Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/4dxsHt0mCJAaZqOG9sRO0MCHndU.roa
File: 4dxsHt0mCJAaZqOG9sRO0MCHndU.roa (raw, json)
Hash identifier: +XemRnswSWDUSYTgW9V1NyXjW5VqdupBO8dB19F/xw4=
Subject key identifier: E1:DC:6C:1E:DD:26:08:90:1A:66:A3:86:F6:C4:4E:D0:C0:87:9D:D5
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01A172C3054AA57A7A971A4950594B1BA4DB
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/4dxsHt0mCJAaZqOG9sRO0MCHndU.roa
Signing time: Sun 25 Oct 2026 11:12:25 +0000
ROA not before: Sun 25 Oct 2026 11:12:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 132.243.0.0/20 maxlen: 24
132.243.96.0/20 maxlen: 24
151.123.192.0/19 maxlen: 24
153.79.128.0/19 maxlen: 24
153.79.192.0/19 maxlen: 24
165.217.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:c3:05:4a:a5:7a:7a:97:1a:49:50:59:4b:1b:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Oct 25 11:12:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1dc6c1edd2608901a66a386f6c44ed0c0879dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:c4:ff:61:4a:35:d0:1c:e5:69:fa:34:98:
ba:55:7e:be:33:ce:8e:6d:91:7d:1a:c9:e5:05:24:
d9:a4:02:42:c5:98:4c:6a:43:c2:7c:c0:db:62:45:
a8:86:5e:4b:98:d1:09:e5:9f:42:1b:13:65:eb:c1:
6c:93:66:64:89:07:03:1b:51:1c:c8:29:6c:c9:a5:
bb:2a:d8:66:07:e9:4b:19:e6:40:83:9d:4b:93:07:
a2:07:34:7a:6d:2c:64:0f:b9:74:7e:27:28:12:6a:
25:a0:4f:5f:c5:d5:53:22:5d:21:27:91:7c:46:a2:
6a:ac:b0:ab:52:ae:71:98:9e:cd:34:1c:95:4b:5c:
03:ef:aa:d0:26:d5:75:0d:f4:6d:47:82:f5:ac:a6:
29:34:f8:d1:1b:a8:d3:9c:ac:27:34:04:dc:c6:95:
10:b8:38:62:c6:aa:ae:74:25:dc:16:1e:6b:b6:e7:
07:45:1c:e0:4d:ad:b2:51:19:f4:11:8b:b2:2d:61:
46:ae:3b:b7:c2:f4:c9:c6:8b:b2:fc:56:32:4c:8b:
df:8c:52:a9:a4:93:91:d1:35:d3:1f:34:45:b4:36:
67:15:ef:f6:d7:8f:bc:9f:07:c6:90:e5:fc:66:f7:
e5:ed:75:50:29:53:db:40:88:5b:0e:0c:e8:3f:1c:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:6C:1E:DD:26:08:90:1A:66:A3:86:F6:C4:4E:D0:C0:87:9D:D5
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/4dxsHt0mCJAaZqOG9sRO0MCHndU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.0.0/20
132.243.96.0/20
151.123.192.0/19
153.79.128.0/19
153.79.192.0/19
165.217.64.0/19
Signature Algorithm: sha256WithRSAEncryption
12:b9:3d:43:f1:fd:42:f5:44:1f:e5:78:29:56:ef:79:b1:4f:
59:13:8b:90:bb:bb:ca:25:f8:3e:1c:4e:e0:b6:1f:6e:84:9b:
01:14:6f:11:92:b6:8c:76:ff:4c:e7:f8:ee:32:7f:95:b9:08:
f1:40:1a:48:80:18:76:d8:b3:df:fe:3f:cf:60:aa:48:46:8c:
4a:a2:1a:0d:8d:5c:21:8b:49:9c:e1:5a:c7:92:10:b0:57:fd:
a0:1f:d2:45:4c:b6:ef:d5:30:d0:e0:bb:18:02:e3:1e:40:62:
45:08:c2:91:be:e9:8c:b3:c7:b3:06:2d:f0:22:d0:72:c5:11:
ed:6c:99:23:6a:6e:02:0c:c8:54:fa:35:eb:2c:60:ad:28:8a:
6c:9d:c8:ba:06:d1:67:dc:db:51:84:6c:58:9d:9e:5b:c8:11:
c3:9f:ce:df:fd:1a:4b:27:53:40:5a:c8:3e:18:bf:f0:97:a0:
70:10:2e:78:41:cd:48:aa:3a:ae:1e:3c:2d:33:e3:ac:60:6d:
7f:a5:01:56:a6:0c:8c:58:35:61:0b:7a:48:b8:fa:3f:29:05:
b6:c2:2c:d4:41:b0:b5:fb:e7:6a:84:3c:f5:e2:91:10:62:1b:
09:e7:61:8a:b1:62:42:11:15:b8:ce:f2:40:61:d6:66:74:48:
81:e2:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:47 2026 by rpki-client