Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4N_Z86kKGskabTlxZnPF7BSpKvo.roa
File: 4N_Z86kKGskabTlxZnPF7BSpKvo.roa (raw, json)
Hash identifier: Z8pKZCmKOcQjlZpsSY0pMle3h8toFSwx20ZSHQFRkmE=
Subject key identifier: E0:DF:D9:F3:A9:0A:1A:C9:1A:6D:39:71:66:73:C5:EC:14:A9:2A:FA
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019EB26F2FBFBF98582F23CBA1D23F8F2785
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4N_Z86kKGskabTlxZnPF7BSpKvo.roa
Signing time: Wed 10 Jun 2026 16:48:11 +0000
ROA not before: Wed 10 Jun 2026 16:48:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57922
IP address blocks: 185.157.218.0/24 maxlen: 24
185.157.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:6f:2f:bf:bf:98:58:2f:23:cb:a1:d2:3f:8f:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 10 16:48:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0dfd9f3a90a1ac91a6d39716673c5ec14a92afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:69:e5:46:b3:41:e8:4e:65:c8:09:67:fe:
7b:1e:b9:cc:57:02:1c:58:f5:e6:6c:c1:8d:b8:17:
86:cf:dc:24:61:ff:b2:07:f4:7a:36:f9:41:f0:e4:
2a:73:6f:2f:6c:ec:c3:d0:c3:b2:fd:cd:f2:a8:d3:
d7:aa:10:b9:cf:d8:97:1b:b2:42:6a:8f:cd:b0:ed:
74:48:92:b3:bc:3b:ff:44:74:a2:04:a2:25:87:73:
c4:81:73:e7:41:ac:1a:8c:b3:12:7f:ec:58:3c:02:
d5:40:33:b5:bc:43:df:2d:24:02:c8:65:57:d2:d9:
ef:30:c0:23:64:6f:5f:ba:a2:9a:97:06:50:90:94:
fc:c6:9b:52:a0:74:1c:5c:18:f9:72:aa:f2:6f:6f:
09:a9:40:3b:dc:e9:e8:f8:cf:ea:8b:89:4b:ce:83:
50:c0:d8:47:12:6c:1c:60:60:14:f3:20:eb:bb:b0:
6b:2b:0b:fe:2c:d6:90:72:5f:85:31:5b:86:9c:5e:
e0:63:d0:fc:a5:f3:df:6a:54:58:2d:e4:69:3b:47:
b5:03:6e:30:a0:fd:18:9c:31:1c:83:c4:ab:b0:a0:
bb:6b:ab:03:37:85:80:33:1f:cb:3f:2c:07:c5:22:
91:d0:e3:d7:a8:38:17:d5:4d:72:c7:1d:e8:b9:63:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:D9:F3:A9:0A:1A:C9:1A:6D:39:71:66:73:C5:EC:14:A9:2A:FA
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4N_Z86kKGskabTlxZnPF7BSpKvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.218.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:6d:92:f4:fc:f3:c3:e4:7c:18:39:76:8c:50:d8:74:54:99:
a9:75:bb:22:4d:50:f9:c7:b6:6c:67:e7:af:f2:bf:21:00:cc:
56:10:6d:a1:5e:14:8b:36:8d:94:20:2c:cf:a4:b6:4a:49:d0:
90:01:d9:f3:76:42:f2:4b:72:d6:ea:d6:0e:64:19:47:c2:1f:
97:e1:82:d9:b2:08:e5:47:d6:fc:21:92:d0:d8:7a:a3:c2:26:
b5:e0:00:7e:5a:50:17:fd:ac:ff:68:fd:bc:5c:13:b4:c7:a5:
08:c8:1e:20:b6:89:7a:c4:80:45:b6:2a:81:aa:df:8e:e9:52:
1d:78:cd:df:52:bc:31:f3:99:a1:79:51:28:87:77:f5:7f:6a:
a7:1f:a1:38:c4:8c:fd:a5:f3:13:25:3f:cc:0b:4f:d2:04:75:
d3:fe:ec:c0:77:7c:f6:ac:82:27:d0:b9:1b:f2:0c:ba:2f:be:
40:13:88:80:c4:7d:13:16:5a:ba:f3:36:dd:18:05:7b:2e:7d:
77:27:6a:45:64:e2:8e:1a:0b:ce:8b:3b:cd:ba:a6:51:4a:4b:
15:75:be:af:e1:48:ef:15:0e:30:e3:02:23:60:49:64:b1:8f:
62:24:70:ae:84:d7:b0:29:57:d2:57:66:a9:d7:6e:be:f6:c3:
fc:eb:52:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6yby+/v5hYLyPLodI/jyeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwNjEwMTY0ODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGRmZDlmM2E5MGExYWM5MWE2ZDM5NzE2NjczYzVlYzE0YTkyYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj81p5UazQehOZcgJZ/57HrnMVwIc
WPXmbMGNuBeGz9wkYf+yB/R6NvlB8OQqc28vbOzD0MOy/c3yqNPXqhC5z9iXG7JC
ao/NsO10SJKzvDv/RHSiBKIlh3PEgXPnQawajLMSf+xYPALVQDO1vEPfLSQCyGVX
0tnvMMAjZG9fuqKalwZQkJT8xptSoHQcXBj5cqryb28JqUA73Ono+M/qi4lLzoNQ
wNhHEmwcYGAU8yDru7BrKwv+LNaQcl+FMVuGnF7gY9D8pfPfalRYLeRpO0e1A24w
oP0YnDEcg8SrsKC7a6sDN4WAMx/LPywHxSKR0OPXqDgX1U1yxx3ouWMv+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODf2fOpChrJGm05cWZzxewUqSr6MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvNE5fWjg2a0tHc2thYlRseFpuUEY3QlNwS3ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZ3aMA0G
CSqGSIb3DQEBCwUAA4IBAQAvbZL0/PPD5HwYOXaMUNh0VJmpdbsiTVD5x7ZsZ+ev
8r8hAMxWEG2hXhSLNo2UICzPpLZKSdCQAdnzdkLyS3LW6tYOZBlHwh+X4YLZsgjl
R9b8IZLQ2Hqjwia14AB+WlAX/az/aP28XBO0x6UIyB4gtol6xIBFtiqBqt+O6VId
eM3fUrwx85mheVEoh3f1f2qnH6E4xIz9pfMTJT/MC0/SBHXT/uzAd3z2rIIn0Lkb
8gy6L75AE4iAxH0TFlq68zbdGAV7Ln13J2pFZOKOGgvOizvNuqZRSksVdb6v4Ujv
FQ4w4wIjYElksY9iJHCuhNewKVfSV2ap126+9sP861II
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:39:07 2026 by rpki-client