Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa
File: 4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa (raw, json)
Hash identifier: teuW6Uqx1V2y5WJ8UJGDWcpw8cpD9xgHQ0Zadlt/dZ8=
Subject key identifier: E2:FB:58:6D:C6:48:D8:4E:6D:86:35:C8:92:15:7B:16:EC:21:FC:2F
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019EF89A32118A23D15BC705BD7585D0F1F2
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa
Signing time: Wed 24 Jun 2026 07:48:35 +0000
ROA not before: Wed 24 Jun 2026 07:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 185.209.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:9a:32:11:8a:23:d1:5b:c7:05:bd:75:85:d0:f1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Jun 24 07:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2fb586dc648d84e6d8635c892157b16ec21fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:92:a2:3e:ee:71:88:75:75:e9:9a:6d:11:
4c:5f:85:10:86:06:c1:82:01:1f:6a:d1:2c:2e:5d:
ba:5f:24:ed:f3:3d:a2:7d:fd:d3:67:b1:a2:fe:86:
b1:d0:56:e2:c4:51:c9:25:74:4e:14:7a:4f:5c:cd:
b0:65:35:9a:6a:6b:e4:0b:a0:49:6d:10:da:26:87:
1a:d3:db:69:02:89:a8:11:55:0c:d3:88:a0:45:fe:
b5:3b:cf:ff:c7:70:1b:af:50:8d:cc:79:c1:ec:b9:
82:4d:f7:e6:24:e9:0a:14:27:ee:d7:c8:f8:ca:ba:
ac:98:84:3f:c3:08:0c:50:da:79:42:b7:20:b5:fc:
30:73:53:e6:df:a4:ab:31:39:62:11:55:46:a6:80:
84:1f:aa:81:44:36:cf:d3:84:d7:c0:cf:1c:10:3a:
d4:f7:1c:67:ce:01:67:52:b3:9c:6b:70:84:2f:e5:
fd:fd:3f:6f:a7:db:19:80:09:3a:79:8e:38:2c:0c:
46:17:46:5a:35:6b:56:e5:4a:2e:2b:0e:72:ca:f5:
c6:e7:69:e6:09:0a:e0:3f:8f:33:1d:17:0f:ab:1e:
98:02:e8:71:9a:0a:3a:37:55:6f:a6:c6:a2:4a:40:
81:44:33:51:bc:48:0e:26:60:11:b9:7e:8b:3e:a2:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:58:6D:C6:48:D8:4E:6D:86:35:C8:92:15:7B:16:EC:21:FC:2F
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/4vtYbcZI2E5thjXIkhV7Fuwh_C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.43.0/24
Signature Algorithm: sha256WithRSAEncryption
94:66:82:05:0f:46:68:e4:aa:70:eb:ac:1d:9c:73:4a:1b:c5:
63:e3:d7:1a:8e:b1:1d:52:58:ab:03:46:df:ae:18:88:99:f3:
f0:59:90:e6:54:44:18:d3:80:54:f1:47:f8:a3:07:37:83:a8:
cf:0e:09:c7:94:e6:eb:00:06:d5:cc:13:08:5d:64:89:e9:d9:
08:3f:9b:3a:1a:8f:18:75:47:f1:88:a6:89:72:c5:3a:e6:81:
a7:83:77:91:03:39:14:36:4d:73:8a:32:f6:95:72:d4:50:09:
21:9a:1f:f4:d6:15:31:94:a9:88:6e:31:86:27:ab:70:8f:4f:
9b:fc:77:0f:b4:63:3a:46:1d:b7:2e:23:cd:93:ac:58:b1:6f:
78:d4:b4:d0:6e:40:e6:a3:1b:c0:07:0c:3b:a5:ad:a7:2d:b1:
9a:fb:7a:b0:ac:33:96:0c:82:7a:7c:d9:e3:d2:41:b5:70:47:
61:c1:d9:79:9a:5e:99:f4:3b:14:3f:61:1b:d9:84:23:70:93:
74:20:ac:26:6b:52:79:9a:cb:70:f9:70:84:1a:40:ea:ff:a6:
37:f4:0f:43:07:57:b6:3d:f1:bc:6c:5e:53:c0:38:72:3b:b9:
e3:7f:c8:c4:cb:4e:f9:43:2a:22:c9:34:0f:0b:68:0a:6e:b7:
77:c2:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client