Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4LxO8eHmsdCGM2uwgkbYSBChkYQ.roa
File: 4LxO8eHmsdCGM2uwgkbYSBChkYQ.roa (raw, json)
Hash identifier: ijdgQcxZscidnqDM69GKhwKU2CnmRjFsweESsBcfHPc=
Subject key identifier: E0:BC:4E:F1:E1:E6:B1:D0:86:33:6B:B0:82:46:D8:48:10:A1:91:84
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019CC41354F6B6AAD0E3C9FC85B41F08DC8B
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4LxO8eHmsdCGM2uwgkbYSBChkYQ.roa
Signing time: Fri 06 Mar 2026 16:55:27 +0000
ROA not before: Fri 06 Mar 2026 16:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201934
IP address blocks: 5.22.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:13:54:f6:b6:aa:d0:e3:c9:fc:85:b4:1f:08:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Mar 6 16:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0bc4ef1e1e6b1d086336bb08246d84810a19184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:26:79:79:db:49:28:8a:19:ba:5e:b0:c5:
f0:1b:d8:95:d6:3c:3e:8b:3f:ec:83:a3:37:f0:44:
b6:c9:2c:5b:51:9b:aa:b3:02:9d:ef:19:1b:80:c4:
09:7c:df:be:c5:70:92:75:0c:e9:d4:de:f9:1b:52:
e0:09:58:31:e1:54:ee:ca:c4:3c:42:ae:61:58:65:
f9:5b:85:f0:ce:df:28:2e:24:a4:14:67:50:ec:4e:
ae:18:9f:dc:b9:be:39:b9:c5:f6:de:33:c0:8f:a0:
55:04:36:0f:5b:b0:12:3d:58:49:06:cc:2e:79:3c:
8f:75:ec:64:78:8e:84:89:f0:7a:85:59:b3:f4:4a:
ab:14:00:b2:14:a4:c6:50:3d:7d:71:b8:24:b7:5f:
4f:10:92:a5:c2:b8:c9:97:13:4a:92:8a:29:f4:8b:
64:67:6f:59:1c:c0:6b:f3:72:6e:ea:d4:88:0d:44:
2f:c0:d2:f8:69:ef:65:cb:2c:82:7b:4b:49:29:11:
78:c7:1e:71:7d:b1:24:70:0b:a1:ce:d6:74:af:cd:
ad:cd:2c:6a:97:7b:c1:50:42:8b:3f:cf:0f:3f:66:
f4:fa:e0:34:ff:ea:bb:0d:ff:6d:7a:00:b4:92:6a:
dd:3c:40:aa:56:2c:97:1a:e2:4f:0a:13:ef:33:e1:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:4E:F1:E1:E6:B1:D0:86:33:6B:B0:82:46:D8:48:10:A1:91:84
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4LxO8eHmsdCGM2uwgkbYSBChkYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.152.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6a:70:80:53:1c:e2:29:91:32:df:c1:15:f4:31:19:d8:8d:
ed:92:54:fd:18:ff:61:06:6c:03:b5:38:ca:67:39:09:38:ae:
31:b2:90:d5:a6:a6:fe:2f:c2:69:b9:0b:4b:67:76:95:89:6d:
c4:55:04:70:2d:01:a7:a6:39:7c:17:58:c4:72:67:3b:13:bd:
01:1d:e1:13:9e:b4:c8:41:f7:96:5a:ec:89:64:76:65:11:ab:
08:a5:67:33:aa:1b:8d:48:48:06:b3:6f:4e:4e:dd:db:f8:fe:
19:ce:a1:6a:98:4a:07:e1:be:05:fc:55:7b:aa:07:b5:ea:ed:
db:4d:4d:49:aa:04:0c:ae:05:5b:37:a1:bf:5f:f7:81:c6:0e:
3c:63:09:c6:a4:9f:7c:be:6d:af:05:24:62:fa:7f:18:23:94:
f4:6a:0b:9f:54:1d:c0:3c:5b:49:7b:ad:63:36:5f:f1:a8:4b:
01:cd:b9:f9:88:fe:93:9f:32:09:8e:25:8e:ea:0b:06:b3:fa:
84:5d:f9:39:af:dd:3f:8b:a8:df:ad:d0:93:6d:21:5c:1b:ff:
a6:6f:9c:ac:6d:2f:24:e1:50:9d:27:77:fe:47:26:91:c7:24:
aa:66:37:b3:3e:4c:3d:f2:38:d8:eb:e6:19:c7:7f:54:5f:8b:
49:ce:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:14:51 2026 by rpki-client