Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa
File: 4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa (raw, json)
Hash identifier: RCK1ceQp3wSH8NYHA7LP9zIIM5o/+C88uArD/S/VsPI=
Subject key identifier: E1:18:FC:A3:11:94:14:76:2B:27:13:E8:43:B0:95:32:E3:85:6D:77
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019EFAE5F33E20F5E6D472C3B62772F50709
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa
Signing time: Wed 24 Jun 2026 18:30:34 +0000
ROA not before: Wed 24 Jun 2026 18:30:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200209
IP address blocks: 5.63.20.0/24 maxlen: 24
185.23.109.0/24 maxlen: 24
2a13:a000::/32 maxlen: 32
2a13:a000:49bb::/48 maxlen: 48
2a13:a000:49ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:e5:f3:3e:20:f5:e6:d4:72:c3:b6:27:72:f5:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 24 18:30:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e118fca3119414762b2713e843b09532e3856d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:09:7c:4d:57:af:0a:07:39:36:41:13:c3:
d5:d1:e5:35:87:87:a0:2d:af:58:46:f8:ce:64:6c:
a1:92:8f:6c:8a:b8:97:fb:21:79:49:59:03:c2:7e:
2d:3b:d6:6b:ab:98:b0:a9:33:fa:7a:9a:bc:b3:17:
17:cd:c8:1c:57:9b:c4:54:f4:d1:34:28:fc:9c:f0:
a2:38:f6:c5:ff:b0:76:f8:7e:50:ce:36:bd:b8:c2:
8e:f3:ce:d7:ca:41:9c:59:7f:37:cb:82:a1:2f:d0:
57:7b:f9:af:6c:e0:5e:46:b9:ba:0a:14:ab:21:27:
76:ba:89:aa:37:5b:a8:f1:95:31:81:6f:1f:7f:b6:
d2:a7:85:82:ca:e6:6f:da:93:e8:81:d8:64:ed:f4:
6a:16:43:8a:4f:9d:8b:27:bc:ff:ca:73:79:87:73:
85:84:f7:b7:42:6c:41:67:8b:07:32:10:a6:5e:4a:
65:4e:02:5f:79:c6:10:71:d9:dc:4b:65:75:a1:7b:
73:70:e7:62:db:9a:47:ae:7b:0c:56:70:45:b3:fe:
ce:98:09:1b:32:47:31:73:2f:92:94:05:df:08:ab:
74:a1:18:f7:42:ff:36:5e:a7:35:29:0f:21:54:b0:
25:2f:bc:47:77:6a:5d:3e:3b:ac:85:b5:94:08:70:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:FC:A3:11:94:14:76:2B:27:13:E8:43:B0:95:32:E3:85:6D:77
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/4Rj8oxGUFHYrJxPoQ7CVMuOFbXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.20.0/24
185.23.109.0/24
IPv6:
2a13:a000::/32
Signature Algorithm: sha256WithRSAEncryption
52:7b:61:a9:d1:4c:29:13:e3:29:cb:fc:66:82:a5:85:0c:ec:
6c:2a:6d:bb:ed:2f:bd:50:9c:dc:75:a1:89:dc:f4:22:5f:34:
fa:90:21:19:24:8e:da:64:32:31:6b:74:2c:97:2a:57:7e:59:
78:1f:1c:8c:1e:79:2f:7a:19:b1:0a:41:f4:ee:f6:86:7c:52:
48:e8:f6:e9:04:3d:90:8b:ca:9c:be:7d:c5:ce:56:c8:c4:72:
37:9d:e5:27:74:d9:9d:d1:8f:a1:80:44:9b:60:a4:9d:53:55:
9a:28:1f:04:bb:87:af:b6:58:ae:38:d0:72:37:eb:41:99:ee:
5d:6c:2a:32:1b:ec:b7:3c:ab:71:5a:50:63:cc:56:f4:d6:c1:
31:e8:ea:95:d5:d9:c9:68:02:d1:b9:35:1e:70:84:c0:d0:cc:
dc:b7:37:b2:79:5a:cd:f7:f0:e5:4a:95:4b:12:0f:01:a3:91:
31:1e:6c:9b:b2:b6:8e:e9:09:93:0a:22:0e:90:46:c5:04:e9:
1c:4d:5c:fe:e1:3e:50:fc:8a:41:94:ca:04:b9:e2:20:b3:11:
65:28:a5:5e:b1:f0:2f:53:9e:c8:be:c7:f2:0b:43:88:d9:e2:
66:5e:04:38:5a:22:33:a4:40:4b:ee:80:9a:39:17:2f:85:a5:
d6:8f:49:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client