Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4wKJGi00TfJEUaZBXXehCJACzsY.roa
File: 4wKJGi00TfJEUaZBXXehCJACzsY.roa (raw, json)
Hash identifier: EGXlq5otTfqzYWsP0t4JP1phVZrmx1cNdvt5bkAJb9M=
Subject key identifier: E3:02:89:1A:2D:34:4D:F2:44:51:A6:41:5D:77:A1:08:90:02:CE:C6
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01A0EEDA4EC7C943FDEEC3B4471BC1E140B2
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4wKJGi00TfJEUaZBXXehCJACzsY.roa
Signing time: Tue 29 Sep 2026 20:27:59 +0000
ROA not before: Tue 29 Sep 2026 20:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213434
IP address blocks: 5.144.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:da:4e:c7:c9:43:fd:ee:c3:b4:47:1b:c1:e1:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Sep 29 20:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e302891a2d344df24451a6415d77a1089002cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:57:54:d8:d4:74:df:e7:bb:63:58:ab:2b:
94:59:18:f9:81:d2:b4:02:8f:e9:27:6e:04:43:f6:
0d:61:f4:a1:f7:48:fc:d5:ee:bb:f7:e6:69:d0:75:
18:1e:7d:19:e8:17:24:6b:4a:71:76:d0:99:36:87:
70:51:f6:73:1c:46:c9:4d:7d:1a:7b:aa:09:91:6f:
2b:4a:13:75:e0:f3:47:c2:31:b5:be:98:2b:27:08:
90:47:14:f4:aa:c2:3c:ff:4e:76:28:70:53:32:cc:
8b:bb:19:92:8a:31:f1:55:99:19:d6:83:fa:e4:30:
1b:97:89:03:4e:31:a2:c1:76:cb:c0:80:cf:3d:87:
ab:ea:c3:8c:b9:9b:93:aa:41:43:09:c7:af:51:88:
a7:94:e4:1a:97:29:66:e9:ca:92:7f:26:c3:c9:08:
95:a0:98:db:15:e8:9a:6a:f6:51:ce:ca:1a:2b:12:
31:83:b2:27:64:55:91:e5:c0:e7:d2:45:c9:89:b7:
8a:5a:9f:42:7f:ee:23:f3:51:00:8c:de:0c:70:17:
c8:c1:c5:e0:de:4a:fe:cc:18:72:18:38:8b:a6:aa:
97:94:f9:26:0b:46:70:66:ab:8d:f0:fa:84:0d:bb:
b5:4e:1f:b1:43:34:5d:92:e7:3d:49:82:48:56:94:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:89:1A:2D:34:4D:F2:44:51:A6:41:5D:77:A1:08:90:02:CE:C6
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/4wKJGi00TfJEUaZBXXehCJACzsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.177.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a2:f1:60:3a:61:17:bb:83:cb:fa:12:64:25:66:90:c9:9c:
e4:b6:14:ee:94:b4:a2:69:29:fb:57:5e:3e:1c:79:48:8c:14:
40:ac:e5:43:a3:72:1a:f0:19:d2:0c:5b:43:9f:24:06:de:c7:
7f:b5:95:c4:4e:2b:b3:01:d0:34:93:b2:21:87:e5:7a:56:88:
9b:b9:11:c3:ad:e4:85:c7:3a:c1:1d:a9:f7:fd:9d:14:f2:a5:
47:41:ad:1f:b2:4e:20:bd:91:24:8f:7d:37:fe:87:87:ff:37:
98:7a:eb:05:f8:57:bc:98:43:5a:52:e5:ae:64:f6:cc:a4:c4:
f0:da:e1:24:fe:ca:5c:3c:df:77:74:a1:8e:1d:54:54:9d:bb:
39:8d:0e:55:ff:7a:16:a5:fb:fe:65:e5:7e:28:b9:8c:3b:6f:
e5:ab:50:47:ca:77:c0:9f:bb:10:d8:91:27:e6:53:9c:e3:bd:
b6:ea:99:4f:5a:4d:c4:38:50:38:d8:31:95:b9:55:f6:22:50:
51:90:cb:83:0f:8b:eb:ba:3e:35:d1:47:cf:14:d7:ab:f5:aa:
58:66:d4:dd:60:1b:51:31:94:2d:10:dc:f6:16:d8:1a:2d:96:
da:4a:de:c2:ef:c6:62:ff:6d:91:9c:21:0d:33:57:83:53:13:
60:61:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:46:57 2026 by rpki-client