Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4tVNCLhOtCFyawHyXfgcahfY9GQ.roa
File: 4tVNCLhOtCFyawHyXfgcahfY9GQ.roa (raw, json)
Hash identifier: pUqU53ggYXPRQi3HPbYLyBDsR1Zcjxhc3hSRMT6NUjQ=
Subject key identifier: E2:D5:4D:08:B8:4E:B4:21:72:6B:01:F2:5D:F8:1C:6A:17:D8:F4:64
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DA656D25286F6C9B4EDF5027DD4DCEF52
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4tVNCLhOtCFyawHyXfgcahfY9GQ.roa
Signing time: Sun 19 Apr 2026 15:23:20 +0000
ROA not before: Sun 19 Apr 2026 15:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 81.18.48.0/24 maxlen: 24
178.219.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 15:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:56:d2:52:86:f6:c9:b4:ed:f5:02:7d:d4:dc:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 19 15:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2d54d08b84eb421726b01f25df81c6a17d8f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:18:50:82:9d:f2:9e:97:82:f5:97:7d:29:
f1:7e:a9:6c:e9:be:77:f5:d3:4f:e6:3a:5d:f5:83:
b3:6a:90:09:7f:9a:f3:d2:dd:1a:85:2c:ff:6d:74:
d0:bc:c0:18:c8:af:07:04:9c:54:f8:bb:50:8d:5c:
b7:34:ed:0a:76:69:6a:e2:93:63:9e:14:d4:b6:1c:
d7:55:9f:65:a8:69:0f:ce:73:b6:ec:b2:e5:ba:5c:
50:db:2a:8c:2f:e5:6b:be:02:ff:f3:34:eb:92:e8:
26:6a:5b:90:3a:db:74:6e:21:e8:d9:12:18:67:b8:
0a:e1:f6:ae:c0:16:35:69:60:c8:f1:70:06:79:b2:
16:67:e2:91:2d:f1:a5:df:c7:2a:be:68:a2:6f:e8:
78:f1:e0:15:f9:fc:35:2d:44:47:c6:b6:0d:24:7b:
57:85:8e:35:28:03:70:35:e0:1c:4e:36:98:c4:0a:
b8:cc:fd:46:1b:98:33:fb:39:f8:c4:d5:c7:f5:fa:
50:7d:04:77:9a:24:3d:12:9b:52:fb:99:f7:54:c4:
af:8d:f7:af:31:69:e7:c3:94:12:31:ba:bd:8a:e3:
f1:9b:f6:1d:a4:b7:d5:88:fe:67:6a:3a:17:8b:98:
a1:8e:af:7e:8b:3e:8b:a0:25:e1:30:66:94:77:0a:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:4D:08:B8:4E:B4:21:72:6B:01:F2:5D:F8:1C:6A:17:D8:F4:64
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4tVNCLhOtCFyawHyXfgcahfY9GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
178.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b5:45:ec:fb:f4:d6:bb:dc:f3:15:a6:1b:7c:36:83:ad:9f:
a5:ef:bb:ee:aa:e8:b8:e0:91:fd:ad:5b:fc:9a:7d:fb:54:be:
19:c6:76:aa:7a:c3:19:11:33:c9:db:ec:f3:2e:a3:2e:42:13:
71:b9:cf:21:74:05:7e:35:c0:74:61:14:48:70:fa:52:cb:f9:
72:70:d6:f5:7e:63:fc:fc:48:af:b7:55:77:f7:17:44:c3:43:
59:6d:bf:dd:80:00:e3:cc:e9:bf:9d:ea:54:0f:2f:f8:55:6f:
99:94:97:a8:0e:13:da:02:fb:6c:82:28:5f:ef:6c:3c:1a:29:
c7:9d:81:6c:4f:ae:c2:1b:ce:42:b2:d8:e6:85:b8:55:50:cf:
52:c2:7b:35:be:a2:5d:15:70:de:45:9f:32:1c:38:da:da:2c:
6e:9c:4e:73:0c:85:52:d0:57:4a:15:42:64:d3:f6:ee:c8:c7:
49:8d:60:99:d7:e4:27:f2:6f:00:16:67:37:36:4f:a4:35:9a:
c1:33:a6:59:9f:0c:0c:87:3f:cc:05:43:ec:71:06:8d:0a:73:
62:c2:aa:8e:ac:13:f5:2a:3d:a1:95:a0:37:df:50:66:f5:32:
2a:b7:d0:81:df:ae:e7:cc:10:1c:1a:db:bb:22:5d:c8:d4:a8:
79:08:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 00:26:51 2026 by rpki-client