Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4-OxTRvKsE-KfsPGgyR1V3t99X4.roa
File: 4-OxTRvKsE-KfsPGgyR1V3t99X4.roa (raw, json)
Hash identifier: L2A7Kx7pcANTVtohacYGiY2IpmYiWV3MjmG+5heBuCc=
Subject key identifier: E3:E3:B1:4D:1B:CA:B0:4F:8A:7E:C3:C6:83:24:75:57:7B:7D:F5:7E
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019FFEF52AE9A51D776F988F672E6844D78B
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4-OxTRvKsE-KfsPGgyR1V3t99X4.roa
Signing time: Fri 14 Aug 2026 06:28:27 +0000
ROA not before: Fri 14 Aug 2026 06:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 185.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:f5:2a:e9:a5:1d:77:6f:98:8f:67:2e:68:44:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 14 06:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3e3b14d1bcab04f8a7ec3c6832475577b7df57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:f4:51:7a:0f:2c:88:0a:97:0e:e2:09:9c:
d3:39:f2:fd:34:51:62:12:a4:98:41:0a:df:be:40:
12:42:7a:09:7e:ee:01:d1:d1:37:b8:88:85:59:5e:
c7:19:08:3f:7d:a0:87:6f:91:9c:38:c2:4c:6f:5c:
5a:35:89:47:a2:fd:29:5a:a7:92:ac:d8:b7:7e:ae:
54:cf:90:c4:bf:27:be:53:b0:f3:a5:93:79:0c:a3:
3b:02:9c:ca:e1:c5:96:be:ae:46:80:6f:91:78:d2:
59:a2:bf:24:d5:3e:2c:37:ff:74:d4:8b:a9:2f:75:
98:f5:56:80:a8:e4:c3:02:13:29:ae:39:b4:98:08:
7d:58:ac:72:56:95:cb:e4:2d:ea:49:c3:e5:26:8e:
7e:0d:cd:dd:e0:3a:6c:3f:43:55:16:4e:43:25:80:
88:af:9a:d9:ff:ae:f7:c9:fb:5f:db:a0:0d:47:cc:
d6:f9:98:bb:a0:c0:4e:28:db:6a:75:0a:00:45:dd:
12:ee:dd:f7:bd:31:93:50:bf:d1:b1:fc:39:ed:61:
5f:6a:34:41:bd:12:6a:dc:23:e7:34:01:50:48:4a:
18:a0:a3:71:c6:66:16:8b:5d:f2:fa:04:88:05:4e:
0c:bb:89:68:ee:db:be:13:61:bd:ce:49:2c:57:71:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:B1:4D:1B:CA:B0:4F:8A:7E:C3:C6:83:24:75:57:7B:7D:F5:7E
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/4-OxTRvKsE-KfsPGgyR1V3t99X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b8:7f:11:c6:fd:7b:69:93:de:e5:5c:8b:a8:38:fd:a4:77:
6f:f7:c1:b3:40:0e:c6:75:fd:9c:02:f9:31:1c:82:36:ed:e5:
c2:5e:9c:53:d9:78:1d:45:1a:b1:22:ca:23:5b:9f:37:e8:dc:
91:b9:34:a9:2d:6c:72:0f:2d:07:a2:3a:78:1c:20:1e:dc:13:
b6:e8:ca:07:32:99:d3:db:ec:61:e0:27:00:25:f5:67:e2:0f:
1e:2c:d4:d8:98:97:2f:75:b2:2c:17:b0:76:35:e4:0c:4e:4b:
fc:20:19:7c:5c:90:43:13:16:91:b0:61:14:2a:86:d1:3a:74:
da:23:e9:62:b3:96:b6:a1:b9:02:4c:e9:0a:2e:9a:9e:be:26:
f9:54:47:cb:ee:43:c2:3a:c9:66:d8:65:50:13:81:20:8c:a5:
14:fd:24:42:22:34:44:08:74:35:4d:f1:08:79:c5:11:7e:0a:
53:7c:df:0d:ad:62:8c:e9:f8:f1:18:57:d0:58:2b:5e:15:d4:
08:15:4a:b4:52:0b:31:20:96:70:e6:bd:36:e3:14:fd:95:9b:
8a:bb:f6:8e:b1:9a:6a:02:af:8f:76:53:c8:c4:da:6e:63:85:
c4:83:85:ce:18:02:eb:55:b3:e9:a1:ee:7e:17:69:c6:ab:e4:
0d:ce:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:29:59 2026 by rpki-client