Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4DKctb8L8u7FUurwl9Pc4z8Tfjw.roa
File: 4DKctb8L8u7FUurwl9Pc4z8Tfjw.roa (raw, json)
Hash identifier: SGX+D7BJ4fOqeosk67U7KPADN6t5/P1/K2+mrA3WbZY=
Subject key identifier: E0:32:9C:B5:BF:0B:F2:EE:C5:52:EA:F0:97:D3:DC:E3:3F:13:7E:3C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0FC517402F2E2FACDEB53DF9B5C21F523
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4DKctb8L8u7FUurwl9Pc4z8Tfjw.roa
Signing time: Fri 02 Oct 2026 11:13:11 +0000
ROA not before: Fri 02 Oct 2026 11:13:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275046
IP address blocks: 2.59.195.0/24 maxlen: 24
45.130.163.0/24 maxlen: 24
94.198.45.0/24 maxlen: 24
185.226.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:51:74:02:f2:e2:fa:cd:eb:53:df:9b:5c:21:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 2 11:13:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0329cb5bf0bf2eec552eaf097d3dce33f137e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:3a:29:1a:b5:50:ab:0b:b1:ac:12:42:2d:
2d:28:36:6a:a5:05:07:0d:a6:f6:08:07:36:28:fb:
da:72:09:2c:44:32:49:9e:a6:c2:10:9a:4c:43:6d:
58:c6:ed:3b:58:37:28:2e:14:bd:8c:78:39:d9:85:
28:78:5c:10:49:22:a8:da:3f:1b:b0:1b:01:62:6f:
86:75:bb:d2:22:fa:01:42:68:a3:ec:c1:84:8b:85:
5b:4e:d9:d2:ef:46:bf:af:f1:0e:d6:30:52:29:3b:
cc:69:dd:39:68:d0:cc:4f:67:f6:bf:6a:b4:60:da:
91:19:44:cd:de:0a:4f:d2:1b:d2:bc:1e:20:c0:92:
bf:00:5d:cc:0c:13:a9:04:8f:4d:23:3a:bd:c3:2d:
91:d0:c6:ba:82:2b:06:34:ac:b7:1a:d2:81:10:eb:
41:ca:b9:14:16:64:28:a9:a1:4c:bc:1e:72:0f:56:
e0:e7:35:db:1f:7a:ca:51:1e:ca:ad:be:b0:ca:60:
7d:17:ba:bb:cc:36:40:98:ac:0f:30:5a:00:a8:92:
1d:9e:c7:7f:4f:ce:6b:d6:0b:3d:fc:41:37:2f:44:
31:0d:a5:4c:5d:2e:26:31:07:92:a5:72:29:1b:74:
70:7b:d2:98:b1:55:c6:3f:f9:1c:bb:47:fa:39:68:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:9C:B5:BF:0B:F2:EE:C5:52:EA:F0:97:D3:DC:E3:3F:13:7E:3C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4DKctb8L8u7FUurwl9Pc4z8Tfjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.195.0/24
45.130.163.0/24
94.198.45.0/24
185.226.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1c:1c:76:da:3b:9e:1a:47:91:37:41:ca:8a:54:57:69:fa:
e8:e1:d2:04:0b:65:4b:1d:64:2d:c7:63:9f:ec:24:67:7a:b4:
5c:8d:3c:04:57:ac:f8:31:d7:5c:25:da:09:52:f0:a1:bb:11:
6f:8e:f8:f2:2c:78:d2:46:5b:d1:d4:ce:d6:df:93:31:4d:67:
98:88:1e:84:66:ee:fd:1a:96:8f:23:7c:49:5c:51:e5:ff:bc:
82:73:6a:f8:0f:39:c1:dc:6b:7d:38:ad:7e:91:cf:22:68:ec:
34:de:f4:ea:7d:d8:2e:53:73:27:74:31:a7:ed:02:d4:92:09:
dd:f2:47:29:5c:89:ac:4e:a7:a3:86:ab:cc:9d:ec:c6:1f:2a:
de:11:a9:f1:6b:98:17:72:75:f2:85:04:6a:6c:9e:41:b5:4b:
3d:f8:f7:68:19:ab:85:d2:ac:4f:5d:52:7d:c1:c7:f0:07:cf:
c7:9f:aa:34:72:3c:59:0b:a6:a3:81:cd:2e:4a:f9:e2:36:2b:
46:68:33:7b:58:26:81:b0:81:d0:37:09:6b:26:ad:b7:1e:27:
59:b8:33:6c:50:ff:1a:19:10:1a:49:23:f2:7e:ab:e4:17:73:
3b:fb:2d:f9:07:53:03:19:36:60:85:e2:87:0a:11:ec:7e:9f:
23:03:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:26 2026 by rpki-client