Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/4yjYUDwNnuaLExwhvzKp-LsldJ0.roa
File: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (raw, json)
Hash identifier: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=
Subject key identifier: E3:28:D8:50:3C:0D:9E:E6:8B:13:1C:21:BF:32:A9:F8:BB:25:74:9D
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 019F23687ED1D43A5E305DDEF5E878A39032
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/4yjYUDwNnuaLExwhvzKp-LsldJ0.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 195.43.44.0/24 maxlen: 24
195.43.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7e:d1:d4:3a:5e:30:5d:de:f5:e8:78:a3:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e328d8503c0d9ee68b131c21bf32a9f8bb25749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:40:35:5a:eb:11:aa:dc:7b:24:37:dd:6e:
40:0f:65:51:6c:9d:81:13:d8:2e:9f:f1:c6:4c:1a:
cb:4d:06:b3:4a:6c:e0:e1:c7:1a:f6:35:33:e3:e4:
52:69:82:a1:18:99:64:75:3f:67:b1:d9:d0:e8:98:
63:30:ce:53:53:19:44:2b:9a:42:00:af:15:1c:d2:
c4:11:8a:03:df:a9:1d:4b:b6:05:41:7c:6c:14:f1:
97:60:86:d1:76:7a:6b:4d:43:5e:01:4d:c8:3b:81:
ea:95:23:d4:28:60:10:4a:04:56:12:eb:7f:97:8a:
2a:0a:b8:0d:a3:75:31:58:2b:bd:63:9b:a2:d5:10:
97:1b:85:ba:6f:a3:58:67:78:18:ae:3f:b4:7a:c3:
52:0a:2f:a3:d6:94:ab:94:72:ca:9c:6d:b6:c5:ba:
75:6e:c5:a0:14:fa:ce:1b:ed:d3:ef:ea:8f:27:28:
e7:f2:79:b2:cd:48:e9:9f:0f:83:0b:db:18:a8:09:
a7:b4:bf:b8:7f:99:ed:d3:f1:41:4c:90:72:f7:62:
a5:67:dd:44:04:8d:fb:78:37:92:0c:ef:dc:1d:81:
74:d3:6b:41:6a:1d:07:67:1b:99:59:19:5a:67:64:
72:42:7c:c5:6d:23:12:b4:09:32:43:e1:ed:c1:d6:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:D8:50:3C:0D:9E:E6:8B:13:1C:21:BF:32:A9:F8:BB:25:74:9D
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/4yjYUDwNnuaLExwhvzKp-LsldJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.44.0/24
195.43.46.0/24
Signature Algorithm: sha256WithRSAEncryption
77:76:96:1e:00:0f:ea:bf:1c:64:b6:e3:fa:d1:15:ce:82:e1:
83:f4:00:3e:0e:7a:ed:8e:49:ce:0b:ff:d2:f9:1a:3c:d9:ba:
93:61:93:07:2f:5e:d8:49:f2:a7:54:cc:94:f1:d4:08:f7:d0:
4b:ba:ac:41:50:69:fd:5e:a9:df:ae:90:e8:3d:6b:c0:9c:01:
bc:2d:eb:f6:46:e9:b5:7e:eb:66:e2:41:e7:eb:ac:36:1d:32:
3a:45:36:eb:2b:c9:d0:f5:59:a0:cf:b1:12:45:bf:0b:97:3d:
af:34:cd:47:f7:fc:8b:5a:1d:7e:82:36:37:1e:23:db:c4:39:
af:2b:14:3b:57:65:db:6a:77:ad:2e:55:5d:3a:82:8a:86:f2:
4d:24:1c:b3:f8:f3:2c:cc:68:dc:ef:cc:d2:c2:5d:38:17:60:
fe:3d:a1:62:45:14:77:e2:f4:02:84:de:91:0e:b0:f7:27:76:
58:62:7e:03:cc:69:c1:f5:8c:b8:01:a9:b6:ef:af:17:ad:0e:
c6:da:c3:b2:4b:20:21:f9:d8:76:e0:ba:ff:5a:34:94:5c:06:
08:fe:e8:b1:0c:69:de:2b:8d:73:61:6f:2d:66:3c:fc:49:73:
12:58:81:3a:f0:de:93:73:5f:48:50:6b:9e:0a:fc:f5:09:b0:
9a:7e:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client