Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/4yAq8LAxGHGEHsOnR80Y87vBPKc.roa
File: 4yAq8LAxGHGEHsOnR80Y87vBPKc.roa (raw, json)
Hash identifier: BO6c4RiQZpCcfGkeeZG1nDD54kln8prwnFSkJ8jAYBY=
Subject key identifier: E3:20:2A:F0:B0:31:18:71:84:1E:C3:A7:47:CD:18:F3:BB:C1:3C:A7
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FB53FA79D6B8C852CCB75852FB2E38EE1
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/4yAq8LAxGHGEHsOnR80Y87vBPKc.roa
Signing time: Thu 30 Jul 2026 22:57:55 +0000
ROA not before: Thu 30 Jul 2026 22:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 201.3.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b5:3f:a7:9d:6b:8c:85:2c:cb:75:85:2f:b2:e3:8e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 30 22:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3202af0b0311871841ec3a747cd18f3bbc13ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:d2:04:56:63:83:3b:be:62:08:b1:ba:33:
29:1a:00:58:98:46:26:0f:df:50:5e:56:6b:64:24:
52:6a:c2:14:2d:88:e9:b3:ee:bd:7f:e4:0b:e0:e7:
b7:fb:51:4d:2d:69:e0:a7:38:23:5c:dc:6f:42:33:
ac:b8:3d:ae:19:05:2a:51:b1:95:cc:86:23:8e:5c:
4a:f2:b5:d4:87:e2:e7:5c:17:06:a6:e8:b2:5b:e1:
97:79:af:80:b2:c2:a6:c4:8e:21:76:bc:ac:4e:6a:
72:4e:f3:80:26:ce:f8:01:ed:28:0e:61:3a:bd:40:
bf:5b:61:ef:98:b1:36:16:bc:97:ee:d7:30:51:fe:
ab:48:32:68:bb:ec:16:c4:10:be:f2:f9:be:d8:37:
00:79:c3:49:3b:56:be:bb:6d:81:85:66:43:0d:4e:
14:e6:2b:07:17:0e:d9:94:92:88:21:24:b1:e7:b9:
b0:4a:e6:5c:a4:46:1b:44:eb:93:61:c7:2d:94:3e:
5a:35:e7:ad:bc:93:3f:f6:7a:98:7f:0b:9e:41:16:
cf:bf:14:d1:ac:9b:2e:f5:1e:40:94:c7:79:5d:37:
50:b1:f8:9e:d2:97:18:6a:a7:29:b0:db:7f:17:fd:
21:2b:fc:4f:ea:b2:87:29:8c:1b:80:a2:f8:7a:f3:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:2A:F0:B0:31:18:71:84:1E:C3:A7:47:CD:18:F3:BB:C1:3C:A7
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/4yAq8LAxGHGEHsOnR80Y87vBPKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:de:b1:68:46:37:ab:28:1e:a9:fa:4a:57:19:68:af:20:8d:
17:27:92:a0:5d:e1:ec:8c:7f:29:28:de:28:e9:6a:53:a2:c0:
92:58:86:03:8a:d9:37:59:45:05:3d:af:aa:c4:ab:87:82:00:
a7:09:14:69:fd:28:66:d3:c8:1b:1f:b9:c5:eb:fc:14:9a:b3:
ec:02:2e:90:d9:23:87:50:37:88:27:18:aa:64:ca:f6:fa:2e:
58:08:e8:5f:0d:47:d0:f8:d6:56:a1:15:1f:a6:68:ea:69:73:
9b:12:71:02:6b:8b:03:9b:cd:db:89:19:06:77:8f:bf:20:1c:
4d:a9:63:e0:1f:73:15:51:8d:11:45:f6:51:5d:5f:b7:67:ab:
4e:0b:04:a1:08:fa:53:ee:ad:c4:a8:c7:84:65:8c:a6:85:50:
0d:1c:f0:66:a4:af:9d:50:1f:c6:8e:77:7a:88:bb:20:a7:0c:
21:5a:b3:3b:73:82:b7:79:9e:8d:13:eb:56:eb:99:61:58:b0:
31:28:bc:bb:91:9f:68:d9:0e:9a:86:68:ac:1a:a6:e6:67:2f:
27:69:77:ec:35:57:1f:52:60:a7:32:30:0d:9c:58:40:ee:56:
41:91:97:da:f1:5a:7f:23:ca:52:97:59:c8:24:72:37:74:c8:
30:52:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:18 2026 by rpki-client