Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/1G4F8tXp79ck76MYvh4RlTMuH0c.roa
File: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (raw, json)
Hash identifier: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=
Subject key identifier: D4:6E:05:F2:D5:E9:EF:D7:24:EF:A3:18:BE:1E:11:95:33:2E:1F:47
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 019E72B68ECD8830177E1ACC84C5E532C7E8
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/1G4F8tXp79ck76MYvh4RlTMuH0c.roa
Signing time: Fri 29 May 2026 07:50:27 +0000
ROA not before: Fri 29 May 2026 07:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210006
IP address blocks: 178.20.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:b6:8e:cd:88:30:17:7e:1a:cc:84:c5:e5:32:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: May 29 07:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d46e05f2d5e9efd724efa318be1e1195332e1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:0e:07:be:0a:18:de:b0:4a:b9:9d:4c:7d:
27:99:dd:b8:84:8b:76:9a:96:90:3c:2b:71:23:b9:
9a:19:5e:90:0b:3e:41:db:ce:83:15:fb:bc:98:a1:
e3:71:43:b5:38:24:8f:fe:3c:c1:ab:b8:36:b2:80:
ac:b3:c3:fc:31:33:28:5f:97:fd:85:08:66:38:df:
7a:a5:ec:93:cf:2b:bc:a2:ae:4d:f6:d2:15:2e:50:
97:44:d1:90:42:88:81:47:98:f3:d1:61:b3:19:ec:
0d:e9:59:cf:cd:99:aa:4c:f1:36:ef:69:51:d7:b4:
dc:59:08:b3:85:69:a1:73:ff:9a:be:b2:d9:b3:0c:
b6:15:f1:cc:24:f9:16:71:df:00:6e:f0:fb:5a:ca:
4b:85:b8:87:22:b1:95:a2:b9:9a:29:c2:c8:f4:af:
06:bc:d6:7f:5d:27:d3:95:a2:7a:4b:99:68:3b:8b:
04:df:61:20:df:1d:16:79:60:01:de:66:b6:44:af:
4b:fc:b4:81:89:a3:9b:83:da:20:d9:8a:23:7f:84:
cc:cf:4a:d3:c3:81:f9:96:97:98:a2:0c:f4:40:4a:
b5:45:a3:0e:9c:a7:8a:3b:17:ec:3e:99:2d:4d:83:
ec:7e:af:c3:b8:e1:ae:20:2f:35:6c:9c:6b:20:b4:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:05:F2:D5:E9:EF:D7:24:EF:A3:18:BE:1E:11:95:33:2E:1F:47
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/1G4F8tXp79ck76MYvh4RlTMuH0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.210.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:a3:e7:ce:23:1c:ed:7f:c3:4e:7b:7c:38:7b:0a:1f:23:d0:
ef:b5:27:fc:bf:7c:77:8c:2b:89:83:9b:9a:9e:77:17:93:95:
f4:16:44:68:af:90:07:b2:60:0f:47:5a:d5:6c:b6:fb:89:00:
ca:4a:ed:36:ac:1d:7d:05:fa:a5:21:8d:c2:c7:60:17:d9:19:
3f:5d:10:0a:e4:3e:0b:cf:03:61:c0:4a:ba:79:2a:2e:77:33:
82:ab:0e:41:22:89:db:16:d2:7a:bc:90:84:bd:c0:95:07:10:
23:ad:df:55:d4:1f:a0:14:f4:e8:6d:6d:51:7a:72:d2:bc:58:
95:ab:ee:c0:7f:88:17:8e:02:7e:7f:a8:f2:02:3f:a5:5c:25:
d4:22:9c:12:b5:a2:5e:a3:b6:81:b7:02:19:7f:bc:73:9e:44:
05:c2:d4:12:cf:7a:c2:ac:44:49:8c:59:53:94:71:26:58:ef:
67:95:32:0b:42:a3:64:a1:ea:81:18:1c:5b:02:43:9a:c8:11:
2b:56:8f:83:ae:ee:9b:08:9a:6d:2d:cf:84:b1:f1:39:d2:0e:
1b:39:08:f1:67:26:5a:4b:46:1c:49:68:c4:ef:35:2e:c2:5c:
a2:15:51:f2:78:d2:11:15:63:89:16:c7:e9:c7:6e:9a:ef:7f:
da:f8:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:16:46 2026 by rpki-client