Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R4_xJiCMQz4GcaZ7eXYf66rTF-A.roa
File: R4_xJiCMQz4GcaZ7eXYf66rTF-A.roa (raw, json)
Hash identifier: nDQKRQdPMHAsOtlBZtEfruBrgqn9h8zzA3/Q0nnjMfs=
Subject key identifier: 47:8F:F1:26:20:8C:43:3E:06:71:A6:7B:79:76:1F:EB:AA:D3:17:E0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A052C8E42D868AADD97BED549D3B7EF501
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R4_xJiCMQz4GcaZ7eXYf66rTF-A.roa
Signing time: Sun 30 Aug 2026 13:08:12 +0000
ROA not before: Sun 30 Aug 2026 13:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 2a0e:4001:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:c8:e4:2d:86:8a:ad:d9:7b:ed:54:9d:3b:7e:f5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 30 13:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=478ff126208c433e0671a67b79761febaad317e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:b9:47:ca:d9:a3:8b:e9:41:c2:06:95:21:
9c:1d:f0:c9:65:df:3f:55:18:10:06:fd:c7:37:bf:
c5:12:4a:75:f2:e1:0e:5b:de:1b:57:d8:07:b7:6d:
0e:31:b2:50:dc:06:0d:46:85:1a:a5:6b:44:d6:13:
b3:cf:96:f4:f5:ec:c7:ed:a4:88:47:9f:d8:43:f5:
27:04:30:35:fe:3a:d1:b6:d3:84:cc:3f:06:d4:03:
11:d1:a7:d7:10:35:56:6d:d6:64:36:62:2d:f4:82:
47:e2:be:43:d4:05:20:cf:a7:86:5a:51:71:cc:59:
25:b4:f7:f4:fa:5d:f1:ab:99:32:3d:26:a4:17:a8:
81:57:ee:db:7f:c7:5b:2f:c0:6e:7d:d2:19:e0:93:
ce:dd:2a:b9:b2:04:50:6a:13:ec:94:d9:7c:70:34:
f1:22:38:ff:42:06:1c:50:9d:c4:90:85:fc:15:a0:
c4:5e:d5:1e:d3:85:5d:5d:0f:df:b6:19:f8:8c:a8:
22:77:74:f5:d1:ae:f0:0f:2f:61:54:be:ea:f5:0c:
55:82:39:07:2b:82:a9:1a:e6:2b:10:9b:f1:9c:46:
cb:38:c6:c2:21:13:5d:20:dd:4d:7b:91:c3:2e:4f:
08:7a:f4:3a:0d:11:c5:5b:f7:77:6a:5a:29:a7:70:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:F1:26:20:8C:43:3E:06:71:A6:7B:79:76:1F:EB:AA:D3:17:E0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/R4_xJiCMQz4GcaZ7eXYf66rTF-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:2000::/36
Signature Algorithm: sha256WithRSAEncryption
81:bf:1e:d7:d3:26:d7:5f:cf:db:01:35:49:0a:c1:5a:be:70:
45:06:ae:f7:c2:1e:14:36:57:70:da:95:d5:9c:5f:5e:67:d8:
ed:54:a9:48:40:bb:b8:c3:59:05:25:60:64:71:a3:9b:50:59:
65:52:e0:85:dc:56:aa:e7:ad:66:0d:a6:74:ab:ef:61:ae:31:
81:38:33:82:bc:61:85:25:1b:25:24:a5:88:f6:59:da:b1:76:
bf:fa:60:c9:8a:fe:19:bb:67:c2:0c:1d:6e:37:bd:37:a8:fe:
76:0b:9d:29:e8:9d:d8:57:f2:b7:0e:ef:18:4d:c0:54:58:ee:
3e:a0:1f:8c:d8:2b:86:83:9d:ef:9e:31:e2:bd:fb:af:7e:d0:
27:21:15:1b:aa:eb:ac:50:c6:4b:a0:e4:fe:c3:61:69:05:dd:
bd:b2:7f:81:68:83:cc:5f:03:05:2b:30:a9:21:4d:48:45:88:
34:65:3b:5d:f5:51:bc:a1:47:c9:a5:f3:0b:7b:10:45:8a:ff:
33:d4:29:34:15:d9:37:b9:b2:95:9d:ca:f1:db:02:90:3e:ba:
82:e1:bd:73:4b:a5:e6:aa:b8:5e:e6:8c:71:ff:0c:13:de:fb:
78:48:c0:03:95:d1:71:ae:13:1d:c8:06:3a:9d:87:1c:8d:33:
84:28:19:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:23 2026 by rpki-client