Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4ku-OvfbOAIDHdZrf-VwCJxf_iw.roa
File: 4ku-OvfbOAIDHdZrf-VwCJxf_iw.roa (raw, json)
Hash identifier: 4PTSsoKyLsqgPRkGcMDf5l0IN32wtbhZ1d9vgD36lyU=
Subject key identifier: E2:4B:BE:3A:F7:DB:38:02:03:1D:D6:6B:7F:E5:70:08:9C:5F:FE:2C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019E3F62243CADA216CF2270F1AF0211B5DF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4ku-OvfbOAIDHdZrf-VwCJxf_iw.roa
Signing time: Tue 19 May 2026 08:37:36 +0000
ROA not before: Tue 19 May 2026 08:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203648
IP address blocks: 185.200.63.0/24 maxlen: 24
193.57.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:62:24:3c:ad:a2:16:cf:22:70:f1:af:02:11:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 19 08:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e24bbe3af7db3802031dd66b7fe570089c5ffe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:86:34:82:2b:c2:45:0a:43:8e:d6:f5:11:
fe:4d:7d:95:d3:20:9e:75:6b:ef:55:64:12:91:e9:
42:cc:c7:57:6f:df:85:fe:e5:b7:50:fc:a0:2f:86:
7a:b0:4b:e3:6d:d4:c4:10:9b:72:bc:1f:58:57:6a:
2c:5b:c1:81:e2:d5:42:92:42:82:91:83:0e:fb:17:
43:56:e6:6f:82:04:87:d0:bc:c7:1b:6e:79:44:ee:
5e:65:c7:44:7b:f9:2c:68:b5:0f:78:98:3a:d4:98:
9b:51:36:8e:84:a3:7c:46:0c:b4:41:46:e7:fc:5e:
c8:94:14:c2:4e:21:82:33:c4:fe:e4:7c:12:b2:ea:
04:fb:e8:8a:33:b6:a6:a3:0e:44:f3:e5:15:52:f9:
c4:1f:fd:d8:de:90:7a:4b:53:d5:b7:2b:f3:11:96:
91:8e:6c:88:1e:48:b3:e1:f5:3a:2a:12:3b:d7:f1:
c3:a5:2b:7f:76:ca:9a:32:9e:81:61:ba:d1:bb:73:
7b:c2:33:87:0c:a5:54:a4:d9:cf:38:33:8e:d2:9e:
18:95:22:fb:49:da:5a:a2:12:b6:27:dd:6d:e4:9d:
42:7a:90:64:eb:87:0c:97:a7:46:d8:ca:6e:f0:b5:
49:bd:27:d3:d3:43:f3:0a:d2:e3:aa:91:7c:70:fe:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:BE:3A:F7:DB:38:02:03:1D:D6:6B:7F:E5:70:08:9C:5F:FE:2C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4ku-OvfbOAIDHdZrf-VwCJxf_iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.63.0/24
193.57.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6d:b4:09:50:18:12:72:ec:da:2b:21:b5:37:c8:af:9d:c0:
38:a1:f9:a7:3b:3d:8c:62:cc:4a:18:16:a8:65:82:e7:93:d7:
b3:62:95:01:c3:fd:2e:84:76:75:7a:e3:fd:a5:a2:41:1a:d1:
69:a8:bb:38:7c:28:83:95:8e:82:bd:28:02:60:ee:8e:c4:30:
63:0c:84:5e:c1:40:97:f8:e0:b1:ad:fc:3d:9b:04:ef:85:f5:
3f:f5:9f:11:57:99:4e:31:5a:e9:ad:78:67:38:6d:51:47:78:
a6:8e:ff:44:9b:f5:21:8c:6b:fc:3d:43:d3:d3:10:3a:7f:5f:
75:b3:1b:22:34:ee:35:1b:6a:51:5c:d9:7c:4d:e9:92:64:fc:
8a:ac:61:22:ee:74:81:97:c1:91:91:52:54:fc:06:ca:9e:b7:
8b:f5:2d:21:e4:b5:3d:bc:0e:45:41:ef:b9:34:99:71:03:90:
1b:42:08:69:07:bb:27:1d:fd:85:36:39:f3:31:64:d5:58:38:
f0:1c:0f:5e:36:56:60:10:2b:db:77:45:c0:35:ce:6a:a3:c2:
af:da:e5:f9:38:de:e1:26:b8:5f:ec:ea:c3:c9:69:0f:88:53:
e6:f5:da:7d:33:c5:45:5e:54:f3:1e:84:3e:95:d5:44:fd:06:
38:e7:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:45:47 2026 by rpki-client