Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/c4BSuwIuGEphNQ8ew_DXoOH0_Es.roa
File: c4BSuwIuGEphNQ8ew_DXoOH0_Es.roa (raw, json)
Hash identifier: b9CwMrVo+dQDOYFiKFxw60+DZS+sdX8bY84HYqhlcQI=
Subject key identifier: 73:80:52:BB:02:2E:18:4A:61:35:0F:1E:C3:F0:D7:A0:E1:F4:FC:4B
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A024C7C87C70EAEA84E4BAF85230DDEE3D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/c4BSuwIuGEphNQ8ew_DXoOH0_Es.roa
Signing time: Fri 21 Aug 2026 14:44:27 +0000
ROA not before: Fri 21 Aug 2026 14:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 40
2a0e:4005:ff10::/48 maxlen: 48
2a0e:4005:ff12::/48 maxlen: 48
2a0e:4005:ff13::/48 maxlen: 48
2a0e:4005:ff20::/48 maxlen: 48
2a0e:4005:ff41::/48 maxlen: 48
2a0e:4005:ffdd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:c7:c8:7c:70:ea:ea:84:e4:ba:f8:52:30:dd:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 21 14:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=738052bb022e184a61350f1ec3f0d7a0e1f4fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c7:ce:93:94:1f:bd:66:8d:c6:44:47:f2:ee:
80:e0:41:d6:9c:cd:2e:04:a1:e9:63:6c:a4:05:5e:
32:d3:6c:f8:3a:d1:3f:87:31:9b:fe:b8:d9:e1:43:
01:75:99:b9:66:2b:f2:65:a0:93:56:10:64:3f:01:
7e:ae:33:f8:28:1d:91:65:8a:0a:a5:5e:e3:8a:d7:
e3:28:0e:5a:87:60:59:3c:e9:a6:92:e8:45:0b:36:
61:13:c6:16:22:df:0b:f3:2e:03:92:83:67:f7:1f:
41:0d:ee:61:60:fb:7e:1f:13:44:5d:de:91:35:5f:
cd:6f:ef:b7:74:d6:f8:ff:6a:f1:22:4c:47:89:c6:
46:58:be:b6:8d:0f:37:59:48:7d:f0:51:f5:46:5f:
eb:bf:e0:eb:51:b3:0d:57:5b:d9:1a:32:ec:e4:5c:
d5:04:f3:8c:b4:79:f7:c0:5f:c2:4f:7e:0a:75:09:
d5:24:26:48:c9:b0:0a:75:7a:da:d0:27:36:55:9b:
53:c9:e3:b4:3f:47:84:17:2e:53:df:e7:e0:42:1e:
dd:cd:45:eb:23:d3:8f:4a:69:0b:e4:b7:f4:00:93:
7f:8b:27:71:08:4a:4b:b2:98:87:4e:90:4d:85:fc:
72:83:ce:bb:db:b1:d3:c9:eb:0c:2a:0d:96:bd:5a:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:52:BB:02:2E:18:4A:61:35:0F:1E:C3:F0:D7:A0:E1:F4:FC:4B
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/c4BSuwIuGEphNQ8ew_DXoOH0_Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
af:6c:12:e0:c8:14:0b:58:e1:54:54:f3:22:c0:f6:4d:28:a5:
e3:82:64:37:4b:ae:ff:3a:57:2b:0f:40:a5:b9:f8:3e:9e:b7:
5b:a4:ce:32:a8:df:ee:8d:9a:b3:e9:7e:87:54:b0:40:73:78:
13:d5:6d:51:82:05:1a:0e:4e:fb:1e:1d:f7:59:de:1b:62:14:
b2:3f:b2:ef:7d:ed:64:0e:db:d5:2a:38:4c:03:1c:c5:e7:06:
cc:5c:84:d1:57:d0:ba:70:5d:b8:b2:d2:9e:68:2d:9c:15:aa:
b9:85:42:63:c3:35:ea:b7:c6:ff:d1:17:1b:75:63:d3:99:df:
e4:d5:72:22:af:d6:b7:2d:2c:51:9c:5b:bb:30:06:e3:7b:26:
85:b9:82:95:5b:86:98:d8:01:21:ac:52:1b:0d:34:6b:30:59:
3d:e2:18:a7:8c:12:20:ce:69:38:8b:40:df:4f:bf:dc:ca:65:
76:d3:2f:10:3d:61:8e:0d:3b:8d:8b:5c:82:78:79:bd:ee:ce:
3d:e1:64:ca:fc:85:aa:8d:ea:9c:cc:5e:17:1a:c9:55:b5:f5:
19:74:ac:cc:cc:20:fb:18:5d:53:62:1a:92:14:83:ca:62:a1:
4b:e9:94:75:2d:0a:17:fb:bd:98:05:3c:f7:fa:15:91:e4:b4:
5b:18:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:52 2026 by rpki-client