Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4Zrcbb75d10j6zLg8J6YbdRULGQ.roa
File: 4Zrcbb75d10j6zLg8J6YbdRULGQ.roa (raw, json)
Hash identifier: qIkY2Fl4LkbLfG5ZK830e1bWpKewrmxIGUZbyWAJFxs=
Subject key identifier: E1:9A:DC:6D:BE:F9:77:5D:23:EB:32:E0:F0:9E:98:6D:D4:54:2C:64
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E87DFBD747A89B7390C0E85C867AB210F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4Zrcbb75d10j6zLg8J6YbdRULGQ.roa
Signing time: Tue 02 Jun 2026 10:27:27 +0000
ROA not before: Tue 02 Jun 2026 10:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60404
IP address blocks: 91.200.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:df:bd:74:7a:89:b7:39:0c:0e:85:c8:67:ab:21:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 2 10:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e19adc6dbef9775d23eb32e0f09e986dd4542c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:9d:08:aa:98:df:48:13:07:4d:ac:5e:ad:
4d:d8:8f:d9:bc:98:de:de:4b:85:2f:c5:99:f0:73:
08:92:2b:b4:aa:07:18:bd:83:56:16:36:c9:8a:ab:
26:6e:85:e7:c5:da:bb:99:e9:f2:21:7b:19:ea:48:
ab:5f:44:01:c4:9f:80:37:19:3c:f5:56:54:d1:ec:
06:63:05:7e:9d:df:0f:f3:a3:2f:11:73:e6:46:16:
7b:76:d9:0b:34:65:67:83:6a:fa:9b:ce:23:a4:b5:
b7:84:05:b5:03:74:94:e1:ad:de:dd:59:23:13:26:
66:b8:85:91:eb:13:f1:f8:2f:3f:83:7c:6c:7b:93:
f9:11:eb:18:d6:8d:99:1f:e7:dd:c1:23:d0:69:be:
28:4e:55:48:bd:4c:89:5f:42:5d:f8:0e:75:d6:20:
0c:20:4b:89:6d:1e:58:06:23:cd:c2:8e:33:ee:f6:
2b:f6:a8:e5:fc:3e:2e:29:d1:e9:2c:3b:15:7b:fc:
64:cb:c3:57:02:5a:f5:7c:c7:f2:cb:45:e9:85:c4:
cc:d2:f1:62:8f:a5:fc:00:98:9b:8d:08:22:6f:e9:
5d:c1:dc:69:c4:76:a5:0b:1b:fe:b6:5f:82:cb:50:
3b:1b:ba:47:90:5a:29:b0:e7:25:40:19:f8:68:b9:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:DC:6D:BE:F9:77:5D:23:EB:32:E0:F0:9E:98:6D:D4:54:2C:64
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4Zrcbb75d10j6zLg8J6YbdRULGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:72:aa:c0:29:0f:32:32:06:30:c1:0b:b1:48:a7:58:f4:1f:
88:2f:9b:ba:2a:7e:63:0c:0c:60:04:32:f8:fa:5b:12:f4:61:
c2:f7:58:99:5f:c1:58:1e:a3:7d:aa:c3:6b:7e:ab:9f:59:13:
36:e1:7a:6b:c3:42:ad:1f:f3:02:db:98:02:24:26:50:e0:55:
23:e3:69:c2:a1:3a:f2:8a:50:9a:ea:b9:b3:72:59:2a:87:dd:
d0:d0:c1:b4:15:d6:11:6a:0e:c0:32:ab:fe:4f:e8:ce:71:60:
a0:2b:60:23:49:b7:3e:23:b6:16:d6:44:e9:80:91:89:da:89:
03:a6:6c:eb:a5:ad:8d:73:0a:40:68:94:9b:a9:d0:3c:61:3d:
ab:a7:45:c8:98:0b:15:4d:7e:a6:0c:74:7f:07:ae:6f:34:42:
02:40:ff:86:11:42:92:49:41:4e:f8:5d:91:b0:a5:a3:ff:b2:
ee:c0:97:80:0d:05:bc:23:0e:d5:64:8d:d4:d9:cc:4f:e6:1b:
91:26:1b:4b:d7:bc:2f:d3:8e:1d:4b:65:62:a2:3f:e8:d5:45:
53:f3:cc:ba:18:c2:e0:de:4d:5f:2e:3f:c3:e4:20:01:61:ed:
8b:9a:10:4b:16:1d:bf:e8:26:e9:ff:9c:07:b1:3b:b6:80:52:
2d:19:02:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6H3710eom3OQwOhchnqyEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjAyMTAyNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTlhZGM2ZGJlZjk3NzVkMjNlYjMyZTBmMDllOTg2ZGQ0NTQyYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lqdCKqY30gTB02sXq1N2I/ZvJje
3kuFL8WZ8HMIkiu0qgcYvYNWFjbJiqsmboXnxdq7menyIXsZ6kirX0QBxJ+ANxk8
9VZU0ewGYwV+nd8P86MvEXPmRhZ7dtkLNGVng2r6m84jpLW3hAW1A3SU4a3e3Vkj
EyZmuIWR6xPx+C8/g3xse5P5EesY1o2ZH+fdwSPQab4oTlVIvUyJX0Jd+A511iAM
IEuJbR5YBiPNwo4z7vYr9qjl/D4uKdHpLDsVe/xky8NXAlr1fMfyy0XphcTM0vFi
j6X8AJibjQgib+ldwdxpxHalCxv+tl+Cy1A7G7pHkFopsOclQBn4aLmnIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOGa3G2++XddI+sy4PCemG3UVCxkMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvNFpyY2JiNzVkMTBqNnpMZzhKNlliZFJVTEdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8iRMA0G
CSqGSIb3DQEBCwUAA4IBAQCzcqrAKQ8yMgYwwQuxSKdY9B+IL5u6Kn5jDAxgBDL4
+lsS9GHC91iZX8FYHqN9qsNrfqufWRM24Xprw0KtH/MC25gCJCZQ4FUj42nCoTry
ilCa6rmzclkqh93Q0MG0FdYRag7AMqv+T+jOcWCgK2AjSbc+I7YW1kTpgJGJ2okD
pmzrpa2NcwpAaJSbqdA8YT2rp0XImAsVTX6mDHR/B65vNEICQP+GEUKSSUFO+F2R
sKWj/7LuwJeADQW8Iw7VZI3U2cxP5huRJhtL17wv044dS2Vioj/o1UVT88y6GMLg
3k1fLj/D5CABYe2LmhBLFh2/6Cbp/5wHsTu2gFItGQLi
-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:22 2026 by rpki-client