Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SXi8BD06d7g73TDeV5X9w07l2Bc.roa
File: SXi8BD06d7g73TDeV5X9w07l2Bc.roa (raw, json)
Hash identifier: YvIvToECkPkE32VsqC+ilsJzCSnxH3zsHNnsBKfat5Y=
Subject key identifier: 49:78:BC:04:3D:3A:77:B8:3B:DD:30:DE:57:95:FD:C3:4E:E5:D8:17
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1AFDEBB5F44FE3EA5AEFF0168296490F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SXi8BD06d7g73TDeV5X9w07l2Bc.roa
Signing time: Mon 23 Mar 2026 13:59:01 +0000
ROA not before: Mon 23 Mar 2026 13:59:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 45.88.144.0/22 maxlen: 22
193.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:fd:eb:b5:f4:4f:e3:ea:5a:ef:f0:16:82:96:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 13:59:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4978bc043d3a77b83bdd30de5795fdc34ee5d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:4a:db:65:08:6c:16:36:4a:79:d8:16:ac:
20:ec:54:80:69:06:7c:5e:30:d5:b8:80:19:af:6c:
1c:03:13:b7:12:46:93:da:96:28:97:23:e4:83:07:
f4:57:52:d2:76:db:0f:73:99:72:c7:57:82:46:4e:
a4:7e:57:81:2a:02:9a:f1:00:35:de:71:a7:4e:6c:
27:61:c9:4a:4c:f8:4c:71:ab:3b:2a:c7:4a:2e:4f:
8a:cb:7e:6c:35:48:e6:9c:25:95:bd:29:2e:a9:27:
fc:f6:e9:f1:dd:e7:58:75:66:f8:b8:ce:7f:4c:dc:
0d:0e:ca:d1:1e:21:73:74:92:1f:09:fb:21:80:54:
0b:92:f8:09:31:a9:30:f6:6e:22:bb:ae:fb:7b:03:
4d:04:c9:cd:c8:73:4c:7e:31:9c:07:8f:d7:4e:a7:
74:c6:08:57:ca:70:95:ac:b8:e6:d8:74:34:3d:50:
e1:88:38:35:90:bb:61:24:21:5e:92:2f:52:bd:01:
97:42:36:08:0c:31:18:f8:b1:83:f9:76:6c:8b:52:
e5:8a:ab:1b:09:28:df:f1:4f:09:3f:72:9a:e6:f8:
0c:e3:e8:db:1d:a9:13:ae:7b:33:9c:85:b8:40:4a:
f8:bd:b0:f0:13:62:eb:07:93:7f:fe:8b:73:25:c2:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:BC:04:3D:3A:77:B8:3B:DD:30:DE:57:95:FD:C3:4E:E5:D8:17
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SXi8BD06d7g73TDeV5X9w07l2Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
75:94:db:c3:4c:c4:8c:77:9e:fd:06:55:f3:de:42:97:24:3e:
f2:fd:7b:b0:2c:0c:b8:da:6e:24:d8:b4:fa:5d:bf:7d:5e:2f:
70:5d:82:cd:af:5a:99:5a:bd:27:3d:c1:8a:6c:ee:58:ba:41:
3d:67:2c:94:1a:e7:b8:33:8a:67:48:0b:06:30:62:af:22:4c:
1d:fd:48:8f:d5:bd:8f:61:09:05:11:7c:02:55:0a:d6:71:15:
9e:9c:fa:81:d6:13:4a:72:30:c4:52:f7:53:19:a4:da:c6:90:
76:1c:45:c3:3c:a0:5b:18:b5:3d:21:64:ea:c2:9b:d6:2f:62:
42:69:02:ea:14:ff:3c:50:17:48:2b:b3:8d:e2:7e:25:a4:a0:
d7:c4:b1:36:ea:5f:ce:85:e3:fc:3f:8c:b6:ba:08:20:89:89:
fb:a7:d0:d5:09:f6:18:ba:04:79:92:d8:4a:0b:62:f3:a0:c5:
0e:c0:e0:f0:0a:aa:18:03:9e:ab:50:10:d7:19:9e:87:9c:3f:
28:fc:e7:87:f4:bf:af:36:b3:05:a5:f1:9e:65:71:2c:9f:de:
0f:ba:00:45:b2:81:e3:d7:51:54:d8:18:a8:6a:e2:5a:24:64:
ae:8c:6b:bf:5e:41:ac:7e:a8:0c:6a:e9:cd:7d:6b:36:e1:b9:
fa:45:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:43:05 2026 by rpki-client