Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/4aTdnMvwkXYYXRC9S9zvA5Dw37g.roa
File: 4aTdnMvwkXYYXRC9S9zvA5Dw37g.roa (raw, json)
Hash identifier: SEYp8sXbx8nEwzT8fcz5Zk1bfemCvFczAQXPzq4M4CM=
Subject key identifier: E1:A4:DD:9C:CB:F0:91:76:18:5D:10:BD:4B:DC:EF:03:90:F0:DF:B8
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019F6012765238D45E52565DDC2A912B390E
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/4aTdnMvwkXYYXRC9S9zvA5Dw37g.roa
Signing time: Tue 14 Jul 2026 10:00:50 +0000
ROA not before: Tue 14 Jul 2026 10:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206618
IP address blocks: 143.163.1.0/24 maxlen: 24
143.163.12.0/22 maxlen: 22
143.163.16.0/23 maxlen: 23
143.163.22.0/24 maxlen: 24
143.163.24.0/22 maxlen: 22
143.163.66.0/23 maxlen: 23
143.163.66.0/24 maxlen: 24
143.163.67.0/24 maxlen: 24
193.23.96.0/24 maxlen: 24
194.114.32.0/23 maxlen: 23
194.114.40.0/23 maxlen: 23
194.114.61.0/24 maxlen: 24
194.114.62.0/23 maxlen: 23
194.114.62.0/24 maxlen: 24
194.114.63.0/24 maxlen: 24
194.114.64.0/23 maxlen: 23
194.114.66.0/23 maxlen: 23
194.114.70.0/23 maxlen: 23
194.114.74.0/24 maxlen: 24
194.114.77.0/24 maxlen: 24
194.114.78.0/23 maxlen: 23
194.114.80.0/23 maxlen: 23
194.114.82.0/24 maxlen: 24
194.114.83.0/24 maxlen: 24
194.114.84.0/24 maxlen: 24
194.114.85.0/24 maxlen: 24
194.114.94.0/23 maxlen: 23
194.114.96.0/22 maxlen: 22
194.114.96.0/23 maxlen: 23
194.114.96.0/24 maxlen: 24
194.114.97.0/24 maxlen: 24
194.114.98.0/23 maxlen: 23
194.114.100.0/22 maxlen: 22
194.114.104.0/21 maxlen: 21
194.114.104.0/24 maxlen: 24
194.114.112.0/22 maxlen: 22
194.114.116.0/22 maxlen: 22
194.114.125.0/24 maxlen: 24
194.114.126.0/24 maxlen: 24
2a01:4dc0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:12:76:52:38:d4:5e:52:56:5d:dc:2a:91:2b:39:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jul 14 10:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1a4dd9ccbf09176185d10bd4bdcef0390f0dfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:ac:ab:97:4c:23:b3:e8:88:88:c1:8c:b7:
5f:5f:77:e7:52:5c:a3:24:1e:54:df:83:89:67:5d:
5d:ce:22:e4:5f:1a:68:f5:b5:9b:ec:6f:a6:d8:b4:
ba:f2:76:a2:a8:57:0f:83:6c:c9:cd:f1:4f:4d:b8:
13:a8:cf:6a:16:29:f4:b8:51:7a:80:eb:8c:81:e4:
22:b8:2e:7c:d7:21:30:83:b7:0c:49:b8:99:16:20:
0d:5c:16:74:2b:fc:a7:c5:fa:4f:96:fc:60:68:5b:
b7:e7:21:78:cd:23:57:3a:03:f0:32:74:5e:d4:17:
ce:8a:1b:66:29:69:93:e7:97:5d:d4:9c:e9:b7:46:
57:da:bd:d1:8a:e7:30:fb:b6:72:df:66:4e:03:01:
9b:ff:b1:ca:81:fc:0b:30:e9:e6:eb:66:ed:72:b3:
2b:16:45:53:f4:ea:57:9a:77:cd:21:cc:e5:2c:76:
d4:61:d0:eb:81:85:6c:ad:4f:1e:a9:6d:0c:50:f1:
3a:70:4d:d6:4e:ea:e9:ad:74:5f:26:66:a2:b4:91:
9a:a8:53:4f:63:3e:be:60:16:82:3d:76:40:a6:a1:
5e:8c:9a:6f:d3:b2:9b:d1:20:5b:90:9e:00:ce:92:
f2:db:0d:a9:70:c7:12:5b:74:1d:45:c8:0b:6b:4f:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:DD:9C:CB:F0:91:76:18:5D:10:BD:4B:DC:EF:03:90:F0:DF:B8
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/4aTdnMvwkXYYXRC9S9zvA5Dw37g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.163.1.0/24
143.163.12.0-143.163.17.255
143.163.22.0/24
143.163.24.0/22
143.163.66.0/23
193.23.96.0/24
194.114.32.0/23
194.114.40.0/23
194.114.61.0-194.114.67.255
194.114.70.0/23
194.114.74.0/24
194.114.77.0-194.114.85.255
194.114.94.0-194.114.119.255
194.114.125.0-194.114.126.255
IPv6:
2a01:4dc0::/42
Signature Algorithm: sha256WithRSAEncryption
4e:d1:ba:96:48:5f:71:1f:aa:88:de:1b:a6:6e:7b:f2:df:6b:
79:5a:e2:9d:90:95:e1:2b:e1:52:f9:fb:aa:ff:dd:98:bd:82:
e1:73:51:5c:65:16:f4:bc:e8:44:06:6e:34:27:4b:2b:e8:9e:
6b:33:50:b7:bd:aa:b3:33:bd:a0:84:06:3e:0c:4c:06:f0:4b:
4c:ea:eb:06:85:0c:b0:71:d2:d6:80:64:aa:55:e5:37:4e:14:
20:99:5e:a4:e7:23:ec:ca:a7:58:21:2d:fe:71:df:54:f6:e5:
7c:20:c3:63:e6:9e:18:fa:1b:34:1f:f3:09:6c:74:a2:fc:48:
0d:e1:92:c6:b3:3b:e4:d5:40:6b:f4:0c:45:43:95:71:f4:eb:
49:86:00:d1:d8:a5:fb:12:49:10:f0:4c:85:a6:c5:4c:f2:c3:
ff:08:f5:29:e1:13:e0:b4:22:2f:92:de:b5:03:89:ff:e6:b6:
29:34:f1:72:53:bb:38:73:ba:1b:b9:4d:f2:ba:64:02:6e:61:
04:b4:69:6d:0d:18:68:d9:24:63:f9:da:dc:9a:a9:1d:21:98:
d2:5e:cf:0e:d6:89:fa:d1:f7:94:1f:ed:51:f8:6f:5c:60:b3:
cb:cd:f3:c4:03:cb:36:9b:76:cf:eb:7b:aa:48:15:97:92:79:
87:bd:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:03:49 2026 by rpki-client