Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/4MSxcyGrUyWrJRsMgQBsT0SF5s0.roa
File: 4MSxcyGrUyWrJRsMgQBsT0SF5s0.roa (raw, json)
Hash identifier: YHs1YQaZU8Dcf12BdvP26lp5fgLiku04foD3eGwxnzk=
Subject key identifier: E0:C4:B1:73:21:AB:53:25:AB:25:1B:0C:81:00:6C:4F:44:85:E6:CD
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 01A037AE582EEE9A37E95F6FE4011100FA68
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/4MSxcyGrUyWrJRsMgQBsT0SF5s0.roa
Signing time: Tue 25 Aug 2026 06:49:27 +0000
ROA not before: Tue 25 Aug 2026 06:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48648
IP address blocks: 193.107.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:ae:58:2e:ee:9a:37:e9:5f:6f:e4:01:11:00:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Aug 25 06:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0c4b17321ab5325ab251b0c81006c4f4485e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:e3:8b:a0:96:22:47:35:9c:f1:94:bc:25:
45:b0:0c:33:1c:9a:42:d1:bb:40:fd:11:b9:29:1c:
af:3a:6b:0f:21:b1:9f:c1:28:7d:be:a5:38:a5:d4:
70:a2:30:d8:2c:aa:08:0d:36:08:39:18:48:99:21:
96:18:11:f7:f5:5c:32:13:0b:73:6f:a9:15:c1:37:
e1:b9:43:41:a0:05:bf:a6:bc:85:dc:12:2c:7d:68:
eb:7f:1b:95:7d:9f:e4:7e:85:06:c0:db:a9:1c:8b:
6c:90:85:a5:db:a6:e4:4f:76:22:fc:02:f4:15:8c:
42:19:82:42:16:6c:6d:35:3b:c6:ee:53:84:34:7f:
af:ec:c7:64:9f:fc:be:5d:3e:f9:32:3a:f3:12:dc:
00:35:e3:ba:40:aa:c1:43:40:c1:37:d4:20:a9:00:
43:ef:a4:39:72:4a:d7:05:b4:47:f1:2b:03:3a:02:
f5:44:74:35:05:65:f7:b3:25:d3:f3:dd:1e:57:de:
8c:2a:05:93:90:ad:c8:b9:65:bf:fc:2e:94:80:d6:
c1:8a:ab:37:de:a2:f0:7b:3b:dc:dc:8a:ac:91:4c:
b3:d6:c6:22:7d:88:2b:be:7e:45:5f:aa:0b:b8:f4:
b5:3e:16:4b:85:f0:3b:9d:47:34:a0:76:06:4a:0a:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:B1:73:21:AB:53:25:AB:25:1B:0C:81:00:6C:4F:44:85:E6:CD
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/4MSxcyGrUyWrJRsMgQBsT0SF5s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.134.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d9:6f:3c:b1:48:eb:73:d7:f7:12:d5:08:c8:ea:ba:b7:58:
2d:dc:e9:e7:c9:d7:89:92:ac:e3:f2:95:c0:c2:47:42:00:a5:
8f:f3:f1:7c:22:58:36:4a:82:a2:b7:0c:a1:e2:a3:ae:4e:43:
e8:9e:24:7c:a5:c1:47:a3:d5:13:5d:e3:51:af:da:0e:7b:67:
99:1c:d5:9c:f0:29:0f:fe:11:62:ea:78:c6:2d:90:43:b5:10:
0c:9d:18:2c:b2:94:45:4d:02:25:07:91:99:3b:28:53:6c:c3:
0a:3d:41:de:4e:1f:12:7d:db:2f:b6:8d:ef:fb:f8:f6:f0:22:
9b:ea:cb:ef:b5:f4:cd:c0:4f:b8:70:a6:b7:d2:1b:df:74:9c:
4e:8f:4e:f0:21:72:a9:6f:28:d4:3c:4b:38:e9:eb:62:4c:d2:
25:e5:ae:56:a2:ad:48:3d:d6:5c:21:92:1a:cb:28:3e:f8:7e:
3a:a4:78:3a:76:ed:60:cb:52:16:c3:11:ea:fb:22:31:45:5f:
e4:a2:5c:45:5e:bd:64:fb:66:97:0a:2c:0f:43:e5:55:af:11:
08:b5:6b:5f:60:13:3c:c3:a7:f3:cd:1e:21:da:de:28:13:8f:
08:d0:ed:ea:c5:d9:54:ef:8d:62:0f:c4:d9:6e:b9:9f:d0:3b:
28:8e:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:09 2026 by rpki-client