Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4EoJUeU_HoG5pBo5hF-R3Om84CQ.roa
File: 4EoJUeU_HoG5pBo5hF-R3Om84CQ.roa (raw, json)
Hash identifier: sgjjhENlXAU9RPDP/HuFU/f89xllFV4Oje75bqFz9jw=
Subject key identifier: E0:4A:09:51:E5:3F:1E:81:B9:A4:1A:39:84:5F:91:DC:E9:BC:E0:24
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019E649A0BF4D5090EC56C8D3A52ACA8E7CE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4EoJUeU_HoG5pBo5hF-R3Om84CQ.roa
Signing time: Tue 26 May 2026 14:04:37 +0000
ROA not before: Tue 26 May 2026 14:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201469
IP address blocks: 31.148.21.0/24 maxlen: 24
95.46.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:9a:0b:f4:d5:09:0e:c5:6c:8d:3a:52:ac:a8:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 26 14:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e04a0951e53f1e81b9a41a39845f91dce9bce024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:13:d7:f6:94:a6:90:0e:cc:fd:bc:41:35:
24:7a:96:21:6d:2c:d9:e3:fb:d7:cd:f3:53:e6:6d:
e4:fc:85:86:b7:02:45:82:82:b6:42:19:95:74:73:
cf:5f:d5:a2:34:65:3a:67:9d:01:18:b8:00:f7:ef:
21:48:e2:2f:73:06:5e:b7:c7:07:d2:ab:53:62:53:
e8:60:ba:a0:e6:fa:3b:5f:c9:7c:e1:45:16:c1:75:
48:a1:33:2e:5c:1c:73:50:ad:26:e9:be:35:fd:6d:
bb:9c:44:4e:7d:ac:ad:31:87:4f:b1:45:1c:74:84:
61:f5:99:52:ad:bf:fe:41:49:52:ad:c1:09:4a:e1:
e3:58:c3:25:3b:6d:cd:bf:a4:55:a7:63:bd:eb:90:
76:1b:b0:2b:5f:96:ff:33:d2:86:d1:ca:3b:87:68:
72:d8:57:c1:72:4e:2a:4e:f1:db:c9:fa:c5:75:c7:
a7:63:41:db:cc:e2:f0:37:ce:0e:3e:d0:32:79:11:
8d:43:37:5b:3a:c9:84:34:80:17:11:40:81:0d:7a:
75:65:d7:dd:6e:2f:54:3a:ac:26:62:88:4c:43:cb:
a8:a0:9f:f8:50:c9:0b:03:be:ff:ab:c4:6d:b8:02:
a8:af:94:33:1c:3a:d2:d1:44:db:72:d3:93:22:53:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:09:51:E5:3F:1E:81:B9:A4:1A:39:84:5F:91:DC:E9:BC:E0:24
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4EoJUeU_HoG5pBo5hF-R3Om84CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.21.0/24
95.46.4.0/24
Signature Algorithm: sha256WithRSAEncryption
28:77:a5:70:37:96:68:71:f2:b9:32:d4:fb:89:6a:5b:06:43:
b3:8a:23:27:fb:ef:94:6e:f3:2d:44:98:c9:5c:3d:55:e5:45:
43:cf:b3:d0:ff:9a:ee:b4:ef:3a:43:19:56:66:e8:c1:8a:9e:
bd:bf:0a:22:06:d6:30:85:7d:57:14:fc:2b:00:96:00:b7:40:
d3:22:18:42:45:b4:73:1d:dc:7c:6c:3b:f8:19:47:b2:0c:a9:
ee:36:2d:85:e4:b1:fa:23:d5:2e:54:fb:14:c6:97:a6:37:f4:
f0:87:d0:00:a9:24:01:ca:f2:20:c3:e6:49:60:2a:4a:d3:53:
72:c7:45:58:5c:25:24:e0:57:64:12:d4:18:42:41:b7:02:c3:
cb:5c:2d:0f:d2:53:37:eb:6a:72:36:0e:2e:7e:3e:89:2b:b1:
70:4b:89:a8:62:fc:58:ae:44:a0:84:8c:bc:6c:25:1c:09:3a:
83:de:5f:7c:42:72:68:b2:c3:8d:0e:0c:54:0a:07:5d:48:e6:
9c:ee:c7:c2:ca:4b:54:a4:eb:5d:7d:67:45:79:58:21:ae:24:
3b:5d:98:94:26:ef:66:c6:b6:15:85:56:a5:51:2f:1a:58:89:
3c:2d:dd:11:b7:4c:73:b9:a2:55:35:e3:86:84:15:14:4b:65:
7c:0b:25:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5kmgv01QkOxWyNOlKsqOfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwNTI2MTQwNDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDRhMDk1MWU1M2YxZTgxYjlhNDFhMzk4NDVmOTFkY2U5YmNlMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nET1/aUppAOzP28QTUkepYhbSzZ
4/vXzfNT5m3k/IWGtwJFgoK2QhmVdHPPX9WiNGU6Z50BGLgA9+8hSOIvcwZet8cH
0qtTYlPoYLqg5vo7X8l84UUWwXVIoTMuXBxzUK0m6b41/W27nEROfaytMYdPsUUc
dIRh9ZlSrb/+QUlSrcEJSuHjWMMlO23Nv6RVp2O965B2G7ArX5b/M9KG0co7h2hy
2FfBck4qTvHbyfrFdcenY0HbzOLwN84OPtAyeRGNQzdbOsmENIAXEUCBDXp1Zdfd
bi9UOqwmYohMQ8uooJ/4UMkLA77/q8RtuAKor5QzHDrS0UTbctOTIlNhnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOBKCVHlPx6BuaQaOYRfkdzpvOAkMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNEVvSlVlVV9Ib0c1cEJvNWhGLVIzT204NENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5QVAwQA
Xy4EMA0GCSqGSIb3DQEBCwUAA4IBAQAod6VwN5ZocfK5MtT7iWpbBkOziiMn+++U
bvMtRJjJXD1V5UVDz7PQ/5rutO86QxlWZujBip69vwoiBtYwhX1XFPwrAJYAt0DT
IhhCRbRzHdx8bDv4GUeyDKnuNi2F5LH6I9UuVPsUxpemN/Twh9AAqSQByvIgw+ZJ
YCpK01Nyx0VYXCUk4FdkEtQYQkG3AsPLXC0P0lM362pyNg4ufj6JK7FwS4moYvxY
rkSghIy8bCUcCTqD3l98QnJossONDgxUCgddSOac7sfCyktUpOtdfWdFeVghriQ7
XZiUJu9mxrYVhValUS8aWIk8Ld0Rt0xzuaJVNeOGhBUUS2V8CyVg
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:25 2026 by rpki-client