Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/4KhhGZX4PWjUQYpl6SjJvfil8R8.roa
File: 4KhhGZX4PWjUQYpl6SjJvfil8R8.roa (raw, json)
Hash identifier: NcodsY717TYNNKDjkC9G80EurSBxppwYgSyODBkbvvM=
Subject key identifier: E0:A8:61:19:95:F8:3D:68:D4:41:8A:65:E9:28:C9:BD:F8:A5:F1:1F
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01A07B4D7AF53A135E4E0F7093AB218A7B1B
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/4KhhGZX4PWjUQYpl6SjJvfil8R8.roa
Signing time: Mon 07 Sep 2026 09:57:50 +0000
ROA not before: Mon 07 Sep 2026 09:57:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12430
IP address blocks: 5.224.0.0/15 maxlen: 15
31.4.0.0/16 maxlen: 24
37.222.0.0/15 maxlen: 24
46.24.0.0/14 maxlen: 14
46.25.0.0/21 maxlen: 21
46.25.60.0/22 maxlen: 22
46.136.0.0/16 maxlen: 16
47.58.0.0/16 maxlen: 16
47.59.0.0/16 maxlen: 16
47.60.0.0/16 maxlen: 16
47.61.0.0/16 maxlen: 16
47.62.0.0/16 maxlen: 16
47.63.0.0/16 maxlen: 16
62.87.0.0/17 maxlen: 24
77.208.0.0/14 maxlen: 24
77.224.0.0/13 maxlen: 13
87.124.192.0/18 maxlen: 18
87.125.0.0/16 maxlen: 24
87.235.0.0/16 maxlen: 16
89.6.0.0/15 maxlen: 15
93.113.16.0/21 maxlen: 21
94.248.64.0/18 maxlen: 18
95.60.0.0/14 maxlen: 14
95.60.32.0/21 maxlen: 21
137.101.0.0/16 maxlen: 16
148.3.0.0/16 maxlen: 16
148.56.0.0/16 maxlen: 16
151.182.0.0/16 maxlen: 16
159.147.0.0/16 maxlen: 16
178.57.128.0/18 maxlen: 18
178.139.0.0/16 maxlen: 22
188.84.0.0/14 maxlen: 14
188.86.112.0/22 maxlen: 22
193.125.0.0/16 maxlen: 16
194.220.0.0/16 maxlen: 16
212.73.32.0/19 maxlen: 24
212.145.0.0/16 maxlen: 16
212.166.128.0/17 maxlen: 23
217.130.0.0/16 maxlen: 16
2a01:800::/32 maxlen: 32
2a01:801::/32 maxlen: 32
2a01:807::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:4d:7a:f5:3a:13:5e:4e:0f:70:93:ab:21:8a:7b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Sep 7 09:57:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0a8611995f83d68d4418a65e928c9bdf8a5f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:9c:2f:c0:bd:ba:b4:f4:9b:50:0a:32:ec:
4f:0e:56:15:1e:02:b1:6a:bc:c6:bc:48:6b:96:13:
dd:ed:0d:23:5a:6c:d6:b7:0f:dd:b4:41:65:2a:a0:
ee:1d:86:f7:7c:c2:4d:ee:bf:c4:b3:a7:20:2b:a0:
aa:1f:1c:43:ff:57:f0:a0:01:fd:06:47:bb:a1:bd:
43:a7:93:04:a0:39:d5:52:af:38:93:63:c3:5b:21:
08:45:0b:d0:c4:55:ae:87:00:81:dc:3a:d7:aa:9c:
f2:d0:7b:e0:f5:35:8d:b0:03:be:56:4e:9e:36:b5:
b1:e0:84:d1:aa:31:0c:e3:22:3a:9a:aa:b8:dd:9e:
52:68:9c:ef:d3:20:31:dd:82:68:44:21:49:5b:0b:
40:ce:09:99:00:0e:16:0b:df:96:e6:6a:1f:5e:3c:
d1:ef:b7:99:86:d6:41:b6:d8:80:4a:a6:48:4e:b4:
75:93:7a:6d:b5:18:db:22:50:04:e4:a0:3a:fc:b3:
e4:dc:69:ce:28:7b:97:16:db:74:b4:73:cf:cc:f4:
91:1e:bc:69:8b:9a:41:df:04:ca:08:c2:98:c2:f2:
cc:20:ad:fb:4c:e1:81:b3:7b:a1:49:8e:a0:f3:21:
45:95:ee:41:d2:39:e7:08:d8:87:06:c1:bd:91:9a:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:61:19:95:F8:3D:68:D4:41:8A:65:E9:28:C9:BD:F8:A5:F1:1F
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/4KhhGZX4PWjUQYpl6SjJvfil8R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.224.0.0/15
31.4.0.0/16
37.222.0.0/15
46.24.0.0/14
46.136.0.0/16
47.58.0.0-47.63.255.255
62.87.0.0/17
77.208.0.0/14
77.224.0.0/13
87.124.192.0-87.125.255.255
87.235.0.0/16
89.6.0.0/15
93.113.16.0/21
94.248.64.0/18
95.60.0.0/14
137.101.0.0/16
148.3.0.0/16
148.56.0.0/16
151.182.0.0/16
159.147.0.0/16
178.57.128.0/18
178.139.0.0/16
188.84.0.0/14
193.125.0.0/16
194.220.0.0/16
212.73.32.0/19
212.145.0.0/16
212.166.128.0/17
217.130.0.0/16
IPv6:
2a01:800::/31
2a01:807::/32
Signature Algorithm: sha256WithRSAEncryption
ad:a1:33:bd:e7:32:ac:4a:5c:8c:31:76:1d:e8:a3:de:d5:d2:
f0:d3:93:0d:fa:46:74:cb:db:ec:20:79:4c:0b:68:fc:fe:74:
9a:e2:18:19:57:fd:26:8b:c8:d6:0b:d0:ca:39:7e:d1:e3:16:
20:83:12:62:23:74:64:57:b7:3b:0c:b7:4a:ad:c9:de:46:1b:
56:ad:4e:08:f9:3d:4a:db:ed:6d:7d:d2:fe:c0:42:89:72:c1:
29:07:e2:ca:dc:b0:75:a8:45:51:48:38:23:94:fd:75:c2:2f:
8c:55:98:b6:8a:53:a2:6c:ad:b7:6d:a5:14:73:98:71:e4:c9:
15:a7:79:08:08:ae:73:36:cf:96:32:45:72:d8:f1:b8:25:7a:
39:8b:26:c7:e1:5a:34:15:f0:07:46:cc:94:7f:ae:68:a9:af:
7b:cf:82:22:a3:c5:06:ed:67:dc:d2:29:fa:42:b0:1d:64:e3:
5a:67:4b:7e:eb:04:b2:36:98:c7:17:2f:ef:51:0a:7f:eb:91:
87:e0:10:ab:c9:23:19:9d:6c:e8:7b:57:58:24:d5:65:6d:c8:
10:55:ce:9f:d3:47:ea:8c:66:57:62:a3:06:99:02:a5:f8:87:
55:55:b1:14:d7:94:a2:2c:b5:bd:0c:3e:9d:20:45:a6:34:07:
9b:c2:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:53 2026 by rpki-client