Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gTNotQd5mIrMggoPngv-AOFt3UI.roa
File: gTNotQd5mIrMggoPngv-AOFt3UI.roa (raw, json)
Hash identifier: SrQ0nMSjnlPYgzI9Vtj6AWq8fL5vIwmVU1ghwHN631w=
Subject key identifier: 81:33:68:B5:07:79:98:8A:CC:82:0A:0F:9E:0B:FE:00:E1:6D:DD:42
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1AFF3F63A80BA3F49C69008C79062B2B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gTNotQd5mIrMggoPngv-AOFt3UI.roa
Signing time: Mon 23 Mar 2026 14:00:28 +0000
ROA not before: Mon 23 Mar 2026 14:00:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 45.155.64.0/24 maxlen: 24
80.244.12.0/24 maxlen: 24
80.244.15.0/24 maxlen: 24
94.103.187.0/24 maxlen: 24
176.118.33.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:ff:3f:63:a8:0b:a3:f4:9c:69:00:8c:79:06:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 14:00:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=813368b50779988acc820a0f9e0bfe00e16ddd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:27:a0:a7:0e:14:6d:c4:2f:0f:8e:3a:fd:
2a:a5:f6:9d:d0:a9:00:e9:e6:39:65:41:90:93:ce:
92:89:3e:90:c5:80:35:03:08:9b:cb:ef:8c:6f:d4:
16:1e:f5:bb:b3:fb:3f:7e:ed:ac:73:74:33:e9:1f:
08:d4:11:a4:f8:d6:44:80:35:e7:ef:ce:d7:21:95:
06:c8:c0:14:9d:03:5d:84:e9:5a:0b:f8:59:81:eb:
ec:c8:d3:89:e9:d4:00:63:e8:1c:99:9c:e4:1f:b5:
61:be:f3:d8:ab:50:4f:77:90:ff:ad:ce:f7:78:df:
3f:14:b7:4b:35:55:ea:92:0d:d1:a2:f1:d3:f6:76:
cf:35:28:90:7b:b8:39:82:86:67:e7:2c:d9:a5:11:
db:29:bf:9b:c1:df:c9:2b:3c:b6:f0:70:56:34:17:
52:1a:3c:4d:87:24:2a:8f:f6:be:c0:02:4c:37:b7:
74:0f:9e:34:fb:0c:b9:23:be:ae:b4:74:8f:ac:6e:
0d:7c:c3:87:b4:33:7c:35:a5:90:90:24:5f:47:c5:
69:e5:89:c7:5b:fd:e4:be:cc:a9:76:cd:f1:73:2e:
67:e5:e6:9f:69:76:35:95:d1:06:95:9b:54:37:60:
d5:88:f4:e7:fa:79:1f:f1:0b:00:57:e0:b8:d7:1b:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:68:B5:07:79:98:8A:CC:82:0A:0F:9E:0B:FE:00:E1:6D:DD:42
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/gTNotQd5mIrMggoPngv-AOFt3UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
80.244.12.0/24
80.244.15.0/24
94.103.187.0/24
176.118.33.0/24
185.244.106.0/24
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
11:99:55:e8:23:a3:80:ee:37:e8:9a:f7:d5:b1:2e:99:aa:36:
b6:32:60:1d:a5:f6:0f:18:3b:21:9b:c9:6e:89:96:d1:e4:6c:
c5:20:4c:bd:27:96:7a:ab:4a:ee:92:da:1c:f7:01:72:59:df:
4b:30:1e:24:69:45:d8:6b:53:fd:7c:ac:cc:f9:91:21:c9:e7:
3c:d3:b6:ca:3d:da:2e:ba:1b:40:bc:83:c4:d6:0b:32:54:5b:
0c:0a:82:98:7c:55:85:d3:2f:6d:af:54:ab:49:c0:92:90:7b:
ef:ec:22:54:25:dd:2e:7a:4d:35:d8:73:01:b3:4f:96:5d:28:
42:ff:b3:72:1a:e1:47:45:f5:9d:88:aa:7b:a8:77:13:66:86:
21:61:a4:8f:98:22:52:53:31:fb:81:99:ec:0d:59:0a:8c:57:
b2:ee:6d:08:ff:39:b7:e8:59:e8:a0:57:87:3c:40:ba:fb:86:
de:f5:36:02:84:bc:23:d0:2e:20:2b:de:5f:8b:a7:82:26:64:
e8:08:e8:ad:02:1b:69:99:ef:9c:ec:63:c1:e4:1e:00:57:12:
0c:78:b6:10:7a:42:78:fb:77:3f:81:0f:2d:99:f0:03:2d:17:
d0:f7:4f:16:19:64:75:c3:59:f7:09:6a:2c:ea:07:37:f4:3a:
72:d4:3f:d4
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ0a/z9jqAuj9JxpAIx5BisrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwMzIzMTQwMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTMzNjhiNTA3Nzk5ODhhY2M4MjBhMGY5ZTBiZmUwMGUxNmRkZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB0noKcOFG3ELw+OOv0qpfad0KkA
6eY5ZUGQk86SiT6QxYA1Awiby++Mb9QWHvW7s/s/fu2sc3Qz6R8I1BGk+NZEgDXn
787XIZUGyMAUnQNdhOlaC/hZgevsyNOJ6dQAY+gcmZzkH7VhvvPYq1BPd5D/rc73
eN8/FLdLNVXqkg3RovHT9nbPNSiQe7g5goZn5yzZpRHbKb+bwd/JKzy28HBWNBdS
GjxNhyQqj/a+wAJMN7d0D540+wy5I76utHSPrG4NfMOHtDN8NaWQkCRfR8Vp5YnH
W/3kvsypds3xcy5n5eafaXY1ldEGlZtUN2DViPTn+nkf8QsAV+C41xtabwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIEzaLUHeZiKzIIKD54L/gDhbd1CMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZ1ROb3RRZDVtSXJNZ2dvUG5ndi1BT0Z0M1VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZtAAwQA
UPQMAwQAUPQPAwQAXme7AwQAsHYhAwQAufRqAwQAwkWgMA0GCSqGSIb3DQEBCwUA
A4IBAQARmVXoI6OA7jfomvfVsS6Zqja2MmAdpfYPGDshm8luiZbR5GzFIEy9J5Z6
q0ruktoc9wFyWd9LMB4kaUXYa1P9fKzM+ZEhyec807bKPdouuhtAvIPE1gsyVFsM
CoKYfFWF0y9tr1SrScCSkHvv7CJUJd0uek012HMBs0+WXShC/7NyGuFHRfWdiKp7
qHcTZoYhYaSPmCJSUzH7gZnsDVkKjFey7m0I/zm36FnooFeHPEC6+4be9TYChLwj
0C4gK95fi6eCJmToCOitAhtpme+c7GPB5B4AVxIMeLYQekJ4+3c/gQ8tmfADLRfQ
908WGWR1w1n3CWos6gc39Dpy1D/U
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:04 2026 by rpki-client