Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4Vng3exRZpwrc06MNrMIflV1czA.roa
File: 4Vng3exRZpwrc06MNrMIflV1czA.roa (raw, json)
Hash identifier: oLf7HneRmg4sEoSwjUNTb1de/X8yD/F4qLHBv6gJGXc=
Subject key identifier: E1:59:E0:DD:EC:51:66:9C:2B:73:4E:8C:36:B3:08:7E:55:75:73:30
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A052809245800ABD1CBD711BE48B71EA73
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4Vng3exRZpwrc06MNrMIflV1czA.roa
Signing time: Sun 30 Aug 2026 11:49:12 +0000
ROA not before: Sun 30 Aug 2026 11:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 89.21.84.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:80:92:45:80:0a:bd:1c:bd:71:1b:e4:8b:71:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 30 11:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e159e0ddec51669c2b734e8c36b3087e55757330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:f1:21:c5:0f:56:5d:e5:f0:0d:5f:5c:ff:
8c:71:c4:66:8e:49:12:35:2f:ff:74:31:34:2f:99:
ee:7b:ee:ea:bd:5a:d9:96:ef:d8:42:9d:e5:a7:b4:
8f:f4:7f:93:28:bb:ac:ec:2a:c0:4b:54:cd:27:4e:
ff:d3:06:f2:d4:cc:e8:ac:f4:7c:1e:6d:4c:70:4c:
ba:f5:8f:46:7d:4e:a2:c0:cd:fc:49:ed:f4:e7:b6:
e2:29:4b:28:b5:b4:84:fa:d5:fc:82:bc:d2:74:c1:
f7:60:42:bd:73:22:79:98:8a:ca:4b:68:2e:7d:19:
c9:4f:0b:77:3e:04:a2:9e:42:af:9f:28:c1:db:eb:
10:29:05:9c:42:de:80:3d:45:0b:bf:60:29:02:20:
50:a6:2c:a7:bd:78:7a:aa:c4:8f:9e:ca:b1:da:e3:
8a:b7:b9:a1:2e:2e:0c:86:86:f6:9d:65:9d:6c:4c:
9c:ca:40:af:17:6e:20:1f:86:de:00:29:b0:15:54:
2f:12:8b:e9:91:8d:3f:63:fd:5f:1e:44:e2:f7:34:
5b:64:91:a9:ec:14:f7:7d:24:e1:88:f6:cd:ab:19:
5b:cf:04:82:5d:05:e4:03:98:02:60:b0:f3:f0:7c:
44:d1:43:22:ef:28:34:91:b0:d0:ab:7a:85:c8:b2:
9a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:E0:DD:EC:51:66:9C:2B:73:4E:8C:36:B3:08:7E:55:75:73:30
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/4Vng3exRZpwrc06MNrMIflV1czA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
89.251.31.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a1:80:b2:a4:df:43:dc:5d:31:16:20:23:5d:8a:3c:a2:b6:
b4:f8:14:7e:c8:02:55:62:92:b2:4b:72:e6:1e:25:ce:e0:23:
3b:57:bf:b9:ba:58:e2:48:03:90:9b:b3:68:3e:8f:34:1a:af:
58:57:ce:6a:16:6e:1b:4a:b6:a6:65:9c:c8:cc:0d:c8:fe:10:
8e:00:9b:48:d4:36:73:ee:ae:af:9a:0c:57:f3:4d:3b:d8:31:
6a:90:18:81:ad:ec:b2:ae:e2:48:1e:3e:35:87:44:b7:4b:1f:
9d:82:3a:c3:a5:a3:99:aa:34:a1:28:f6:6b:3f:70:52:8c:7b:
7f:95:b9:3a:2d:80:f1:30:90:12:28:47:ea:95:95:cf:e6:6b:
0a:11:e9:a8:a9:f2:95:cf:85:de:f0:18:06:7a:5d:8e:8d:6c:
36:d8:51:da:ac:a1:a1:a0:3a:c3:97:ed:28:c0:53:34:8c:f5:
bf:3d:e0:8b:16:4a:9f:b5:7a:4c:a0:31:61:aa:b7:00:2d:7d:
60:10:48:10:79:76:9c:7d:70:24:c1:34:40:01:24:6f:19:e5:
1b:b4:d1:46:f0:66:43:69:11:d7:19:b1:0d:a2:30:be:a2:3d:
d5:72:ac:4a:80:82:33:75:7c:8b:3c:70:72:3f:8e:68:75:b8:
1c:ba:fb:42
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBSgJJFgAq9HL1xG+SLcepzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODMwMTE0OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTU5ZTBkZGVjNTE2NjljMmI3MzRlOGMzNmIzMDg3ZTU1NzU3MzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPPxIcUPVl3l8A1fXP+MccRmjkkS
NS//dDE0L5nue+7qvVrZlu/YQp3lp7SP9H+TKLus7CrAS1TNJ07/0wby1MzorPR8
Hm1McEy69Y9GfU6iwM38Se3057biKUsotbSE+tX8grzSdMH3YEK9cyJ5mIrKS2gu
fRnJTwt3PgSinkKvnyjB2+sQKQWcQt6APUULv2ApAiBQpiynvXh6qsSPnsqx2uOK
t7mhLi4Mhob2nWWdbEycykCvF24gH4beACmwFVQvEovpkY0/Y/1fHkTi9zRbZJGp
7BT3fSThiPbNqxlbzwSCXQXkA5gCYLDz8HxE0UMi7yg0kbDQq3qFyLKaAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOFZ4N3sUWacK3NOjDazCH5VdXMwMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvNFZuZzNleFJacHdyYzA2TU5yTUlmbFYxY3pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRVUAwQA
WfsfAwQAwV03MA0GCSqGSIb3DQEBCwUAA4IBAQAboYCypN9D3F0xFiAjXYo8ora0
+BR+yAJVYpKyS3LmHiXO4CM7V7+5uljiSAOQm7NoPo80Gq9YV85qFm4bSramZZzI
zA3I/hCOAJtI1DZz7q6vmgxX80072DFqkBiBreyyruJIHj41h0S3Sx+dgjrDpaOZ
qjShKPZrP3BSjHt/lbk6LYDxMJASKEfqlZXP5msKEemoqfKVz4Xe8BgGel2OjWw2
2FHarKGhoDrDl+0owFM0jPW/PeCLFkqftXpMoDFhqrcALX1gEEgQeXacfXAkwTRA
ASRvGeUbtNFG8GZDaRHXGbENojC+oj3VcqxKgIIzdXyLPHByP45odbgcuvtC
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:43 2026 by rpki-client