Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4nxq69akcrnS-zRaJEN_J-CarA8.roa
File: 4nxq69akcrnS-zRaJEN_J-CarA8.roa (raw, json)
Hash identifier: nKuSQcFV1mEPcsyqW7rQ1wPszE4cL8AaOxal0lvJoeQ=
Subject key identifier: E2:7C:6A:EB:D6:A4:72:B9:D2:FB:34:5A:24:43:7F:27:E0:9A:AC:0F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A15EC446379F4F03506BDF271A1D2564D6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4nxq69akcrnS-zRaJEN_J-CarA8.roa
Signing time: Wed 21 Oct 2026 14:01:23 +0000
ROA not before: Wed 21 Oct 2026 14:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c4:46:37:9f:4f:03:50:6b:df:27:1a:1d:25:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 21 14:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e27c6aebd6a472b9d2fb345a24437f27e09aac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:06:cd:51:a9:6c:ec:86:5b:ac:68:d1:83:
30:8d:e3:69:5a:9b:cf:fc:ce:85:78:bd:51:65:f2:
39:fc:fb:9c:dd:64:74:1e:1a:8d:27:d5:d0:3b:ad:
9b:b4:76:f4:f9:b9:9a:05:51:fc:09:db:78:87:7d:
14:82:f4:a7:fe:74:f0:98:57:c9:0f:e9:3c:41:12:
9f:ea:86:1d:72:6c:d3:1b:71:cf:5c:d2:20:10:98:
25:13:b5:7d:b4:9d:a7:2d:84:f0:9d:78:7a:8c:be:
f5:ff:86:f3:33:3d:e1:21:8c:fc:50:74:6f:2d:58:
0e:bd:58:a5:2e:ef:95:99:49:97:13:0f:91:96:40:
c3:58:fe:e9:23:f1:73:af:e6:66:9a:e2:c2:2d:a8:
df:bc:59:52:4e:48:16:99:0f:a7:19:e3:79:97:ae:
7b:76:3d:3e:de:7b:a0:0c:6a:58:06:be:59:38:77:
07:fc:2f:a6:14:e9:83:62:bc:bf:9e:67:5e:33:d9:
4a:cb:a2:d0:0c:b5:93:19:6e:a5:c0:9d:b2:fb:72:
45:d7:a2:48:d1:bd:f4:2f:a8:7d:9d:e4:a6:05:10:
ea:80:ff:8d:78:65:99:1e:fd:ba:cb:d6:39:fb:7f:
a6:e8:07:aa:77:d3:da:c0:e1:f7:42:62:d9:c9:3d:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:6A:EB:D6:A4:72:B9:D2:FB:34:5A:24:43:7F:27:E0:9A:AC:0F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/4nxq69akcrnS-zRaJEN_J-CarA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.0.0/24
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:e4:2f:4d:05:1b:ad:e4:03:43:b2:4a:da:af:c6:1d:0c:54:
1b:5b:bd:23:71:85:5b:50:97:e6:14:38:5f:60:e6:69:92:46:
14:f4:68:28:60:03:4f:64:bd:b3:cb:cb:63:ce:d9:a9:d5:e5:
85:d5:e2:26:e2:0d:c2:b8:08:c7:7d:c0:1b:10:54:9a:33:f6:
01:73:06:e5:62:e9:46:45:0d:e7:cf:a0:33:06:9f:f4:40:30:
27:d2:0b:6c:43:df:f5:b2:19:d7:9c:22:f0:6e:3e:e8:9e:c7:
2d:27:d4:bc:76:dc:9b:e5:07:79:d6:55:b8:e4:02:4d:6a:ca:
91:fc:46:d7:4d:04:e8:f5:49:2e:34:43:dd:d4:cb:ee:f7:02:
ec:84:76:f2:70:ce:88:4f:3b:f6:72:a2:93:ab:f7:54:76:80:
e5:fd:ef:27:55:f5:3a:f5:d8:c5:9f:1d:3b:99:a7:1d:7b:c4:
93:92:99:0e:e7:83:84:0a:e1:cb:d4:18:80:aa:4a:e2:00:0e:
11:61:2b:cd:84:fe:ef:1a:fe:00:ae:e2:f9:5d:f4:ac:4e:25:
b7:e1:6c:b4:87:44:01:a0:bb:d8:f7:20:b9:86:89:57:7d:e9:
46:93:73:6f:df:9f:a4:1c:6b:51:0a:a6:46:ef:67:64:98:17:
9d:ea:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:03 2026 by rpki-client