Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/4Zx0RijYE8SvvVgj6tckmHiH8Fk.roa
File: 4Zx0RijYE8SvvVgj6tckmHiH8Fk.roa (raw, json)
Hash identifier: LrAHH9/d5fTGmjQCnjAz53w3ggYWbqUbbviEKGPYS10=
Subject key identifier: E1:9C:74:46:28:D8:13:C4:AF:BD:58:23:EA:D7:24:98:78:87:F0:59
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A319221AD09192843CCF5FB77775A3
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/4Zx0RijYE8SvvVgj6tckmHiH8Fk.roa
Signing time: Thu 01 Oct 2026 08:44:39 +0000
ROA not before: Thu 01 Oct 2026 08:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213455
IP address blocks: 82.141.160.0/23 maxlen: 23
91.82.48.0/23 maxlen: 23
91.82.62.0/23 maxlen: 23
91.82.225.0/24 maxlen: 24
91.83.160.0/22 maxlen: 22
194.143.239.0/24 maxlen: 24
213.16.110.0/24 maxlen: 24
2001:1aa1:8::/48 maxlen: 48
2001:1aa1:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a3:19:22:1a:d0:91:92:84:3c:cf:5f:b7:77:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e19c744628d813c4afbd5823ead724987887f059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:5d:a2:05:75:13:98:43:0a:fe:b6:8e:ff:
4d:e6:03:88:20:d2:84:6b:7d:4e:fe:96:17:a0:4c:
50:73:fd:49:6a:3a:42:7c:bf:15:d4:2d:2c:b9:5c:
34:c7:85:ce:49:7f:3a:cf:e1:06:93:cd:bf:c4:e8:
de:51:ed:ee:28:1a:77:3d:c4:ec:eb:6f:34:9b:d8:
c5:ea:f8:cc:39:4f:8d:f6:d2:b3:cc:61:22:c6:53:
a7:a2:d2:80:db:d1:c3:9f:36:56:ac:8f:8c:9a:61:
9c:cb:5f:69:f9:6a:db:ae:71:40:b0:dc:16:de:80:
86:16:64:31:40:98:56:15:94:cd:47:0d:4f:c0:01:
a7:e3:5d:79:62:cc:84:dd:9b:88:08:16:da:45:7b:
0a:46:23:bb:4d:29:87:35:77:30:87:77:60:28:bb:
11:85:c4:ac:9f:9c:e8:e3:3e:79:c6:71:37:02:ed:
7c:41:30:4b:1e:6f:2e:a9:b1:29:96:00:0a:3f:66:
2b:59:57:93:86:c3:db:d8:95:9e:9a:d5:bd:4c:ec:
0c:d2:74:ad:d5:2f:73:62:b9:ef:f6:35:e4:48:4a:
74:2e:85:1d:0f:2f:8b:0a:36:8b:55:69:35:c6:a2:
9e:44:65:16:3b:89:70:a4:2d:3e:4d:23:e0:1b:4b:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:74:46:28:D8:13:C4:AF:BD:58:23:EA:D7:24:98:78:87:F0:59
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/4Zx0RijYE8SvvVgj6tckmHiH8Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.160.0/23
91.82.48.0/23
91.82.62.0/23
91.82.225.0/24
91.83.160.0/22
194.143.239.0/24
213.16.110.0/24
IPv6:
2001:1aa1:8::/48
2001:1aa1:18::/48
Signature Algorithm: sha256WithRSAEncryption
06:a6:78:32:57:00:2b:d6:1c:3d:e0:cc:b7:23:f9:4c:77:e3:
a8:27:6a:a6:73:de:34:56:bf:8f:98:b1:98:e1:31:28:b8:fb:
61:87:9e:12:18:4a:01:40:03:27:f9:41:08:9a:72:ff:fe:8d:
c9:a5:78:2a:fb:04:ce:82:7b:2a:b0:56:26:fa:df:2e:ea:53:
d4:69:df:18:89:33:16:b7:29:e5:c7:a1:85:e5:2a:a0:93:39:
2f:b2:89:20:0f:e0:9d:66:4c:57:be:e9:53:ae:b1:83:89:57:
9f:ad:23:34:66:6f:c0:88:a6:be:50:24:11:34:a7:94:5d:86:
ef:5a:fb:03:39:43:63:49:48:bd:83:a3:b4:26:0e:ce:48:0f:
fd:e7:14:8f:21:aa:2e:6b:0a:f6:63:45:f6:fd:cd:6c:d2:ff:
a0:3d:d3:19:fd:d8:5d:7a:98:99:18:1a:5c:5c:58:67:75:24:
bc:7f:56:0d:04:73:b2:d3:3a:d1:7d:b6:14:f5:37:b8:51:6f:
29:bc:a3:f8:32:18:7d:76:91:de:22:ee:00:52:93:cd:28:61:
8c:e8:1c:8f:1c:ca:52:82:8b:6c:af:b2:60:46:21:0a:13:2d:
c1:2c:40:b4:39:e3:45:89:a1:41:12:6f:d0:ad:fd:f7:21:94:
2a:27:3e:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:43 2026 by rpki-client