Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/24wWacTxTKeBWvKFGo-5GNyB8dE.roa
File: 24wWacTxTKeBWvKFGo-5GNyB8dE.roa (raw, json)
Hash identifier: NCrqjTsRyG9h5K6XaUABqOpJegvTm0IyWhFRdr9x/Sk=
Subject key identifier: DB:8C:16:69:C4:F1:4C:A7:81:5A:F2:85:1A:8F:B9:18:DC:81:F1:D1
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 019E9328E07A6E4FA3DD7B6770C643375AAE
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/24wWacTxTKeBWvKFGo-5GNyB8dE.roa
Signing time: Thu 04 Jun 2026 15:03:10 +0000
ROA not before: Thu 04 Jun 2026 15:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2602
IP address blocks: 158.64.0.0/16 maxlen: 24
185.149.137.0/24 maxlen: 24
185.149.138.0/23 maxlen: 23
193.168.64.0/18 maxlen: 24
193.168.80.0/24 maxlen: 24
2001:a18::/29 maxlen: 48
2001:a18:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:28:e0:7a:6e:4f:a3:dd:7b:67:70:c6:43:37:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Jun 4 15:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8c1669c4f14ca7815af2851a8fb918dc81f1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:78:9e:34:4e:d4:ef:72:b4:a5:c2:23:e6:
e5:8b:05:f2:48:0b:35:52:6f:fe:8d:58:f8:af:2f:
83:fd:cf:36:3f:a3:06:23:44:56:a8:e7:27:16:f8:
14:00:7a:50:c9:e9:2c:54:a7:fe:a5:70:76:7c:9e:
b2:2d:f9:b9:bc:49:e7:d9:70:f7:1c:a9:85:6a:7e:
3e:1c:c5:36:af:90:30:82:22:0a:96:18:95:8d:ec:
29:bc:e8:9d:88:74:53:f1:bd:74:34:f7:88:68:f4:
44:5b:a5:96:f7:2d:14:0d:0b:85:65:7e:13:51:6e:
41:88:0f:f4:a0:ce:e9:e1:de:a1:b0:c5:01:1d:24:
6d:70:1a:e8:f6:18:db:07:52:cd:fe:d2:e7:39:87:
79:31:8f:b2:76:0b:0a:96:a2:8d:6e:70:39:1c:df:
ac:cb:a2:5d:79:b4:bc:7b:fc:e0:fb:e0:d2:63:7c:
1a:c5:e0:73:71:cf:2b:9f:5e:f8:38:3a:a4:9d:61:
ac:a9:bc:80:79:a8:f5:c0:26:5b:56:28:ee:e1:26:
a0:d5:d9:22:b7:89:ba:c2:f8:36:a6:9d:41:1f:fd:
39:08:8a:99:31:2b:f8:14:8f:99:ce:b5:a4:13:c9:
c1:53:65:ce:af:e0:03:cd:7d:f8:d3:3a:1b:73:c9:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:16:69:C4:F1:4C:A7:81:5A:F2:85:1A:8F:B9:18:DC:81:F1:D1
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/24wWacTxTKeBWvKFGo-5GNyB8dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.64.0.0/16
185.149.137.0-185.149.139.255
193.168.64.0/18
IPv6:
2001:a18::/29
Signature Algorithm: sha256WithRSAEncryption
45:21:58:a8:96:20:60:f2:90:23:aa:86:35:99:5d:ad:5c:31:
9b:32:ba:15:47:1d:ce:7c:a3:17:61:71:99:0a:26:a7:09:b1:
7a:e9:09:75:b7:d7:7f:ed:98:17:6c:6a:66:e6:ec:f3:74:60:
45:d0:b9:c3:1c:97:29:61:66:ee:ec:86:58:33:80:a5:c6:48:
50:96:5d:8e:8f:54:40:cb:cf:77:31:78:c9:86:68:a1:07:e4:
aa:2b:98:3e:a2:35:c3:70:94:d3:5b:1c:dd:66:16:31:bb:82:
d1:4b:a1:f4:5f:2a:95:68:85:90:db:5f:b6:8f:75:19:a1:65:
a9:d1:bd:09:53:f9:af:e1:20:a5:4a:d0:6f:b9:fe:79:5f:89:
48:60:9a:02:14:ef:97:36:4c:98:05:4c:a4:76:85:8a:a7:54:
c3:70:fb:96:fe:a3:20:ee:8e:d7:e1:ea:1c:4e:b4:50:75:54:
14:4e:63:ab:c2:e0:21:71:76:83:dd:7b:6e:5a:10:89:5d:3f:
4c:e1:86:84:9d:4a:1d:41:2a:d4:a3:50:60:f8:e4:cc:e0:24:
5a:68:cb:b1:1b:e5:2e:0d:4a:8b:43:f4:d2:95:32:53:19:e1:
b6:12:ea:fe:f6:9d:ef:7c:7f:af:f0:67:4a:6e:7d:17:27:0d:
a1:65:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:34 2026 by rpki-client