Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa
File: BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa (raw, json)
Hash identifier: Z8/iluS8EAJmrvxxHXbWJHlRH0f/X4A6MDYigcnMSGw=
Subject key identifier: 04:AE:1A:AE:76:D2:43:80:76:E6:9C:43:44:4E:48:7B:8B:41:15:E4
Certificate issuer: /CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Certificate serial: 01A03446C24FD38F2934C0C7637322BB0349
Authority key identifier: E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa
Signing time: Mon 24 Aug 2026 14:57:27 +0000
ROA not before: Mon 24 Aug 2026 14:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212486
IP address blocks: 194.140.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:46:c2:4f:d3:8f:29:34:c0:c7:63:73:22:bb:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ac7529811d010c4eae929b8269dcb1ee60427d
Validity
Not Before: Aug 24 14:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04ae1aae76d2438076e69c43444e487b8b4115e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:a4:97:1c:5e:aa:86:41:40:cd:51:54:0f:
5a:93:bb:de:aa:d9:ff:90:d6:df:e9:bf:3a:3e:72:
c9:a0:00:4d:0e:22:2e:f9:f9:86:bc:b8:97:d4:be:
27:b0:d8:af:7e:4c:6b:9e:32:cd:21:bf:13:41:0a:
5f:2b:41:d0:bb:8c:af:c4:ad:f3:e2:75:f0:7f:03:
a7:ed:5f:3a:db:b4:ee:b9:df:16:3d:fd:7f:91:c5:
d7:cf:bb:b1:66:7f:14:54:eb:ab:48:9d:c2:b9:81:
fe:05:8f:59:25:d5:06:cf:e9:09:15:24:af:63:30:
21:26:64:44:40:99:12:17:c5:bd:05:9d:66:66:c8:
ce:51:97:bb:f7:ee:51:7e:bb:26:d5:00:2f:04:b0:
ae:d0:38:27:b5:56:d1:d9:84:92:e6:e1:ab:ba:19:
43:67:ef:a8:c3:0a:91:0c:90:cb:0a:86:27:6c:c4:
35:2d:c9:55:57:f9:77:25:e5:e7:13:9e:ad:3c:a5:
73:df:25:86:08:a4:dd:3e:63:c7:7e:1f:22:a3:84:
11:65:de:10:d2:7a:ee:b2:a1:e6:6b:42:ef:44:a5:
f5:ec:f1:56:24:ed:18:ea:d6:10:f7:4e:31:47:64:
e5:fd:1d:8b:9a:86:ee:08:f3:f6:db:b6:bb:25:5b:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:1A:AE:76:D2:43:80:76:E6:9C:43:44:4E:48:7B:8B:41:15:E4
X509v3 Authority Key Identifier:
keyid:E4:AC:75:29:81:1D:01:0C:4E:AE:92:9B:82:69:DC:B1:EE:60:42:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kx1KYEdAQxOrpKbgmncse5gQn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/BK4arnbSQ4B25pxDRE5Ie4tBFeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9f7bb1-8aa6-418a-bbe3-831526deb327/1/5Kx1KYEdAQxOrpKbgmncse5gQn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.193.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5a:ca:b3:53:74:e1:ba:50:fe:ab:db:86:48:f8:5d:9a:20:
ed:b5:5e:3f:c5:ff:5a:16:5e:a0:0e:31:01:9a:ca:e1:2f:74:
42:f9:11:fd:ca:f3:93:30:6f:2d:16:81:dd:5e:2c:3d:4f:43:
35:9c:92:6b:74:51:eb:89:cc:73:98:c1:68:48:c8:db:48:08:
ed:88:32:0f:2c:a3:a6:52:be:17:7b:f0:c1:6f:dd:55:ea:f5:
85:a8:44:b7:98:61:06:7a:61:3a:4f:f5:c3:db:39:bf:cd:3e:
70:6c:d5:aa:ad:a0:c9:ba:c1:1d:e7:b1:cc:2e:9b:8b:dd:89:
24:54:46:bb:e5:f1:94:df:6d:80:bc:f8:ff:e5:23:db:1f:9f:
3e:20:35:34:70:86:ee:88:1f:7a:ba:48:cf:81:6f:81:b7:ff:
0d:60:09:4c:93:a4:7e:41:06:37:0f:0a:13:20:32:67:5b:a1:
4f:b2:3c:97:df:26:30:46:ec:4d:26:20:b9:3c:93:21:48:cc:
db:4f:11:81:db:23:01:e3:90:24:f0:4a:d4:68:2a:a8:5c:c6:
1c:50:2a:08:84:63:19:3a:ba:8f:6c:42:69:da:37:ba:05:0a:
49:c7:16:83:d3:78:6e:36:d2:35:08:1d:dc:bc:32:39:8c:36:
ca:57:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:33 2026 by rpki-client