Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4dq-SRYsTI38wdhlXxy8UPySjto.roa
File: 4dq-SRYsTI38wdhlXxy8UPySjto.roa (raw, json)
Hash identifier: gDfc+NZJ8+tgwRzfwkkG8Goj1irpoZKRlf+t6htQAVc=
Subject key identifier: E1:DA:BE:49:16:2C:4C:8D:FC:C1:D8:65:5F:1C:BC:50:FC:92:8E:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1F31C98FE0A4807CA4BBC8FADF743A20
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4dq-SRYsTI38wdhlXxy8UPySjto.roa
Signing time: Wed 01 Jul 2026 19:39:44 +0000
ROA not before: Wed 01 Jul 2026 19:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 82.109.69.0/24 maxlen: 24
82.109.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:31:c9:8f:e0:a4:80:7c:a4:bb:c8:fa:df:74:3a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 1 19:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1dabe49162c4c8dfcc1d8655f1cbc50fc928eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:ee:34:4a:7a:4b:6a:e2:47:5d:e3:96:32:
5c:ad:e3:bd:27:a2:13:ec:5d:e3:9d:06:1f:16:be:
ac:42:41:bb:29:8d:4c:26:e5:21:89:47:cd:5d:5a:
6f:01:7c:d0:00:f8:88:3d:79:a7:58:8d:8b:b6:21:
4d:46:c8:d1:94:a8:9e:4c:9e:b1:db:b4:10:3d:d5:
98:94:4c:7a:ea:18:c5:bc:b4:63:db:91:c8:81:b0:
44:07:ab:49:bc:04:1a:9c:31:00:1c:fd:33:65:c1:
9a:fb:c3:53:58:b3:3a:22:fe:62:0b:e9:2d:57:50:
06:31:e0:ce:8a:a0:9a:7f:09:3b:9e:65:58:bc:b5:
81:3e:de:5b:7d:72:02:05:7a:d7:7e:dc:e8:51:35:
ee:9f:70:af:22:1c:77:e7:1c:d3:de:42:e8:43:ad:
07:a7:1b:91:28:5b:d1:30:df:97:94:9a:b3:f2:2e:
06:d8:86:fd:88:08:4e:9b:13:c9:f3:34:e7:09:00:
b3:65:db:4d:11:bf:9a:86:5e:a9:c7:94:73:82:ce:
2b:60:2a:98:bb:5b:16:6a:57:a7:03:a3:5e:09:05:
ff:7d:a6:c3:a6:51:39:d7:46:0e:2d:9e:8b:ff:de:
44:83:8c:dd:f9:50:d4:2d:07:07:5e:54:1e:ee:f1:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:BE:49:16:2C:4C:8D:FC:C1:D8:65:5F:1C:BC:50:FC:92:8E:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4dq-SRYsTI38wdhlXxy8UPySjto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.69.0/24
82.109.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e2:23:e3:9c:11:65:52:61:2e:a8:c9:a1:4c:98:94:7f:1f:
14:5f:83:1f:c8:8b:c7:15:42:da:0e:3f:86:24:bf:86:25:22:
52:bf:cf:cc:a6:6d:6f:6f:30:63:b3:05:d7:b6:12:d3:c9:87:
87:09:b9:1c:e4:86:d9:eb:7e:cd:54:75:44:a5:f0:22:f9:07:
a9:9e:04:9d:2e:1a:19:b5:79:05:4d:56:a9:0e:d2:3a:5b:0f:
cb:42:29:b8:ae:b4:c4:87:8d:34:fd:15:22:4d:a8:cd:01:f1:
46:22:54:ec:b8:90:14:50:c4:2c:19:f3:f2:b2:26:a2:23:69:
64:d6:47:ee:f4:8b:ef:93:ed:68:04:41:87:8e:39:21:4a:bd:
a5:05:ed:07:7c:17:c0:e2:7c:97:92:bf:c2:a0:15:84:8a:98:
53:17:35:48:75:34:c8:7f:4b:9e:3a:56:90:bd:c6:d8:47:6b:
6f:18:01:ba:ff:d6:2d:c8:e7:3e:9c:29:fe:d0:ad:a0:91:16:
ff:b8:31:30:8a:d2:3e:9b:40:ff:3b:71:94:ff:46:2c:28:3b:
57:43:dc:e4:fe:8e:5b:7a:95:91:b8:fc:cd:cc:2a:1f:4b:f1:
4f:64:b7:7c:40:9d:8a:84:32:51:76:f8:01:25:2c:d7:96:b1:
7b:22:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:59 2026 by rpki-client