Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/4kICntJgsVWHWkY4JO35N1ABDJY.roa
File: 4kICntJgsVWHWkY4JO35N1ABDJY.roa (raw, json)
Hash identifier: ENs43kJVz2bXsMKabmKE5DgKXDHmDIJ5VjejvZ/w6lU=
Subject key identifier: E2:42:02:9E:D2:60:B1:55:87:5A:46:38:24:ED:F9:37:50:01:0C:96
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019F6648AD6D2D2664E4485B85DAC181C198
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/4kICntJgsVWHWkY4JO35N1ABDJY.roa
Signing time: Wed 15 Jul 2026 14:57:46 +0000
ROA not before: Wed 15 Jul 2026 14:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24864
IP address blocks: 2.58.144.0/23 maxlen: 24
45.12.44.0/23 maxlen: 24
89.188.64.0/21 maxlen: 24
185.159.56.0/22 maxlen: 24
193.110.28.0/22 maxlen: 24
195.234.157.0/24 maxlen: 24
217.13.176.0/20 maxlen: 24
2a02:7c8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:48:ad:6d:2d:26:64:e4:48:5b:85:da:c1:81:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jul 15 14:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e242029ed260b155875a463824edf93750010c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:83:42:a6:56:42:a0:3a:65:70:a4:56:b4:
f1:36:61:f0:a2:71:35:82:ee:77:d6:02:44:ab:17:
3d:8f:5b:46:52:af:4b:f8:ab:6d:aa:9c:fc:bb:ab:
77:bf:75:cd:81:de:e4:9d:c5:f1:43:9c:92:75:cc:
86:ba:20:93:d4:16:62:30:d9:77:2f:49:a5:09:35:
47:b4:f2:34:74:59:f8:45:c4:c3:f9:b6:c9:91:84:
86:6e:82:49:33:dd:5f:1e:9a:6c:c6:bf:d5:8f:25:
85:57:28:24:8c:1b:28:3f:90:2b:c2:cd:35:43:a1:
18:ba:c1:52:b6:d7:e3:65:af:5e:83:08:68:e9:df:
64:1a:13:ab:29:8c:90:7f:f2:1d:ed:3f:9b:22:32:
bd:48:f7:2e:3f:7a:86:1a:b2:3a:90:dd:63:cb:91:
50:5d:4d:0c:96:f6:77:32:4b:79:c1:9c:cb:8a:d6:
ed:1a:a2:e6:50:29:bc:ee:3a:8b:16:39:6b:35:e6:
e8:d1:36:f1:1a:1f:6d:b8:f7:5a:ba:67:84:13:bb:
a1:7c:7e:c0:6d:91:5e:b3:5a:02:93:31:03:74:fb:
0d:aa:c5:01:5e:d9:cd:1a:07:da:05:cf:41:63:b7:
80:d5:13:c7:13:76:a3:f1:1c:c3:8c:ad:a2:fd:15:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:02:9E:D2:60:B1:55:87:5A:46:38:24:ED:F9:37:50:01:0C:96
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/4kICntJgsVWHWkY4JO35N1ABDJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.144.0/23
45.12.44.0/23
89.188.64.0/21
185.159.56.0/22
193.110.28.0/22
195.234.157.0/24
217.13.176.0/20
IPv6:
2a02:7c8::/32
Signature Algorithm: sha256WithRSAEncryption
42:74:0a:e2:49:3c:58:17:d0:b4:ac:4f:eb:de:d0:3e:1e:a9:
b6:c6:b3:ab:22:22:20:60:84:67:5c:40:4a:83:f3:bc:ed:52:
46:02:ea:6a:a2:8e:4f:40:c4:d0:61:1e:07:98:22:2d:07:10:
54:db:bc:22:91:77:6d:e6:7c:f9:6a:ec:56:64:d8:c8:73:d6:
df:ca:3e:5b:b0:20:d6:2f:3a:a9:35:eb:c4:97:27:60:ed:a2:
1c:18:12:86:3d:07:0e:3d:68:8b:c7:79:55:db:a3:d4:31:9c:
e5:dd:2d:b7:9e:82:83:52:a8:89:96:7d:41:35:c9:27:57:96:
df:9b:e1:37:bb:c3:0f:99:46:fc:29:f4:1f:e5:e6:ef:52:4f:
c0:bb:94:51:74:1f:d3:91:f4:c4:8f:18:74:17:9d:9f:76:1b:
2c:5b:2b:84:31:21:df:de:93:23:40:84:ce:47:8b:c9:b4:48:
a9:af:56:c2:32:7b:7d:84:c3:f1:10:c7:27:c6:b7:69:38:ed:
51:aa:9c:0a:8c:d1:63:b8:27:bd:5b:12:78:5a:19:54:d8:70:
ae:79:f0:41:e9:c4:e9:13:e2:16:21:22:57:db:29:fa:19:fd:
b4:91:8b:ee:88:7c:20:f0:42:03:1e:90:8b:5b:40:f2:a7:b1:
b2:bd:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:01:50 2026 by rpki-client