Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_qefhBTX4GrLHAKY0SuGouHYv88.roa
File: _qefhBTX4GrLHAKY0SuGouHYv88.roa (raw, json)
Hash identifier: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=
Subject key identifier: FE:A7:9F:84:14:D7:E0:6A:CB:1C:02:98:D1:2B:86:A2:E1:D8:BF:CF
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 019DB9FEA5C3B41623BF70EAEFB506E2090F
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_qefhBTX4GrLHAKY0SuGouHYv88.roa
Signing time: Thu 23 Apr 2026 10:59:26 +0000
ROA not before: Thu 23 Apr 2026 10:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57304
IP address blocks: 81.19.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:fe:a5:c3:b4:16:23:bf:70:ea:ef:b5:06:e2:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Apr 23 10:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fea79f8414d7e06acb1c0298d12b86a2e1d8bfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:1b:ec:dd:ba:38:7d:2a:f8:3a:47:6c:66:
e3:ae:68:cd:37:0b:04:9a:d6:f3:2a:95:f4:46:cf:
87:d3:f3:d0:d1:40:55:c4:dd:94:a1:b5:62:28:2e:
87:49:aa:55:75:27:99:81:3d:e9:a4:1a:f7:db:3c:
56:81:8a:82:7a:fb:fa:cd:fc:a7:b3:50:cc:95:6c:
cb:db:ba:9f:44:fa:1b:b7:fe:f1:2f:ee:97:0e:64:
6e:ae:e7:98:26:53:55:2a:68:25:80:e7:ab:80:ec:
f6:f7:d5:d9:11:eb:08:aa:fd:a7:7e:8c:fd:e5:c0:
2f:8c:cc:9c:a0:59:21:6b:91:4a:ee:3a:a8:19:8b:
fe:3c:e0:5a:11:85:f7:25:63:a6:a2:f8:d0:80:ca:
fc:c7:78:d1:81:1f:52:7c:2b:85:14:44:85:d4:c4:
43:1c:50:b5:c5:92:db:dc:c9:81:66:89:de:e0:e7:
fa:b9:d4:a1:7f:bc:54:52:f9:a4:da:58:fd:08:d0:
2e:82:f7:41:85:4b:1c:c3:8b:a3:e3:8b:a1:25:81:
6b:27:76:8f:e9:67:38:61:99:77:41:8d:83:69:3b:
49:f5:aa:e1:27:27:70:61:b8:49:fb:06:e3:6d:9e:
06:ad:13:e4:64:6e:c5:21:45:b5:09:4c:5b:2e:8f:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:9F:84:14:D7:E0:6A:CB:1C:02:98:D1:2B:86:A2:E1:D8:BF:CF
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_qefhBTX4GrLHAKY0SuGouHYv88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:aa:ec:a1:8d:77:82:9a:36:fb:77:5b:28:a1:96:ed:f5:
25:d0:89:2b:ca:96:df:ea:5c:57:ce:1e:3d:83:7b:e8:96:f6:
5e:3e:6f:36:17:93:92:dc:fe:a8:e0:6b:22:df:e1:98:bc:7f:
54:79:85:fa:27:eb:36:1e:c6:c9:1c:22:eb:69:6c:a1:fc:4d:
f4:25:b5:7c:49:9a:2e:33:50:f1:cd:7e:2a:d3:54:08:de:b6:
f1:ae:94:ac:c1:2c:93:1a:29:80:16:4b:89:16:48:b5:50:48:
83:be:a0:4d:22:d3:44:30:89:b5:9a:5c:a0:b6:02:7b:db:29:
8f:aa:e0:80:29:f5:08:69:ac:3d:db:52:e7:16:09:7f:d1:4a:
b8:1e:92:b5:25:0c:73:9a:c0:1b:aa:7f:b2:2c:bd:2a:73:2b:
fa:41:60:dc:d8:5c:13:40:d0:0a:d0:a6:c6:84:e3:1d:79:b8:
5a:5b:bb:03:76:46:d1:a9:e6:12:24:74:e4:64:ac:36:92:38:
9f:3d:08:ef:e0:9b:08:33:90:ea:79:f7:6c:a2:a8:b2:18:35:
8e:06:15:bc:ad:9d:fd:74:fc:27:79:5a:46:b9:43:55:ab:bf:
17:1b:a7:11:9e:3d:be:f5:10:c7:f0:36:9e:6a:d6:b9:45:7d:
8e:30:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:59:32 2026 by rpki-client