Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa
File: 4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa (raw, json)
Hash identifier: exTQU9dmfmZhdPx8oGiUL/j0MT0I/USYBEi+eDQjOJc=
Subject key identifier: E1:94:2B:DC:42:A0:ED:72:E4:8F:EA:7D:36:FC:3A:5D:35:69:3D:BA
Certificate issuer: /CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Certificate serial: 019F23687FA42152744B4711D8AF3DDC3EF1
Authority key identifier: F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39308
IP address blocks: 89.144.128.0/18 maxlen: 24
89.144.130.0/24 maxlen: 24
109.109.32.0/19 maxlen: 19
109.109.48.0/24 maxlen: 24
159.20.96.0/20 maxlen: 20
185.56.96.0/22 maxlen: 24
2a00:1570::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7f:a4:21:52:74:4b:47:11:d8:af:3d:dc:3e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0110dd04b90d2369a4b2764b71fd38d05085fec
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1942bdc42a0ed72e48fea7d36fc3a5d35693dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:3e:36:31:48:12:af:0d:b0:9c:6c:2f:9c:
b2:44:4a:17:e9:b3:3c:94:23:80:26:cf:85:84:d4:
4f:b7:ba:65:55:e7:13:63:cc:c1:d7:b3:99:78:18:
01:36:83:bd:71:6b:21:df:7a:0e:77:77:cb:5f:6b:
7c:50:e0:e6:45:5c:b0:99:6b:d8:fa:17:87:a8:e3:
f1:0a:43:f7:43:fb:b9:8e:f0:e7:2d:ad:fc:a5:ac:
9b:9a:4b:9b:3e:07:14:fc:3c:a4:19:2c:f3:7c:81:
9c:15:c9:06:d2:73:04:3f:9d:ef:54:76:6f:71:84:
0e:a3:2b:df:37:b6:b5:bc:18:61:cd:26:13:4d:c4:
ec:25:e6:2c:2f:ac:30:27:1f:7f:6a:ab:33:d3:b2:
f0:b3:e8:84:07:1f:40:fc:19:45:53:18:b3:01:7f:
9d:8d:f5:74:e3:83:22:24:38:af:59:06:39:45:bd:
de:3f:28:61:59:e8:31:77:d6:d0:8b:9d:74:c0:3a:
99:60:70:c5:a4:a4:fe:43:70:1d:5d:be:de:4e:b9:
67:28:7f:52:ba:8e:70:c3:6b:68:5e:6c:e2:49:8c:
2a:9b:84:cf:28:5d:ae:9b:df:e8:59:40:12:0a:d3:
7b:af:6e:d1:55:6a:d4:11:6c:a2:00:56:4d:0a:87:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:2B:DC:42:A0:ED:72:E4:8F:EA:7D:36:FC:3A:5D:35:69:3D:BA
X509v3 Authority Key Identifier:
keyid:F0:11:0D:D0:4B:90:D2:36:9A:4B:27:64:B7:1F:D3:8D:05:08:5F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BEN0EuQ0jaaSydktx_TjQUIX-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/4ZQr3EKg7XLkj-p9Nvw6XTVpPbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/8BEN0EuQ0jaaSydktx_TjQUIX-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.128.0/18
109.109.32.0/19
159.20.96.0/20
185.56.96.0/22
IPv6:
2a00:1570::/32
Signature Algorithm: sha256WithRSAEncryption
39:a8:11:17:98:ac:39:29:57:67:ab:3e:c2:74:7b:b7:5d:60:
0f:ff:91:04:f2:4e:6a:29:1f:75:ce:1c:29:5d:a1:68:cb:e7:
53:63:75:79:f4:fe:26:18:31:cd:5b:50:65:6a:f0:c4:a1:2c:
31:ec:ab:a0:74:58:8f:6f:bf:01:03:c3:08:c5:ee:0d:5c:a5:
b3:ad:5e:bf:5d:f1:d1:a5:05:06:1b:ff:01:c1:0a:31:39:33:
24:17:0e:6b:cb:0b:8b:05:eb:7a:ac:b4:bd:25:90:f2:53:b9:
29:d3:29:ef:57:85:e4:6f:f6:29:60:1b:c0:86:22:1a:a3:cb:
6a:08:4a:b2:2a:be:ea:9a:7f:9b:ff:9c:93:d2:23:06:9a:a9:
bf:c0:73:1a:45:62:ea:5a:8a:b6:3d:2f:28:82:fc:30:09:3c:
c3:6e:2e:c1:a3:5f:34:59:e8:09:77:cf:a0:42:c4:54:91:36:
ae:4a:ef:0f:38:4e:89:03:51:aa:8f:74:c7:7a:47:ac:9c:8c:
e8:36:4c:c8:3f:6a:d1:2a:85:6b:d0:75:62:e1:1a:ad:aa:d5:
93:2c:da:a9:5c:2e:ae:d6:a9:5d:4b:78:a6:7d:3a:1f:46:a3:
4d:c7:ee:7c:32:c4:4e:96:f5:22:10:94:69:28:5d:64:50:56:
03:e0:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:07 2026 by rpki-client