Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa
File: 4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa (raw, json)
Hash identifier: N/6K00b1BuFhTw/CFjj1QlwHlKUxym0tqK2UkGVKAtg=
Subject key identifier: E2:22:89:D7:10:37:AD:67:6C:A7:5F:EB:29:9F:95:AA:54:35:1D:25
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A00B69F2695CF9D9470D52D83DDE811120
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa
Signing time: Sun 16 Aug 2026 16:31:27 +0000
ROA not before: Sun 16 Aug 2026 16:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219464
IP address blocks: 153.79.171.0/24 maxlen: 24
2a14:a087:7::/48 maxlen: 48
2a14:a087:b::/48 maxlen: 48
2a14:a087:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0b:69:f2:69:5c:f9:d9:47:0d:52:d8:3d:de:81:11:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Aug 16 16:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e22289d71037ad676ca75feb299f95aa54351d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:c2:a2:b4:12:95:6f:ab:3b:47:18:84:ea:
30:bb:63:ae:73:d2:68:7e:b2:2e:17:49:9e:43:70:
68:16:0e:1f:1f:a1:1c:87:54:82:f3:b1:ad:46:46:
ab:91:06:b5:5f:e7:7a:55:ff:2e:dc:95:d5:49:55:
2f:ec:fb:70:b2:06:77:4f:a7:fa:1b:f7:20:7c:51:
72:e9:45:34:96:f5:1a:81:ec:a9:d6:0f:d3:08:e8:
2b:80:9b:a4:87:81:b9:92:76:29:47:84:70:64:6e:
d7:19:5b:ff:9b:71:69:1f:6d:68:21:ac:bd:a4:6b:
ba:eb:30:0f:94:ff:0c:33:4a:10:31:6a:4b:de:fe:
1c:64:27:f0:46:c8:48:b4:bd:1c:f8:93:bc:17:8c:
c0:d4:3d:d2:5c:9d:81:18:4d:36:3d:3a:79:54:4a:
8a:01:19:27:97:5b:93:83:a2:0b:bc:f5:83:6a:58:
67:68:92:1c:f1:0e:81:86:c8:09:5b:8a:55:99:49:
2b:c2:a0:01:83:56:0e:65:1e:d4:5a:72:4a:bc:34:
0b:a9:4c:81:40:a5:1d:c8:1e:75:06:c4:ea:3e:e4:
b1:94:52:af:35:8c:4a:8e:c3:b7:c2:a3:14:3e:97:
1c:ce:56:ac:cd:0b:a8:4e:cb:f5:7e:8f:b5:1c:13:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:89:D7:10:37:AD:67:6C:A7:5F:EB:29:9F:95:AA:54:35:1D:25
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/4iKJ1xA3rWdsp1_rKZ-VqlQ1HSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.79.171.0/24
IPv6:
2a14:a087:7::/48
2a14:a087:b::-2a14:a087:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3c:a7:41:31:22:ae:72:ca:51:87:85:4d:0c:e0:29:76:14:7c:
da:60:2c:ce:6f:67:7d:98:3e:cc:99:01:49:9c:f0:b9:7b:e0:
b3:a7:9d:39:33:38:34:0d:00:54:55:6f:07:1f:9e:b9:be:7d:
55:56:57:b8:cd:57:3f:d7:18:e6:73:a1:ee:5f:52:22:f8:ea:
d1:a8:e0:5b:b3:da:fc:0a:17:43:5f:86:e9:16:dc:73:ac:2b:
6c:93:55:af:42:ae:4e:df:5a:4b:0d:bb:98:79:eb:96:88:8d:
e9:16:78:a1:ed:98:73:a8:ec:ac:d8:af:38:2f:9f:8d:00:aa:
2c:0f:10:4d:0d:24:f9:e2:a4:ff:3b:1e:9f:6d:ad:45:47:c2:
47:1a:34:c1:4b:95:a1:85:3a:7a:f7:02:ec:02:9a:b6:d3:2b:
d2:84:ea:67:fa:20:4f:b1:56:11:bd:c1:59:47:79:fb:1b:1d:
5c:5f:50:a2:7e:ae:77:87:31:07:43:35:09:f5:7c:b0:c9:db:
84:c6:f9:76:93:06:33:2e:b5:5a:46:ee:cd:9d:23:14:64:3c:
34:eb:fc:a4:2f:2d:e7:ca:4c:9e:16:ca:3d:af:95:09:9f:46:
06:6a:ab:2d:f9:94:c4:2a:ac:60:d6:9e:4e:e6:72:68:8e:01:
5a:7a:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:35:49 2026 by rpki-client