Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/4ErzX-QVNekNwKgp4bp4FD23jUg.roa
File: 4ErzX-QVNekNwKgp4bp4FD23jUg.roa (raw, json)
Hash identifier: CeVzQivYoZLOezXlmDn5EdgQqoTtKCRcynyTRtxOdiE=
Subject key identifier: E0:4A:F3:5F:E4:15:35:E9:0D:C0:A8:29:E1:BA:78:14:3D:B7:8D:48
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019FFA7888702BCFE9671F6142A5F120630F
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/4ErzX-QVNekNwKgp4bp4FD23jUg.roa
Signing time: Thu 13 Aug 2026 09:33:51 +0000
ROA not before: Thu 13 Aug 2026 09:33:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6772
IP address blocks: 195.13.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:78:88:70:2b:cf:e9:67:1f:61:42:a5:f1:20:63:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Aug 13 09:33:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e04af35fe41535e90dc0a829e1ba78143db78d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:d7:79:d0:bd:32:68:9a:fd:17:da:4b:25:
24:68:c4:0c:73:e0:a6:c1:6d:59:d7:56:18:fb:c2:
d7:eb:9c:cf:3d:08:f6:64:d7:8b:88:66:2e:1c:f6:
bd:02:ee:29:1f:70:97:4b:71:4d:b2:3b:df:93:6d:
1a:07:09:32:f0:5e:04:40:b8:b4:7c:e6:19:3e:fa:
dd:75:e9:79:db:48:92:7e:1d:34:2b:cb:02:46:49:
db:5d:14:95:72:0d:a4:e6:93:78:83:bd:bd:b2:d4:
8e:98:93:46:b2:d8:d2:2b:2f:f2:00:41:36:59:1c:
54:ac:86:93:98:2d:48:42:e2:0e:e2:d0:00:ff:66:
d9:b9:c4:f5:3d:91:e0:f0:77:bb:14:a1:e5:9b:49:
29:09:12:81:56:93:b5:01:3f:ac:2b:c2:46:00:81:
c1:eb:50:0e:99:b8:09:b6:f8:a5:17:0e:b5:b5:c6:
c3:b6:83:67:b1:83:9a:ac:0b:31:57:69:b2:b8:31:
80:6d:ef:f3:fa:b3:ed:69:75:55:e8:38:6a:6a:30:
4b:04:b4:23:ca:8d:26:93:33:ba:2d:32:88:25:13:
18:67:92:8c:5d:17:b6:c6:6a:9a:10:42:73:27:9c:
a8:ed:49:ba:4d:a0:29:44:1a:bd:91:a7:44:2d:15:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:F3:5F:E4:15:35:E9:0D:C0:A8:29:E1:BA:78:14:3D:B7:8D:48
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/4ErzX-QVNekNwKgp4bp4FD23jUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:0a:d8:21:dc:44:68:c5:45:de:0d:e8:a5:68:ee:57:99:4e:
01:6a:a7:fb:8a:fb:a3:82:f0:fe:7a:02:f7:e9:77:23:98:c7:
80:9f:71:5d:11:51:43:35:c7:c9:04:a9:a5:f1:1e:32:30:a4:
9b:5d:aa:d3:4f:65:00:92:9c:e8:ca:65:2b:2f:a3:df:a8:c7:
db:f8:da:6a:50:99:47:f5:5c:40:3b:6d:60:d3:4b:b6:38:0d:
7f:61:8c:7b:e6:e4:9d:57:09:03:f7:80:b8:69:cc:e2:66:c2:
be:46:9b:1b:be:b5:58:36:31:18:d5:28:c3:51:63:f7:75:6f:
32:fc:39:52:8d:0c:20:3a:7c:86:dc:e1:bb:be:8b:6d:e1:3f:
13:77:3b:1d:9c:7e:9d:1a:8c:d1:a6:2e:6f:93:4e:f4:a9:85:
b2:61:df:55:be:25:b7:be:15:b0:d0:3f:eb:53:b7:7c:83:18:
6d:17:5e:1f:54:51:e0:92:17:d6:7c:84:1f:1c:ae:d7:51:e4:
1b:59:ca:b9:e8:a1:f2:7f:22:8f:f4:16:1e:b5:97:06:7e:f8:
c2:15:db:52:1b:7f:a7:ee:ed:1d:be:fe:bc:75:d6:16:58:36:
89:6a:7e:e5:0d:44:aa:5a:e0:54:d1:80:f1:5f:ce:79:90:f3:
16:b0:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 21:11:21 2026 by rpki-client