Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/4NbY3XQRACHwP_UPtv4NWet5gmA.roa
File: 4NbY3XQRACHwP_UPtv4NWet5gmA.roa (raw, json)
Hash identifier: 57bOc+VcBkdxcqNN2GfyfgxziXwQDXWTp5NFQ7+P+lk=
Subject key identifier: E0:D6:D8:DD:74:11:00:21:F0:3F:F5:0F:B6:FE:0D:59:EB:79:82:60
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBE5BCCAD645D298E6F99CF8E42F6D4
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/4NbY3XQRACHwP_UPtv4NWet5gmA.roa
Signing time: Wed 14 Oct 2026 18:48:13 +0000
ROA not before: Wed 14 Oct 2026 18:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:be:5b:cc:ad:64:5d:29:8e:6f:99:cf:8e:42:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0d6d8dd74110021f03ff50fb6fe0d59eb798260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:62:8c:73:5a:41:14:26:c8:9e:c3:1c:5c:
43:64:c4:b9:c6:04:24:17:3c:e7:de:8b:36:eb:cf:
b4:af:c0:32:50:c3:06:c5:80:5a:6a:f5:15:43:39:
f7:0f:c8:19:d0:61:81:9c:67:d0:f7:67:d1:11:de:
be:05:41:1e:01:9e:a8:24:f5:5d:73:98:82:1a:0d:
c6:77:0c:38:74:85:b7:dd:2b:92:74:40:9f:bc:f0:
49:77:81:c8:0b:37:b8:cf:a6:64:be:2d:49:b9:20:
3f:1d:e5:69:ea:cf:e3:47:10:63:91:5e:30:61:f6:
f9:6d:a1:7c:76:53:8f:7c:e6:a3:79:ec:42:e2:aa:
7c:0d:c1:d8:60:ed:9b:f0:a9:49:64:75:e3:29:af:
91:d1:28:e5:a6:5e:8f:03:7e:7f:a1:e1:36:ab:1a:
52:d4:a6:17:5a:26:37:c2:e2:86:dd:d3:f1:62:03:
e4:56:e1:fe:84:18:a1:18:31:c3:41:f8:85:5d:c9:
74:1a:18:50:71:d9:ff:50:88:4c:3c:66:52:33:bb:
02:34:e8:e2:7a:d2:43:29:cf:f9:40:a2:07:07:72:
b2:04:de:10:37:28:ad:f8:1f:b4:4c:ac:62:49:0d:
d2:89:d5:fa:cf:76:7c:a2:74:e2:9d:9f:3b:a2:d2:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:D8:DD:74:11:00:21:F0:3F:F5:0F:B6:FE:0D:59:EB:79:82:60
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/4NbY3XQRACHwP_UPtv4NWet5gmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:b9:e1:0e:58:e9:ec:34:6e:91:dd:85:34:36:71:6f:d5:21:
5a:01:94:ac:7c:7e:8e:aa:ba:e7:01:1a:08:c8:07:d6:36:e0:
cd:a3:a3:38:e1:98:41:d2:0f:a9:cb:82:30:7b:10:3f:26:e6:
bc:8b:5e:9c:c6:ff:39:08:5b:3d:83:bc:6c:41:bb:27:49:80:
83:39:1c:57:24:01:f3:14:f6:93:81:2c:de:da:7e:e7:29:d7:
6f:ee:53:10:64:5e:3e:12:e2:b9:f3:53:20:14:90:67:ae:7f:
35:0c:b1:a5:d8:c6:5e:2e:6b:6f:6e:1f:32:37:78:cd:dd:be:
6e:af:a6:fc:6c:cf:7b:7f:ce:54:0a:6d:2a:8c:85:9b:6a:03:
ac:5a:d8:c5:a4:a9:3c:c7:63:fa:74:4c:ed:2d:7d:ef:ac:bc:
b1:8b:cd:f7:1e:1a:e4:3d:c9:c5:78:e3:ac:6a:86:30:b3:1e:
06:b0:a4:0c:da:a0:c7:97:c8:ab:ee:0a:87:e2:a1:a9:ef:2a:
bc:e5:fa:d6:a2:01:e7:23:44:33:c8:e8:1f:63:ec:61:06:12:
77:54:af:4f:23:98:cf:55:75:32:b3:f1:3d:cd:3f:eb:8f:de:
b8:bc:56:95:ea:40:23:cf:d4:f2:b6:74:16:39:68:1c:19:b6:
af:fb:69:e2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7vlvMrWRdKY5vmc+OQvbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjYxMDE0MTg0ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGQ2ZDhkZDc0MTEwMDIxZjAzZmY1MGZiNmZlMGQ1OWViNzk4MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0xijHNaQRQmyJ7DHFxDZMS5xgQk
Fzzn3os268+0r8AyUMMGxYBaavUVQzn3D8gZ0GGBnGfQ92fREd6+BUEeAZ6oJPVd
c5iCGg3Gdww4dIW33SuSdECfvPBJd4HICze4z6Zkvi1JuSA/HeVp6s/jRxBjkV4w
Yfb5baF8dlOPfOajeexC4qp8DcHYYO2b8KlJZHXjKa+R0Sjlpl6PA35/oeE2qxpS
1KYXWiY3wuKG3dPxYgPkVuH+hBihGDHDQfiFXcl0GhhQcdn/UIhMPGZSM7sCNOji
etJDKc/5QKIHB3KyBN4QNyit+B+0TKxiSQ3SidX6z3Z8onTinZ87otLZ7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFODW2N10EQAh8D/1D7b+DVnreYJgMB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvNE5iWTNYUVJBQ0h3UF9VUHR2NE5XZXQ1Z21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQcwDAN
BgkqhkiG9w0BAQsFAAOCAQEAAbnhDljp7DRukd2FNDZxb9UhWgGUrHx+jqq65wEa
CMgH1jbgzaOjOOGYQdIPqcuCMHsQPybmvItenMb/OQhbPYO8bEG7J0mAgzkcVyQB
8xT2k4Es3tp+5ynXb+5TEGRePhLiufNTIBSQZ65/NQyxpdjGXi5rb24fMjd4zd2+
bq+m/GzPe3/OVAptKoyFm2oDrFrYxaSpPMdj+nRM7S1976y8sYvN9x4a5D3JxXjj
rGqGMLMeBrCkDNqgx5fIq+4Kh+Khqe8qvOX61qIB5yNEM8joH2PsYQYSd1SvTyOY
z1V1MrPxPc0/64/euLxWlepAI8/U8rZ0FjloHBm2r/tp4g==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:47 2026 by rpki-client