Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4rKV389CcVb18TkAtAQohjFpet4.roa
File: 4rKV389CcVb18TkAtAQohjFpet4.roa (raw, json)
Hash identifier: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=
Subject key identifier: E2:B2:95:DF:CF:42:71:56:F5:F1:39:00:B4:04:28:86:31:69:7A:DE
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687CE3268247A516DF44B8061519FF
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4rKV389CcVb18TkAtAQohjFpet4.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6660
IP address blocks: 46.190.145.0/24 maxlen: 24
139.47.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:e3:26:82:47:a5:16:df:44:b8:06:15:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2b295dfcf427156f5f13900b404288631697ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:1f:5b:96:c1:62:eb:dd:80:3f:c9:5f:b1:
3e:c3:d2:93:3a:69:60:d2:35:af:f2:ba:45:34:07:
0b:be:64:b6:c5:72:62:aa:5d:c5:ee:08:1c:32:f4:
f1:cf:5e:a2:6f:9b:fc:e6:c6:ba:0f:bc:6b:b8:76:
5f:e6:e8:b9:22:4b:14:96:9b:9e:02:98:99:1a:10:
72:cb:5f:89:7f:81:fb:a5:04:5d:9b:84:e7:ca:6d:
bc:27:83:81:b4:e9:a6:b7:64:59:83:eb:d0:6f:2d:
53:e2:e2:18:63:97:85:10:b0:2a:aa:e5:7a:d9:39:
34:e9:2d:9a:77:af:e2:c9:0a:e1:bd:76:a6:60:c1:
53:3b:b2:cf:5c:7d:3d:c5:23:bf:44:fe:82:c9:82:
0f:46:27:1b:55:e7:94:80:01:c8:4a:c7:37:66:b2:
ef:80:61:16:53:da:a4:cb:b8:e1:7f:23:99:fe:c6:
fa:aa:56:9b:d4:1c:c8:bd:10:cf:f7:df:cf:72:88:
f6:0b:9e:3c:19:51:65:d4:10:09:25:81:e5:33:d5:
8d:e4:8b:bc:d4:7d:1e:b3:7b:fd:db:5c:21:e0:2b:
93:a5:10:cc:72:44:cd:30:a5:cd:4b:33:ab:2e:77:
61:b6:b5:8b:df:ff:39:2a:c1:c4:d9:e6:ff:94:55:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B2:95:DF:CF:42:71:56:F5:F1:39:00:B4:04:28:86:31:69:7A:DE
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4rKV389CcVb18TkAtAQohjFpet4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.145.0/24
139.47.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:43:59:8b:7c:74:a2:0a:82:0c:d5:48:9f:c7:4d:9d:85:9d:
a7:90:81:20:10:31:41:8f:85:a4:14:2c:f2:15:a1:6f:e5:64:
89:d0:30:15:8e:36:ef:c9:e0:73:2d:8a:06:d0:e9:3a:2b:fd:
16:a5:5c:55:82:c4:46:8a:56:f6:dd:52:77:d3:24:c0:72:3f:
29:ed:82:01:f5:33:f7:97:58:50:58:c0:46:04:0d:28:3b:e6:
fb:6c:ac:17:93:f1:57:ca:b4:a6:da:af:7e:76:63:51:53:c2:
82:27:d6:26:5c:9a:51:a1:21:5e:26:d9:18:cb:30:8d:ff:a0:
55:48:59:77:c8:cb:cc:cd:ff:51:6f:f2:83:b1:24:ed:e5:6a:
51:dd:b0:fe:08:74:37:7d:f6:d0:1f:8c:12:f0:b9:78:bc:fa:
18:56:df:d9:d6:f4:81:41:19:65:e7:43:85:58:a6:84:38:27:
c4:33:88:3a:2d:d7:d4:b0:ed:bb:c1:68:b1:57:d8:17:4a:4d:
74:2b:0c:4b:bc:07:2b:ff:0c:67:cc:c3:48:b1:b2:e2:a5:e8:
19:cc:d6:ed:9c:a5:6a:b2:9f:64:5e:a9:f1:1c:b1:c0:8b:04:
89:81:7b:41:37:97:e4:36:d9:33:aa:fe:7b:34:3e:96:27:56:
f2:ad:21:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:17 2026 by rpki-client