Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/4nCz_-tmYafm73oLWFvfTuzn3f8.roa
File: 4nCz_-tmYafm73oLWFvfTuzn3f8.roa (raw, json)
Hash identifier: 9DK6cGlfLI1qXFv7scprKFRRLUaPrCyfbwYtRh1zGjI=
Subject key identifier: E2:70:B3:FF:EB:66:61:A7:E6:EF:7A:0B:58:5B:DF:4E:EC:E7:DD:FF
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0E4193D165CFFA79ABA84D68B1A031CDC
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/4nCz_-tmYafm73oLWFvfTuzn3f8.roa
Signing time: Sun 27 Sep 2026 18:20:54 +0000
ROA not before: Sun 27 Sep 2026 18:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50979
IP address blocks: 46.28.64.0/24 maxlen: 24
195.123.208.0/21 maxlen: 21
2a02:27ac::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:19:3d:16:5c:ff:a7:9a:ba:84:d6:8b:1a:03:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 27 18:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e270b3ffeb6661a7e6ef7a0b585bdf4eece7ddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:c1:94:8e:55:d4:de:26:21:c2:1f:bd:b9:
78:27:15:d6:66:d3:46:44:ab:f5:6d:2c:b2:3c:d8:
ec:0c:95:43:fd:3e:9f:99:48:fe:b5:48:7d:31:43:
76:a7:db:05:cb:03:ed:fd:5e:af:c2:bf:f0:dc:e9:
77:bd:cd:a7:26:09:fd:fa:6d:7a:a8:39:19:b1:99:
a6:23:b6:96:e8:fa:d0:71:9c:0f:cb:01:4f:3c:b8:
38:17:85:00:32:ef:80:c0:3f:74:7f:89:c8:74:a7:
11:da:49:a8:0b:de:a6:19:fc:25:45:0f:bb:cf:fe:
13:57:1e:8b:67:9f:de:11:4b:73:ba:27:cd:b4:51:
dd:24:4e:7d:b1:d3:8a:e1:86:9e:aa:8f:20:ef:5b:
29:5b:de:c3:54:e5:27:fb:47:e7:0c:a1:81:c0:48:
29:74:6b:4b:d9:99:c3:b4:73:d1:cd:0c:56:21:56:
f7:86:a1:0b:7c:e0:ec:c9:44:db:ab:01:9f:18:c0:
ae:6f:74:dd:f6:e2:14:28:7d:0d:4c:c5:2c:4a:94:
7c:8a:63:d0:73:46:7b:34:8b:cf:d1:5a:3a:24:57:
a5:a1:77:2d:f8:fa:e1:73:c8:fb:44:30:e5:df:46:
49:bc:eb:95:f7:0f:2d:3e:2c:ba:66:56:72:e4:59:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:70:B3:FF:EB:66:61:A7:E6:EF:7A:0B:58:5B:DF:4E:EC:E7:DD:FF
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/4nCz_-tmYafm73oLWFvfTuzn3f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/24
195.123.208.0/21
IPv6:
2a02:27ac::/32
Signature Algorithm: sha256WithRSAEncryption
68:10:3d:14:69:0e:73:88:47:25:a8:d7:7d:b0:3e:cf:97:02:
88:1c:bf:98:6d:96:8a:0b:0e:48:3d:86:7c:7e:96:87:ee:db:
24:ae:85:8a:48:93:d0:07:ef:31:30:59:cb:57:a3:5d:70:b3:
34:8c:f4:70:20:03:bf:1e:d3:68:d1:9e:95:7f:a0:40:2a:57:
a5:d5:0d:50:ab:09:8c:ca:0d:e2:60:98:35:9f:30:2a:11:9e:
84:d4:0d:e2:6d:c6:4f:03:0e:ae:61:b9:92:62:68:8a:d6:52:
3d:5e:3b:fb:1e:d0:fc:6b:9b:9c:77:e8:b5:b0:b9:2f:03:b2:
b7:0c:73:30:3b:f7:3e:6d:72:ed:10:9b:8f:23:8b:80:62:51:
99:a3:e2:71:9d:da:64:7c:96:70:3b:44:a9:58:76:26:da:31:
2c:0b:77:dc:c6:05:4a:99:93:1c:07:60:bc:a9:4d:dc:84:3f:
2a:2e:7c:a0:db:1d:07:36:7f:2c:84:a6:5e:b3:d8:0a:65:f7:
68:46:68:57:b6:99:d4:f4:03:5b:47:df:68:a6:5c:0c:5c:19:
cf:49:22:fc:f7:f9:ad:2f:8a:ec:98:22:bb:18:9a:51:99:e8:
15:d1:03:a4:ab:0a:b9:63:d5:81:e9:94:d2:de:28:8d:95:a4:
4d:3e:1d:17
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaDkGT0WXP+nmrqE1osaAxzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2VlZTM1NTc3OTYzNGUwMmExNGIzOTIyMDM2N2YzYjM0
ZTViOTUwHhcNMjYwOTI3MTgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjcwYjNmZmViNjY2MWE3ZTZlZjdhMGI1ODViZGY0ZWVjZTdkZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07BlI5V1N4mIcIfvbl4JxXWZtNG
RKv1bSyyPNjsDJVD/T6fmUj+tUh9MUN2p9sFywPt/V6vwr/w3Ol3vc2nJgn9+m16
qDkZsZmmI7aW6PrQcZwPywFPPLg4F4UAMu+AwD90f4nIdKcR2kmoC96mGfwlRQ+7
z/4TVx6LZ5/eEUtzuifNtFHdJE59sdOK4Yaeqo8g71spW97DVOUn+0fnDKGBwEgp
dGtL2ZnDtHPRzQxWIVb3hqELfODsyUTbqwGfGMCub3Td9uIUKH0NTMUsSpR8imPQ
c0Z7NIvP0Vo6JFeloXct+Prhc8j7RDDl30ZJvOuV9w8tPiy6ZlZy5FldHQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOJws//rZmGn5u96C1hb307s593/MB8GA1UdIwQY
MBaAFG1+7jVXeWNOAqFLOSIDZ/OzTluVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlg3dU5WZDVZMDRDb1VzNUlnTm44N05PVzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83M2E5YWItNTMyMS00M2RlLWIwYTEt
MTA5MDQ0Y2YyM2ZiLzEvNG5Del8tdG1ZYWZtNzNvTFdGdmZUdXpuM2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83M2E5YWItNTMyMS00M2RlLWIwYTEtMTA5MDQ0Y2YyM2Zi
LzEvYlg3dU5WZDVZMDRDb1VzNUlnTm44N05PVzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALhxAAwQD
w3vQMA0EAgACMAcDBQAqAiesMA0GCSqGSIb3DQEBCwUAA4IBAQBoED0UaQ5ziEcl
qNd9sD7PlwKIHL+YbZaKCw5IPYZ8fpaH7tskroWKSJPQB+8xMFnLV6NdcLM0jPRw
IAO/HtNo0Z6Vf6BAKlel1Q1QqwmMyg3iYJg1nzAqEZ6E1A3ibcZPAw6uYbmSYmiK
1lI9Xjv7HtD8a5ucd+i1sLkvA7K3DHMwO/c+bXLtEJuPI4uAYlGZo+JxndpkfJZw
O0SpWHYm2jEsC3fcxgVKmZMcB2C8qU3chD8qLnyg2x0HNn8shKZes9gKZfdoRmhX
tpnU9ANbR99oplwMXBnPSSL89/mtL4rsmCK7GJpRmegV0QOkqwq5Y9WB6ZTS3iiN
laRNPh0X
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:09 2026 by rpki-client