Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/4KfNsVa_I4qv3IvYqPhzl5H5cEY.roa
File: 4KfNsVa_I4qv3IvYqPhzl5H5cEY.roa (raw, json)
Hash identifier: 5fROQVYJ5qv2bh07hko8TbraDseoO0JolyoTm/L1QEk=
Subject key identifier: E0:A7:CD:B1:56:BF:23:8A:AF:DC:8B:D8:A8:F8:73:97:91:F9:70:46
Certificate issuer: /CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Certificate serial: 019F236873A1876AF824A02E135F3DEFE652
Authority key identifier: B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/4KfNsVa_I4qv3IvYqPhzl5H5cEY.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35701
IP address blocks: 192.109.204.0/24 maxlen: 24
195.234.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:73:a1:87:6a:f8:24:a0:2e:13:5f:3d:ef:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44a022d32fbd5745186e9c282dacef29e46ffcd
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0a7cdb156bf238aafdc8bd8a8f8739791f97046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:bc:2b:3c:e8:8b:06:9f:0f:21:a5:fb:64:
74:59:5c:99:d2:34:49:f1:3e:17:2e:51:80:39:77:
df:11:83:f6:89:c6:b2:28:a6:9a:64:57:d8:06:79:
8e:5c:07:ad:b5:cf:54:4b:9e:1f:6c:17:92:c7:e7:
46:ab:d1:90:f8:6a:d7:47:ed:ae:de:aa:90:a8:1b:
ed:1d:8b:b4:fa:45:dd:82:4c:d5:19:48:0a:07:69:
59:e7:9d:60:bb:e2:2a:89:cb:83:aa:f6:f3:19:d9:
2d:0e:9e:db:79:d6:f4:d2:b5:2a:20:df:ba:63:11:
e9:04:b1:94:cf:2d:db:49:7a:d7:82:2f:11:d1:a9:
48:1f:59:43:69:89:32:a3:3c:8f:42:45:90:6c:d5:
2f:c1:ad:61:91:76:e8:ba:48:60:fa:ae:fb:7e:74:
31:19:08:a5:25:ab:6f:58:15:52:c5:1f:21:b2:b7:
11:09:3a:1b:9e:f3:8c:bf:4f:fa:cf:b2:02:a0:86:
46:d3:3b:3f:b7:1a:8a:6f:03:14:cf:59:f3:54:fc:
8a:9f:44:37:61:48:06:50:b1:95:ac:8f:ce:e8:69:
14:48:40:ac:b1:86:44:7d:dd:2e:cb:53:92:b9:db:
ee:af:46:a9:87:55:c2:a4:60:2d:46:40:ca:f5:e7:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:CD:B1:56:BF:23:8A:AF:DC:8B:D8:A8:F8:73:97:91:F9:70:46
X509v3 Authority Key Identifier:
keyid:B4:4A:02:2D:32:FB:D5:74:51:86:E9:C2:82:DA:CE:F2:9E:46:FF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEoCLTL71XRRhunCgtrO8p5G_80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/4KfNsVa_I4qv3IvYqPhzl5H5cEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/tEoCLTL71XRRhunCgtrO8p5G_80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.204.0/24
195.234.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:65:70:8a:df:1a:b5:e5:37:77:28:44:3a:65:b3:a1:43:81:
2f:c6:2b:2a:77:24:5c:7b:2a:08:00:e0:90:d3:a8:cc:eb:81:
1c:5c:54:7f:8f:d3:be:65:8c:8f:8b:ea:6c:6c:15:68:f9:a6:
67:97:43:96:84:5f:df:71:a0:5c:c7:a1:8c:23:c3:8d:2d:98:
34:84:dd:20:48:b7:8c:9e:0f:95:a8:2e:8a:ce:6d:62:5f:c4:
28:dc:fd:dd:61:d0:de:a4:90:26:0c:21:b7:51:6d:b6:22:31:
f6:66:22:92:72:40:1c:13:ce:21:11:64:06:50:15:62:86:dd:
37:fb:3c:e2:04:64:48:46:57:8e:a9:b1:3a:6d:84:3e:40:cc:
af:41:c0:e7:97:91:50:7b:52:98:5e:34:00:c4:28:f2:f4:c9:
03:a8:12:b9:34:ea:47:29:1a:cf:26:4c:29:00:2c:e0:3c:91:
41:19:32:49:90:14:87:59:b7:a1:3f:e1:4f:5c:ca:3a:f3:52:
8f:a4:05:a6:08:e1:47:a3:9f:28:28:eb:ac:c2:40:cd:a1:b3:
e4:b2:5d:c5:8d:23:73:b3:4a:71:6b:a3:54:d8:95:d6:a2:9d:
84:7f:61:f3:c8:8f:6b:83:b0:39:c1:3a:14:27:e1:93:a5:4b:
a8:3c:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:52 2026 by rpki-client