Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/4hXoOLlewsEKQGOcnAk00Dqbzmc.roa
File: 4hXoOLlewsEKQGOcnAk00Dqbzmc.roa (raw, json)
Hash identifier: OxxXbHPKVHz5GWS8dZJlwPJiOA3dYYyBj1rCAFvFkfs=
Subject key identifier: E2:15:E8:38:B9:5E:C2:C1:0A:40:63:9C:9C:09:34:D0:3A:9B:CE:67
Certificate issuer: /CN=3f6a49b49dc0ad98f7061512943f13ab2335aa8f
Certificate serial: 01A163BFF59EBEE84029A6FB06182968EE23
Authority key identifier: 3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/4hXoOLlewsEKQGOcnAk00Dqbzmc.roa
Signing time: Thu 22 Oct 2026 13:14:47 +0000
ROA not before: Thu 22 Oct 2026 13:14:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274122
IP address blocks: 194.169.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:bf:f5:9e:be:e8:40:29:a6:fb:06:18:29:68:ee:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6a49b49dc0ad98f7061512943f13ab2335aa8f
Validity
Not Before: Oct 22 13:14:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e215e838b95ec2c10a40639c9c0934d03a9bce67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:72:41:61:3e:98:6f:03:74:0f:1c:57:61:
47:4e:99:ed:eb:db:02:c4:c5:f5:c3:ff:40:78:f8:
f1:2b:08:4d:6a:1f:e0:64:75:41:e7:51:3b:d2:97:
b9:13:79:f6:be:5d:ba:93:32:00:63:f8:16:3b:20:
4e:bc:02:7b:db:52:c4:81:df:a8:c4:2a:ca:dc:66:
7a:cf:78:ed:0f:f8:8f:38:a6:9f:99:27:ed:d6:c0:
78:fb:ff:8d:01:d0:db:29:d7:cf:2a:73:62:b1:64:
48:74:e9:fb:75:55:ee:b3:83:d3:c1:75:ae:84:3d:
42:4c:f6:ce:11:eb:79:97:94:df:e8:57:32:30:01:
eb:2c:b4:83:02:76:63:e5:4b:2c:75:13:5f:8b:2e:
13:e3:7f:7b:fb:b1:4a:b7:a6:d4:3d:45:04:41:2d:
29:58:89:e5:52:d5:93:5e:27:b0:8e:20:1e:e2:1e:
29:ef:77:a2:75:61:fb:95:50:38:77:43:22:ac:26:
bc:f1:28:47:d1:97:ab:05:73:11:38:0a:bb:8f:a3:
ad:64:c2:08:e3:89:f2:fb:a2:7f:02:cf:c2:29:c0:
d1:f2:f8:1c:3c:3f:21:c0:82:29:e6:70:32:78:73:
10:35:cb:71:36:8d:45:1d:dd:7c:7f:8a:1b:f5:e3:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:E8:38:B9:5E:C2:C1:0A:40:63:9C:9C:09:34:D0:3A:9B:CE:67
X509v3 Authority Key Identifier:
keyid:3F:6A:49:B4:9D:C0:AD:98:F7:06:15:12:94:3F:13:AB:23:35:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/4hXoOLlewsEKQGOcnAk00Dqbzmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/934670-cea1-4659-9d11-d2f98c7aab19/1/P2pJtJ3ArZj3BhUSlD8TqyM1qo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:89:d5:28:50:73:d7:8e:d3:61:0f:40:30:40:89:73:5b:00:
42:22:e3:61:4d:01:ac:b8:7c:3b:04:c5:dd:b5:17:ee:cc:5b:
4a:7f:95:17:06:50:08:66:db:cb:33:17:1b:0a:74:a4:dc:4f:
05:8b:86:46:2d:2e:a6:9a:41:e0:1e:f7:cc:67:44:11:2c:4d:
c6:b9:8d:85:8c:f8:80:02:20:57:6d:61:77:dd:74:4e:a7:cb:
69:f7:25:d7:04:53:50:b2:81:52:dd:4f:1a:4f:c9:04:36:99:
8f:be:1a:e3:b0:5b:d2:e9:c1:6d:86:04:db:a2:9e:1d:b9:67:
3e:da:b3:97:3e:a8:ff:fb:aa:0c:a8:25:98:9a:75:45:68:b2:
8b:d4:cb:fb:d6:dd:9f:5e:f5:37:fb:71:81:53:2a:0c:a5:7c:
1f:9a:18:f2:74:6b:00:c3:ff:db:ef:cc:cc:03:4c:35:a9:b8:
8a:c3:a4:2d:4c:09:26:3e:37:67:bb:44:6e:1d:4c:91:97:7a:
fe:5a:92:dd:04:30:49:dd:7d:45:ad:82:38:7f:55:cd:12:ee:
20:ad:df:33:40:62:6d:6f:f4:db:eb:a6:44:92:b7:f2:60:35:
f9:a0:51:f7:bc:7d:31:0d:fe:0b:d3:97:65:f2:78:ae:1f:72:
8f:64:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:28:39 2026 by rpki-client