Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa
File: 4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa (raw, json)
Hash identifier: nDBkzRzCyJ6k3duOjuq/g47E59h3h29lMNe++vUhVXY=
Subject key identifier: E2:0C:94:82:FB:DB:94:2E:C8:E5:00:F1:08:D0:82:C8:42:5E:59:9E
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019FD65D6AA17B44A59728957CF6FA894A92
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa
Signing time: Thu 06 Aug 2026 09:17:54 +0000
ROA not before: Thu 06 Aug 2026 09:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219109
IP address blocks: 94.131.190.0/24 maxlen: 32
94.131.191.0/24 maxlen: 32
2a07:aa40:40::/48 maxlen: 48
2a07:aa40:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:5d:6a:a1:7b:44:a5:97:28:95:7c:f6:fa:89:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Aug 6 09:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e20c9482fbdb942ec8e500f108d082c8425e599e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:81:cb:99:10:7c:8c:b9:5f:ff:ad:55:34:
61:e8:46:99:e8:e8:92:bd:e0:00:0b:84:f0:2c:53:
cd:c5:7e:71:19:bd:83:78:af:f0:19:5c:98:1d:a9:
84:3d:45:a1:a3:53:70:70:20:5f:92:4f:1a:bf:d4:
c0:03:a4:91:4f:a0:db:52:54:fa:2e:02:92:28:c1:
7e:5c:ad:93:47:09:dc:12:68:0f:5f:b7:0e:b4:f2:
22:e7:0c:be:f2:65:57:d4:b5:1a:1f:5b:51:7c:24:
05:29:c4:65:09:86:ed:4a:1c:1d:73:c7:ea:ff:64:
95:8c:b2:e4:32:36:36:3d:ab:b5:fb:0f:9c:26:b1:
69:84:85:b5:d0:a1:34:b4:1a:27:1b:6a:18:16:d5:
5f:ec:3a:13:3f:ff:18:8e:bb:b7:55:9e:a1:60:e5:
2f:9a:f2:74:41:69:f9:14:f5:35:af:39:18:25:8c:
90:2f:ac:2b:cf:42:7d:f5:be:a1:d5:34:62:ba:58:
37:22:db:fd:5b:b2:b0:b7:27:4d:a1:b4:ea:6c:55:
40:50:cf:4d:ef:bf:bb:75:15:53:85:f2:e3:24:f4:
8e:05:50:d4:d4:ed:ae:79:13:67:7c:19:a0:e2:21:
c9:01:cd:f7:d4:fd:81:37:70:f4:6f:fe:2a:2a:69:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:94:82:FB:DB:94:2E:C8:E5:00:F1:08:D0:82:C8:42:5E:59:9E
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.190.0/23
IPv6:
2a07:aa40:40::/47
Signature Algorithm: sha256WithRSAEncryption
b9:1e:9c:05:13:b8:49:ad:b3:08:fa:ae:13:37:57:e5:ff:fa:
fb:72:bd:da:fe:99:cd:8e:f7:2f:7b:36:db:29:4d:81:53:a3:
1d:ae:8f:5b:32:9d:2f:ed:90:b4:16:ee:3e:75:68:44:80:56:
24:d6:45:4e:cc:59:7b:a0:7d:68:2f:3b:4b:1a:99:f2:2b:71:
94:9f:b6:85:bb:e7:f3:ee:b2:4a:0d:be:50:dd:6b:79:39:42:
c5:b8:c3:6a:bc:9d:4b:b1:a8:6a:03:33:7d:b1:e2:9d:0d:69:
59:9c:14:7c:13:4b:e0:87:21:cf:19:8e:e7:13:c0:26:25:60:
e8:24:c3:ec:5f:20:9a:22:76:47:2c:c9:9a:2c:05:8f:18:c9:
17:71:8a:f6:5d:3f:a3:4a:9c:8e:f6:e0:50:9e:3a:da:78:e9:
27:9b:d9:50:68:53:e0:a9:a1:4b:5e:93:89:64:ef:02:2b:fe:
7a:58:e5:19:06:3d:56:9f:87:fd:8d:b2:11:20:ce:49:ed:e3:
3b:04:e4:0d:90:6f:34:db:cf:a7:10:0a:b4:19:10:73:27:61:
98:3e:9f:c2:c8:ce:ce:a3:cc:8c:c7:ca:63:d8:69:2d:34:07:
58:1e:b9:25:31:b8:af:ac:ca:d1:49:fb:75:12:80:76:41:d8:
9c:e1:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:03 2026 by rpki-client