Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/T4WKqnzx21YB7DT_1vKAo3UszP8.roa
File: T4WKqnzx21YB7DT_1vKAo3UszP8.roa (raw, json)
Hash identifier: 6mK+AjkLTQZ9KoVljBzw+UhhF/AIqKZ8gcyABfwrr5U=
Subject key identifier: 4F:85:8A:AA:7C:F1:DB:56:01:EC:34:FF:D6:F2:80:A3:75:2C:CC:FF
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CC3923EDCE32E90CB9E9EE20D2BF14427
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/T4WKqnzx21YB7DT_1vKAo3UszP8.roa
Signing time: Fri 06 Mar 2026 14:34:27 +0000
ROA not before: Fri 06 Mar 2026 14:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 193.203.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:92:3e:dc:e3:2e:90:cb:9e:9e:e2:0d:2b:f1:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 6 14:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f858aaa7cf1db5601ec34ffd6f280a3752cccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:33:11:93:e6:d0:0c:31:1f:5e:fc:b4:b4:
de:29:66:0b:20:05:c1:a2:61:ec:36:d9:0b:79:20:
0e:92:92:3a:46:25:7b:b8:4d:41:d8:47:e9:bd:17:
96:55:6a:5a:5b:5e:bd:98:c9:45:fc:05:8f:ad:04:
66:dc:05:15:00:cd:db:15:db:b3:64:9e:8f:f4:31:
8e:22:10:3b:f4:b2:84:4f:54:17:8a:16:fd:25:1b:
3b:48:b4:37:4c:96:c5:24:b7:b7:9d:79:a3:9a:23:
ed:3b:ba:4c:b7:1b:dc:6e:01:03:35:d0:f7:51:92:
b8:13:c6:df:d7:01:39:d9:2b:05:81:64:01:2c:25:
a1:f3:6e:ae:39:18:1d:3c:07:2c:b6:d5:f1:cb:41:
20:a6:cb:ce:4f:93:89:f6:e4:95:ae:35:57:cd:73:
bb:01:e4:b9:b2:77:c8:7a:55:c8:f0:d0:66:cc:cb:
fe:ec:f5:5b:6e:9c:30:7e:ab:b0:1c:04:5d:c9:19:
7b:87:5c:8a:52:e2:bf:ae:ed:1d:3f:e7:d4:d4:43:
de:fe:00:26:b2:06:70:1b:74:fe:df:8a:a4:a9:fe:
f9:d2:01:89:92:54:26:37:6b:51:2d:42:b0:a5:9f:
92:f6:75:90:ee:de:ba:aa:83:f4:21:0b:4e:13:e4:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:8A:AA:7C:F1:DB:56:01:EC:34:FF:D6:F2:80:A3:75:2C:CC:FF
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/T4WKqnzx21YB7DT_1vKAo3UszP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.10.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2c:51:06:f6:08:c8:20:82:ba:32:64:1d:27:66:f2:a1:05:
07:e5:da:2f:dc:f7:d4:89:7b:fb:77:4a:7f:ed:47:be:a9:c2:
52:dd:a5:a5:55:f7:1f:f1:63:fd:7d:51:50:8c:15:b7:0d:34:
4e:e7:1c:b8:0b:96:eb:60:09:e9:d3:03:46:10:1d:ce:cf:fb:
62:a6:71:03:74:27:10:44:cc:02:9e:7c:76:2b:8b:15:12:db:
07:bc:58:ee:d7:60:a8:cd:32:f4:52:d7:15:fc:ec:5b:13:ca:
69:62:07:12:3c:94:53:3f:6d:c4:fd:f6:ea:2e:67:2f:55:e2:
f8:3a:17:d4:d6:47:ea:14:e0:f3:d0:0e:f4:38:39:40:9e:c7:
d4:81:e5:8e:d6:93:f2:5f:09:cf:1f:f5:1a:da:20:ed:ae:0e:
46:df:cd:b9:4a:5f:25:1e:eb:28:5b:fc:d6:84:1c:4c:44:b7:
17:6a:6d:44:40:2b:4d:1b:e5:8c:36:15:8c:75:93:c8:01:20:
7d:18:b9:61:a9:79:24:77:ae:fd:8b:df:12:60:e4:a9:fa:42:
ea:3f:8a:a8:07:6d:db:7b:e9:f0:02:2d:1d:70:fb:23:af:e8:
ab:81:61:d2:19:82:e4:8a:42:35:55:e7:d2:8f:68:9b:c3:bd:
02:39:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:48:34 2026 by rpki-client