:68:3e:ca:10:c2:86:f9:ab:6e:31:f3:
76:12:ea:fb:66:04:04:9b:d5:51:1a:6d:20:a8:77:ca:0a:87:
a1:1c:87:78:c4:3d:dc:9d:4b:4f:31:bb:4f:5e:51:50:17:35:
c9:f6:ab:81:a2:2d:86:66:d9:1b:b7:eb:8d:d9:37:15:a4:1b:
5b:1f:51:00:47:ec:5f:13:e2:da:f4:3d:45:9e:dd:a4:14:6c:
fb:91:0d:d5:83:72:83:98:69:03:75:33:65:ce:4f:b1:78:e5:
a0:72:a3:99:5c:21:31:9f:08:cc:d4:8f:c8:2d:e1:00:44:54:
d5:18:23:95:b1:6c:0e:dc:0c:9c:78:a6:10:bc:48:5f:b4:db:
b3:37:bc:d7:7a:b6:12:48:ba:18:5b:15:6e:46:05:6e:f8:b0:
13:58:f6:5a:ea:e4:ad:16:47:cf:6a:f6:06:46:14:3f:f3:4a:
59:26:ad:f9:82:36:6e:11:7b:b1:93:a1:87:62:34:6f:57:54:
72:f7:b0:d7:88:50:9f:72:e7:f0:cc:5a:6c:6b:de:9d:d4:09:
81:25:c6:cd:86:11:7b:a5:8c:83:6a:04:ec:2f:cb:7e:0f:1c:
3e:4c:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:21 2026 by rpki-client