Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/S3fnE2JC0jHbyCxq9xex6D4bocU.roa
File: S3fnE2JC0jHbyCxq9xex6D4bocU.roa (raw, json)
Hash identifier: mu1p6qiKaLOmkIYHWTkNeWxIRnBG6HgnHbJaFPZY098=
Subject key identifier: 4B:77:E7:13:62:42:D2:31:DB:C8:2C:6A:F7:17:B1:E8:3E:1B:A1:C5
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A1638CB12EB33618D93D2EAA91B23025B7
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/S3fnE2JC0jHbyCxq9xex6D4bocU.roa
Signing time: Thu 22 Oct 2026 12:18:47 +0000
ROA not before: Thu 22 Oct 2026 12:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28709
IP address blocks: 5.181.61.0/24 maxlen: 24
89.221.235.0/24 maxlen: 24
91.231.132.0/24 maxlen: 24
91.231.133.0/24 maxlen: 24
91.231.134.0/24 maxlen: 24
128.140.170.0/24 maxlen: 24
178.237.16.0/22 maxlen: 24
178.237.16.0/24 maxlen: 24
178.237.17.0/24 maxlen: 24
178.237.18.0/24 maxlen: 24
178.237.19.0/24 maxlen: 24
178.237.21.0/24 maxlen: 24
178.237.22.0/24 maxlen: 24
178.237.24.0/24 maxlen: 24
178.237.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:8c:b1:2e:b3:36:18:d9:3d:2e:aa:91:b2:30:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b77e7136242d231dbc82c6af717b1e83e1ba1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:4f:78:b3:68:a2:4c:70:e2:8e:60:a7:4f:
77:45:73:ea:f5:92:de:00:96:6b:26:d2:35:c1:19:
8c:54:f7:81:b4:d0:08:51:63:b7:7f:7e:99:d5:23:
d2:4e:36:17:35:ec:cb:ae:8f:16:26:6c:e6:5a:be:
04:45:4e:86:a8:00:85:e4:7d:5d:7a:28:63:7f:a2:
68:0f:29:86:88:6b:69:dc:73:7f:25:c9:70:ac:d7:
0b:9d:96:3b:a6:46:64:96:8f:c6:6f:d1:09:80:1f:
47:7d:8d:f2:00:b7:6e:c8:35:2c:11:2d:d6:20:ea:
75:ab:d7:52:a8:0a:2e:8d:58:c0:83:4b:ce:ed:49:
9e:87:f2:1c:df:41:0a:ed:c0:5c:83:76:13:f1:c4:
49:1c:be:d0:1e:f3:7a:ea:6f:7f:61:82:55:04:29:
cd:e8:b9:92:24:2b:11:dd:e1:d5:61:6a:c7:1e:af:
0e:a5:a0:8e:36:a9:7b:e2:bf:2e:26:ee:57:ec:ba:
7a:64:ba:f4:31:6d:07:f7:75:63:1c:e6:ad:4a:11:
51:7b:3d:6a:76:0c:86:3c:88:66:4a:bc:aa:5d:7b:
f3:4c:73:be:49:e2:28:15:32:ac:61:ec:f8:2d:68:
f2:b7:40:9f:fa:42:b8:e3:b0:1e:f5:0e:aa:8d:c9:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:E7:13:62:42:D2:31:DB:C8:2C:6A:F7:17:B1:E8:3E:1B:A1:C5
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/S3fnE2JC0jHbyCxq9xex6D4bocU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.61.0/24
89.221.235.0/24
91.231.132.0-91.231.134.255
128.140.170.0/24
178.237.16.0/22
178.237.21.0-178.237.22.255
178.237.24.0/24
178.237.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:36:9f:3f:cd:5c:f0:9f:ce:78:cf:d4:7a:e7:97:f2:f8:03:
a1:e6:9f:3b:71:4d:80:c5:ec:5d:2b:1c:38:bb:d8:9e:74:80:
20:ae:3c:e9:6b:31:e1:f9:b6:f3:4c:c1:33:7e:95:af:2f:8a:
a4:ba:47:e3:7d:ec:8e:f3:97:7e:9d:e5:e9:05:e0:da:77:1c:
53:11:a6:6c:a1:14:11:a4:74:cd:4e:37:c3:09:95:c1:52:aa:
2b:2e:0f:44:a2:db:8a:70:03:86:f0:f4:d8:a4:06:1a:41:7c:
15:bd:73:3f:da:54:d9:51:c5:8c:e6:1f:42:19:6e:92:c5:7a:
4a:1d:3e:d2:88:44:2c:ee:48:ea:46:29:3d:a1:47:d2:e0:7a:
64:ec:ff:98:86:be:5c:83:e6:b6:6e:12:ee:ea:c7:de:7b:f6:
8e:b9:29:fc:ba:51:18:8d:fe:38:44:d4:c4:d5:34:1f:17:83:
04:c5:c0:ae:8a:b3:bd:15:97:18:80:98:cc:d7:ad:9a:09:9c:
4f:ed:6d:68:db:6f:48:1b:29:96:67:66:47:52:7b:a9:8d:c6:
5b:97:d3:19:ed:78:5f:a9:c8:41:e5:d2:5e:c9:0e:74:12:0b:
63:54:13:11:a7:2a:85:7c:66:df:e1:73:90:41:90:6f:99:13:
ae:d1:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:48:57 2026 by rpki-client