Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4oZQ1U4P-kffeZ8QhT54HzlzCIs.roa
File: 4oZQ1U4P-kffeZ8QhT54HzlzCIs.roa (raw, json)
Hash identifier: M0lOIbnT7CANmD5hz9WZNPGEVS4a6SgJ+JDrhR4CpcQ=
Subject key identifier: E2:86:50:D5:4E:0F:FA:47:DF:79:9F:10:85:3E:78:1F:39:73:08:8B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A032E0CB28195EB9FB50662CD27E1068DE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4oZQ1U4P-kffeZ8QhT54HzlzCIs.roa
Signing time: Mon 24 Aug 2026 08:26:27 +0000
ROA not before: Mon 24 Aug 2026 08:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198798
IP address blocks: 45.88.124.0/23 maxlen: 23
45.88.126.0/23 maxlen: 23
195.216.156.0/23 maxlen: 23
195.216.158.0/23 maxlen: 24
212.90.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:e0:cb:28:19:5e:b9:fb:50:66:2c:d2:7e:10:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 24 08:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28650d54e0ffa47df799f10853e781f3973088b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:cb:6c:43:63:e3:3e:a5:68:5d:79:cd:15:
69:d3:ee:05:0d:62:a8:c1:ab:7c:6a:5c:4b:ce:c7:
9d:fa:75:a0:a0:6f:51:58:fd:7f:c9:c5:b9:7f:d1:
66:2a:be:5f:7e:ba:0c:fc:19:16:d4:d8:b6:06:41:
a7:53:ba:01:67:e8:9d:ca:7f:f7:c6:85:cd:76:c2:
ac:7b:52:77:2b:55:0d:24:d5:c2:da:fa:c5:4d:87:
c2:ce:7d:07:b4:f9:f8:84:9b:89:6b:4a:45:63:54:
36:8e:bc:e5:a2:ac:f8:76:2f:f2:7a:b0:18:11:c3:
59:55:32:e0:50:8a:14:da:42:69:b9:81:5f:4a:9e:
c2:f4:11:60:b8:1e:27:8e:12:8a:8c:54:ed:a2:d3:
05:f1:a9:90:19:15:1e:fd:77:89:bb:e2:a5:4a:54:
6c:18:97:da:58:42:94:9a:84:f6:6b:a7:22:c8:4f:
39:36:ba:95:c0:37:8a:99:5d:54:4b:21:7d:5b:65:
15:51:77:1b:ef:ec:a1:e6:03:4e:92:13:7b:17:d9:
a8:23:e4:12:cf:11:a4:9d:d8:4c:62:7a:a0:6c:3b:
f2:d9:50:f2:5b:0a:41:02:70:2c:cd:25:b0:f1:08:
8d:d1:b9:1d:93:1c:b5:55:92:ef:cf:87:8f:79:a9:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:50:D5:4E:0F:FA:47:DF:79:9F:10:85:3E:78:1F:39:73:08:8B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/4oZQ1U4P-kffeZ8QhT54HzlzCIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.124.0/22
195.216.156.0/22
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:2c:80:f1:7b:86:93:3b:23:f9:33:e0:b7:a6:e0:ff:59:f5:
ab:8d:92:19:1f:c7:21:69:60:e1:d2:50:23:4b:3f:7e:2a:ca:
c8:59:08:ca:27:89:d6:6f:27:61:53:6e:92:93:fb:f9:82:4e:
f5:1d:3d:f5:42:61:a8:63:39:16:26:24:23:3a:b9:d7:ae:22:
9b:a3:c8:93:31:fb:81:43:ea:7c:94:45:dc:57:ec:7a:a8:b6:
3e:c6:aa:2b:a2:12:c6:68:09:c5:ad:27:fd:32:a8:f1:64:f4:
d4:30:25:fc:b0:d4:6f:db:56:43:95:26:21:a2:71:51:68:0b:
a4:a0:b8:c5:a8:9e:2b:bd:0a:ad:f1:c7:4f:c1:7f:26:ec:f1:
48:1a:75:f0:05:80:05:34:ec:4e:bb:a0:08:d6:7c:03:ca:7d:
ab:bc:17:da:cf:3f:73:39:53:24:1c:00:76:ea:90:ca:2d:81:
76:13:02:72:62:3b:92:38:6e:97:ab:23:62:71:49:7b:29:4f:
ad:93:bc:94:ba:c4:2d:02:bc:e1:a1:b7:95:0b:6a:6b:a8:ff:
92:05:29:0c:7e:90:0c:97:2d:df:f7:0a:59:56:34:4a:70:77:
42:45:f4:9e:4e:77:33:93:b6:e3:35:48:89:ea:e9:f1:75:82:
45:69:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:20 2026 by rpki-client