Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4ybmMCTS-oHnq3SoM1Cr2-VtNl0.roa
File: 4ybmMCTS-oHnq3SoM1Cr2-VtNl0.roa (raw, json)
Hash identifier: aGq7Gsz7qQINzu5M3jh6Tt+kD6U7jtjnyMUCbT4D4Jg=
Subject key identifier: E3:26:E6:30:24:D2:FA:81:E7:AB:74:A8:33:50:AB:DB:E5:6D:36:5D
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A145BDFE47BC417F2CDAD0793172EC003A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4ybmMCTS-oHnq3SoM1Cr2-VtNl0.roa
Signing time: Fri 16 Oct 2026 17:24:01 +0000
ROA not before: Fri 16 Oct 2026 17:24:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213542
IP address blocks: 45.152.136.0/24 maxlen: 24
85.31.52.0/24 maxlen: 24
193.56.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:bd:fe:47:bc:41:7f:2c:da:d0:79:31:72:ec:00:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 16 17:24:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e326e63024d2fa81e7ab74a83350abdbe56d365d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:ce:9f:af:4a:d1:f0:55:6b:0d:0b:98:41:
3b:0e:71:4c:f7:6a:d2:51:b8:56:e2:c2:5a:ec:5a:
31:b4:ca:82:9f:e3:30:49:a1:a9:80:70:c3:45:f3:
a8:87:7b:86:58:56:84:7e:07:9b:cd:fd:51:43:5d:
44:23:a7:15:a2:67:80:03:22:84:0e:22:3f:66:a9:
1a:ad:01:6b:20:a8:a9:48:a9:37:72:71:f9:9a:ce:
bb:95:09:9e:1c:74:c0:6b:a4:c5:ad:c8:4a:8f:95:
f2:7c:1b:21:a4:59:f2:58:08:a1:62:31:8c:36:40:
a5:f9:ce:2a:bf:60:96:2f:44:01:d6:dc:25:a5:50:
6b:24:7b:67:a3:59:90:2d:0f:94:b2:ba:06:fd:a4:
41:0a:d2:b9:0f:84:8b:ba:e6:4b:92:95:4f:c4:e8:
8f:66:94:a8:28:e5:74:ab:8c:2a:48:2e:26:40:e1:
35:a9:18:2e:bd:84:f5:1c:55:55:be:67:89:98:3e:
c5:b7:32:fc:7f:c8:34:4d:5e:74:c5:a3:97:73:cd:
a1:8e:cb:ba:aa:7e:c1:61:19:18:7c:88:a6:41:8c:
c3:43:ab:af:8d:82:e7:92:8c:a4:92:b2:bc:39:2d:
42:6c:34:a1:1a:59:87:68:76:2e:26:42:f7:cc:ce:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:E6:30:24:D2:FA:81:E7:AB:74:A8:33:50:AB:DB:E5:6D:36:5D
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4ybmMCTS-oHnq3SoM1Cr2-VtNl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.136.0/24
85.31.52.0/24
193.56.22.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b3:cb:e1:89:42:38:01:8c:02:4f:45:52:f9:4b:c9:e2:f6:
b7:2d:4e:c5:3e:b4:94:bd:dd:9f:08:40:e9:dc:09:cc:51:a7:
bd:5e:2e:21:00:19:4c:0a:ef:e9:3f:2e:48:5b:2a:be:f7:d3:
25:44:0f:fa:d6:44:5b:b2:16:1a:71:d3:bb:70:fc:46:21:25:
11:31:7f:ed:19:8c:94:77:59:30:d0:fa:a5:f6:99:a2:a8:14:
75:1e:90:cd:b9:5e:9a:81:c7:2a:2e:48:84:ed:06:d2:26:44:
7e:05:a5:69:76:a0:26:37:25:07:52:59:00:36:fe:bb:74:00:
12:e9:e4:7d:fd:6a:9a:ac:9a:5c:7a:49:5b:ff:ab:09:49:38:
34:33:b3:62:d2:c7:6a:db:08:7e:58:d2:dd:cf:0f:0a:61:b5:
16:34:a5:08:7d:c9:f3:e5:11:38:7d:d6:dc:b5:a3:b2:00:2e:
c6:3c:c5:01:54:3b:46:09:c0:49:fb:b6:ad:af:22:71:2f:d4:
66:9e:d9:b8:98:d1:f4:d9:a2:c4:b4:f5:13:fb:76:d9:33:2d:
96:f2:b9:b5:67:99:2b:c4:f1:9e:5d:90:42:05:2c:9e:c2:85:
f3:af:51:6d:f5:0c:95:98:cf:d9:5d:e2:7a:0f:82:14:e6:2d:
3d:61:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:02 2026 by rpki-client