Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4SP8_n_32Gz-kSc4i-QcNbbiGmU.roa
File: 4SP8_n_32Gz-kSc4i-QcNbbiGmU.roa (raw, json)
Hash identifier: Q7XORX4K1H25jQllwXkce4CvLi7Qo20bvLDfF9iuzVA=
Subject key identifier: E1:23:FC:FE:7F:F7:D8:6C:FE:91:27:38:8B:E4:1C:35:B6:E2:1A:65
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F3CEBA76965D7F747C180E2B4DAD08A63
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4SP8_n_32Gz-kSc4i-QcNbbiGmU.roa
Signing time: Tue 07 Jul 2026 14:11:44 +0000
ROA not before: Tue 07 Jul 2026 14:11:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208949
IP address blocks: 45.154.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:eb:a7:69:65:d7:f7:47:c1:80:e2:b4:da:d0:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 7 14:11:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e123fcfe7ff7d86cfe9127388be41c35b6e21a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:d8:99:7b:70:ae:0a:99:ab:64:71:10:18:
c7:ca:39:75:05:ba:d3:92:f2:4b:47:ec:82:ff:39:
d8:b2:93:6b:9c:38:db:f6:ed:62:8b:ac:81:08:f4:
34:b3:3b:e5:fe:65:1f:71:be:63:c5:93:49:02:d3:
55:c9:16:34:5d:f7:ec:af:a6:58:df:a4:26:61:5d:
b0:ef:3d:8c:68:1b:99:34:7c:5b:82:7e:40:da:cb:
17:c9:8a:c8:c8:d3:c8:79:ac:5a:6e:7c:8f:7d:2a:
1f:7e:1e:9c:9b:17:dc:9e:cf:86:5c:f7:3f:b5:0e:
9f:a2:3c:27:75:1c:ba:cb:8d:00:88:a6:76:1b:a5:
91:8f:43:0f:65:0f:f0:89:f5:75:1a:2c:7b:cc:9e:
a6:93:7e:37:b4:bd:51:dc:8f:26:98:e0:61:47:d8:
a6:0f:af:12:a7:20:29:c8:98:e3:81:7d:b1:62:cb:
ae:d0:45:aa:3f:cd:79:b3:d0:47:5a:49:b4:d2:c7:
c0:21:29:c1:ff:74:0c:96:fc:5a:ac:17:e5:9c:10:
ab:f3:63:48:ca:4a:b0:4b:a5:90:bc:16:01:62:45:
08:5f:31:7b:50:2d:c7:74:09:81:73:ff:32:a0:f3:
8d:4d:6d:1e:f3:d6:3f:a3:12:d4:87:5c:e5:e3:f2:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:FC:FE:7F:F7:D8:6C:FE:91:27:38:8B:E4:1C:35:B6:E2:1A:65
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4SP8_n_32Gz-kSc4i-QcNbbiGmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:65:18:17:d4:63:15:88:21:d2:f8:bf:de:ee:db:b6:f3:
f8:40:fe:cd:ef:bb:eb:a4:c4:6c:29:b9:eb:30:c8:63:87:cc:
a8:43:be:8a:c2:d7:33:37:af:3f:8f:3a:ed:d0:68:2a:25:30:
b4:2d:ac:5e:e3:3f:e6:c5:26:07:80:f9:43:64:4f:2e:d7:13:
a6:5c:f0:f4:a9:cb:79:04:08:01:5a:c0:2a:a9:dd:36:fb:74:
82:8c:c0:fd:62:eb:af:12:70:01:9d:72:4a:13:a6:cd:85:fa:
35:90:58:a6:bb:0f:93:49:91:5e:bc:a5:66:ef:79:7b:14:bc:
db:45:f2:64:fc:15:2b:cb:8f:04:8a:48:15:15:27:05:af:f5:
41:db:d2:41:fd:69:3a:83:2c:d4:e9:12:d7:17:04:e2:73:73:
ee:ab:1c:96:57:08:c5:68:6c:59:6c:96:c2:20:e3:22:18:e1:
a8:5a:49:ee:d2:0f:f2:0c:c7:3e:8a:42:df:d4:36:47:5e:36:
54:a7:6a:53:03:88:bc:15:43:ee:ff:67:a9:12:00:30:81:5e:
05:c6:f9:d6:60:95:32:9c:6e:c5:b8:37:1b:a8:5c:14:53:c0:
92:fb:ed:af:01:76:15:51:a6:10:a8:6e:c8:2d:97:68:12:ee:
64:d5:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:17 2026 by rpki-client