Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uZwAgAMHzCc4BcvxdkaHWLqx4pc.roa
File: uZwAgAMHzCc4BcvxdkaHWLqx4pc.roa (raw, json)
Hash identifier: HnTb93EbbZ5h8AeIKPm11juXJW5SJcoZ/h//tUe3IEI=
Subject key identifier: B9:9C:00:80:03:07:CC:27:38:05:CB:F1:76:46:87:58:BA:B1:E2:97
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1AFD1FBD9FDE0408C6C3596849A73D2B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uZwAgAMHzCc4BcvxdkaHWLqx4pc.roa
Signing time: Mon 23 Mar 2026 13:58:09 +0000
ROA not before: Mon 23 Mar 2026 13:58:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399641
IP address blocks: 45.155.66.0/24 maxlen: 24
45.155.67.0/24 maxlen: 24
89.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:fd:1f:bd:9f:de:04:08:c6:c3:59:68:49:a7:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 13:58:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99c00800307cc273805cbf176468758bab1e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:ab:e2:fb:08:fa:e8:8a:9f:11:a5:8d:a0:
f1:74:e9:b9:f1:11:78:ff:2b:79:b0:71:6f:77:6f:
4c:03:57:50:29:52:2b:11:e5:b4:9e:33:5e:ff:4a:
54:a4:dd:c2:bb:49:ed:c0:d0:f2:bd:80:a2:21:27:
bb:7f:50:da:23:9d:13:13:8b:06:75:17:77:36:27:
4e:29:33:50:51:2d:1f:48:05:47:30:7b:e7:45:9a:
e4:97:c0:7a:ea:72:bf:be:6d:3c:c4:eb:ba:f5:46:
33:3d:3a:6f:70:5e:a0:da:92:91:bc:30:63:34:2e:
ed:ac:d8:2d:62:c4:42:ba:a1:8c:35:58:9d:63:18:
94:e2:eb:75:61:d8:95:02:91:6e:c2:a5:03:0b:09:
32:c7:ad:5e:c8:d3:00:34:b1:53:5a:7b:29:e1:c2:
58:10:79:af:cc:c6:44:80:64:cc:67:85:75:91:1c:
5b:4c:e6:f8:35:72:6d:de:82:f5:8d:ec:79:88:e8:
f2:bf:5a:71:1f:ca:f3:01:cb:a2:1e:e7:77:1f:3b:
96:4c:78:1d:73:e0:54:2c:6d:15:26:98:c3:6d:aa:
4e:4b:8b:f5:15:c2:29:4b:17:e9:3c:2e:df:3f:7a:
33:b2:29:14:da:42:0a:c2:d5:60:cb:67:93:ff:00:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:00:80:03:07:CC:27:38:05:CB:F1:76:46:87:58:BA:B1:E2:97
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/uZwAgAMHzCc4BcvxdkaHWLqx4pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.66.0/23
89.106.205.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:55:38:d7:01:66:23:b8:1e:21:24:84:b9:f3:29:d3:aa:f4:
8e:8a:66:b6:0d:c9:0f:ba:13:ef:ea:ac:df:c5:44:2e:07:2a:
7c:3a:07:b2:fe:04:62:76:ee:0c:9f:9a:5c:56:b9:3b:ea:9e:
39:ce:d5:92:9a:0f:e7:18:c3:88:e0:db:37:e9:19:79:a7:59:
c7:20:9d:09:da:6c:6c:cb:dc:56:5f:ba:71:5c:38:ce:89:b3:
db:9f:8e:af:58:19:32:78:2a:16:7a:29:22:07:a9:fe:7e:b3:
a0:de:b7:dd:1c:e2:bf:86:fd:1b:42:7c:17:a7:8e:3f:22:6a:
78:32:aa:cd:40:e6:58:e5:ec:3a:b5:96:dd:fe:ec:4b:c4:a6:
01:79:9f:58:f1:94:69:73:1c:a9:23:78:8d:52:1f:dc:fd:e8:
1b:ef:67:d3:0e:2b:a9:18:84:4d:90:25:59:0b:30:a5:c7:c3:
bc:5c:ef:1e:55:13:cd:0a:58:f6:a0:33:f7:43:2c:65:d7:0a:
ca:7c:dd:d7:2b:43:55:50:07:af:6a:90:28:91:54:71:51:e5:
f0:60:83:cc:04:85:01:66:98:0c:8b:52:0a:ca:86:f2:37:b5:
5e:d6:8b:7a:7f:a0:60:6a:a8:93:e8:6e:15:37:ac:72:74:86:
ac:ab:4e:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0a/R+9n94ECMbDWWhJpz0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwMzIzMTM1ODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTljMDA4MDAzMDdjYzI3MzgwNWNiZjE3NjQ2ODc1OGJhYjFlMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdSr4vsI+uiKnxGljaDxdOm58RF4
/yt5sHFvd29MA1dQKVIrEeW0njNe/0pUpN3Cu0ntwNDyvYCiISe7f1DaI50TE4sG
dRd3NidOKTNQUS0fSAVHMHvnRZrkl8B66nK/vm08xOu69UYzPTpvcF6g2pKRvDBj
NC7trNgtYsRCuqGMNVidYxiU4ut1YdiVApFuwqUDCwkyx61eyNMANLFTWnsp4cJY
EHmvzMZEgGTMZ4V1kRxbTOb4NXJt3oL1jex5iOjyv1pxH8rzAcuiHud3HzuWTHgd
c+BULG0VJpjDbapOS4v1FcIpSxfpPC7fP3ozsikU2kIKwtVgy2eT/wDSiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLmcAIADB8wnOAXL8XZGh1i6seKXMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvdVp3QWdBTUh6Q2M0QmN2eGRrYUhXTHF4NHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZtCAwQA
WWrNMA0GCSqGSIb3DQEBCwUAA4IBAQDYVTjXAWYjuB4hJIS58ynTqvSOima2DckP
uhPv6qzfxUQuByp8Ogey/gRidu4Mn5pcVrk76p45ztWSmg/nGMOI4Ns36Rl5p1nH
IJ0J2mxsy9xWX7pxXDjOibPbn46vWBkyeCoWeikiB6n+frOg3rfdHOK/hv0bQnwX
p44/Imp4MqrNQOZY5ew6tZbd/uxLxKYBeZ9Y8ZRpcxypI3iNUh/c/egb72fTDiup
GIRNkCVZCzClx8O8XO8eVRPNClj2oDP3Qyxl1wrKfN3XK0NVUAevapAokVRxUeXw
YIPMBIUBZpgMi1IKyobyN7Ve1ot6f6BgaqiT6G4VN6xydIasq07Z
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:35 2026 by rpki-client