Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4W810JMvw2hUix9A2PfUe1f_z1s.roa
File: 4W810JMvw2hUix9A2PfUe1f_z1s.roa (raw, json)
Hash identifier: VZv3zIpCXNVpwLdmXHkZ4FrkcFGPV+sIr9bkDVmhGbA=
Subject key identifier: E1:6F:35:D0:93:2F:C3:68:54:8B:1F:40:D8:F7:D4:7B:57:FF:CF:5B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A088B74859E0C346D7088DA80A1AEAA727
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4W810JMvw2hUix9A2PfUe1f_z1s.roa
Signing time: Thu 10 Sep 2026 00:28:28 +0000
ROA not before: Thu 10 Sep 2026 00:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 83.243.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:b7:48:59:e0:c3:46:d7:08:8d:a8:0a:1a:ea:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 10 00:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e16f35d0932fc368548b1f40d8f7d47b57ffcf5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:57:32:17:e9:74:81:2e:f3:0d:53:02:87:
26:e8:64:de:ed:a6:38:05:02:ce:e7:ad:62:83:60:
23:c7:80:b3:e3:48:bf:d4:d5:dc:41:55:c6:c3:ef:
e7:44:8f:e5:fd:c0:4a:54:2f:82:37:c8:c6:2d:95:
70:c7:39:28:5b:59:a8:c3:84:43:d2:2e:47:39:61:
cd:33:42:c5:d6:ef:b6:fd:e9:d7:00:c5:89:ac:3a:
d7:2a:9c:46:5f:76:d6:37:eb:2c:85:c6:16:2d:b8:
ba:48:af:fa:b3:45:18:42:60:fe:aa:2a:1a:fb:77:
b8:08:b4:de:15:6f:ce:c3:4b:bd:ac:4b:de:4e:fa:
e7:da:6d:a8:7b:d3:3a:a3:2e:f9:77:b5:f3:fa:f0:
1b:7e:57:37:38:fc:8e:1e:28:93:ed:e8:b5:55:15:
23:6a:0f:5f:7a:44:31:e9:a2:d2:08:44:fc:32:26:
95:44:7a:1f:75:33:e0:6c:81:71:11:65:0a:05:83:
88:d5:62:0c:ae:bc:b7:3f:09:15:dd:bf:ed:ac:d6:
7d:e8:d1:61:ef:b9:5c:59:c1:05:08:d9:60:e0:75:
d3:83:e6:31:7f:04:fb:92:00:d5:95:66:66:0a:fb:
65:5f:67:c9:cd:1b:f8:f0:4c:91:39:0a:31:28:7f:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:35:D0:93:2F:C3:68:54:8B:1F:40:D8:F7:D4:7B:57:FF:CF:5B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4W810JMvw2hUix9A2PfUe1f_z1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:35:26:96:b1:e0:d6:54:67:be:56:e6:52:4b:ce:f9:df:44:
6c:0a:c2:4b:4b:46:8b:41:16:18:6b:83:cb:05:4d:62:5d:e2:
f7:0e:b4:6d:6a:5c:20:8c:8d:4c:0e:b2:eb:b2:87:65:bf:05:
50:68:db:24:e3:6b:40:b0:92:54:df:0d:68:cc:01:77:27:10:
69:4c:85:56:37:ea:9b:de:40:8a:57:3a:85:c9:ba:85:42:07:
1e:c8:09:67:cd:ec:ab:90:d7:b4:9a:8a:35:fd:f5:fb:1d:6f:
f2:58:9f:c4:64:c3:a5:6d:1a:1c:27:83:1a:34:2b:6e:0c:d4:
d9:af:55:df:d0:c4:9e:fe:d5:a7:50:91:af:b0:04:c3:34:c9:
f3:9c:a9:27:eb:fc:00:d2:91:e7:a8:a6:2f:73:13:53:79:46:
11:d7:6e:90:d0:1a:44:ad:71:50:d5:f6:e2:98:92:8f:a5:42:
3e:0e:7e:45:c3:a8:e5:48:7e:17:cb:bd:83:5f:46:3f:f4:7a:
fb:4e:fd:ca:f2:aa:8a:42:d1:af:c4:46:be:39:a6:4f:44:06:
b9:67:cb:07:27:4c:5f:2c:ce:7e:3d:f8:0e:ef:99:52:48:d9:
8d:21:2b:49:b8:69:2d:ad:a9:14:39:8e:6a:bf:cc:b2:4a:85:
97:41:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:45 2026 by rpki-client