Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RUpO7YzO4Q4u7emkeEttJ-upFss.roa
File: RUpO7YzO4Q4u7emkeEttJ-upFss.roa (raw, json)
Hash identifier: 4gXmhPhFM6wlFrTW4TyF6zeN7qnZYJUp2trDabq3weE=
Subject key identifier: 45:4A:4E:ED:8C:CE:E1:0E:2E:ED:E9:A4:78:4B:6D:27:EB:A9:16:CB
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019ECD209002B83448B1E3C7E0CBBEC9F8EC
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RUpO7YzO4Q4u7emkeEttJ-upFss.roa
Signing time: Mon 15 Jun 2026 21:12:03 +0000
ROA not before: Mon 15 Jun 2026 21:12:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12849
IP address blocks: 213.161.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:20:90:02:b8:34:48:b1:e3:c7:e0:cb:be:c9:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jun 15 21:12:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=454a4eed8ccee10e2eede9a4784b6d27eba916cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:7a:de:64:55:64:cd:11:52:9a:ce:2a:9b:
8a:44:4b:81:af:9b:aa:76:97:96:02:f6:49:4c:f3:
bf:45:ba:00:98:c2:eb:0e:54:dc:29:6b:e8:ec:44:
7a:e6:27:bf:78:6a:35:91:78:df:fa:95:32:70:d2:
e8:6d:f0:27:e4:36:c0:7e:d3:1e:7b:02:4c:87:e4:
04:41:21:1e:be:a1:1b:84:6b:15:91:1b:05:e6:f7:
0e:a2:16:03:1f:1f:d8:54:b6:99:fe:e3:58:26:2d:
26:4c:10:8d:df:77:70:ba:22:1d:55:e9:15:d0:de:
31:ee:a2:b4:e3:ef:c8:e4:a4:a2:0e:0d:d4:16:dd:
32:fe:4d:27:e8:d8:87:93:32:22:ef:50:44:ab:30:
7d:01:88:e4:03:37:01:49:d0:bb:f4:f1:71:74:c7:
2f:39:e9:24:a4:f4:bf:c9:b3:9c:36:4a:e2:84:d8:
2a:43:90:cb:30:58:bf:2a:25:a0:6b:4b:48:d9:c4:
cf:2a:df:de:4a:bf:60:6b:c6:f2:3b:0f:26:ee:e0:
51:5f:32:73:d2:73:ed:17:87:05:8f:1d:e5:6e:cb:
66:11:91:8f:cf:1b:6a:41:04:4b:01:35:9a:8b:fa:
98:f5:2f:71:2e:8d:26:f6:96:ea:14:e0:e5:d8:38:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:4E:ED:8C:CE:E1:0E:2E:ED:E9:A4:78:4B:6D:27:EB:A9:16:CB
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RUpO7YzO4Q4u7emkeEttJ-upFss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.86.0/24
Signature Algorithm: sha256WithRSAEncryption
09:66:37:22:23:ba:64:26:81:ad:39:74:61:5a:6d:81:0c:0a:
1b:b4:e4:da:2d:3a:af:f5:2c:63:3c:30:3f:bd:e7:12:f4:d1:
da:21:c7:0b:a7:e2:bb:44:4b:05:e9:a9:9e:cd:20:f4:b4:ce:
aa:29:3d:60:97:7c:91:90:10:f5:ee:d2:8f:45:fe:11:6b:25:
cc:d6:cc:67:59:05:00:cc:d5:8b:a1:27:7e:d5:38:42:95:2e:
01:ee:e7:e0:8c:1a:04:d5:6d:e1:0d:c6:6c:fe:eb:ff:6c:14:
7b:ed:a7:62:b3:5a:d9:85:ba:b1:67:e0:79:9f:d1:40:b9:33:
71:55:6b:0d:b5:70:b4:c6:80:c4:c8:4d:0d:29:d8:0d:98:cf:
f6:69:bc:a5:6f:26:eb:62:83:dc:70:7f:1d:5e:b2:65:12:93:
89:22:a5:c1:65:03:a5:be:84:f8:4a:57:0c:c7:0b:3f:9c:2c:
0f:20:6a:b2:55:68:16:e9:0e:c2:af:e2:db:3f:92:a2:a3:a3:
71:79:bb:c3:83:c3:b7:71:2e:f5:1e:15:37:2b:43:d2:92:44:
c3:e5:98:93:25:c4:fe:80:50:58:38:c5:9c:01:ca:59:b5:d7:
bf:82:91:69:e4:e7:45:34:10:b9:18:9d:72:9d:fc:d4:fe:61:
22:c3:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:14 2026 by rpki-client