Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/4m7QSckp2ci_fSXpKAEm28535y4.roa
File: 4m7QSckp2ci_fSXpKAEm28535y4.roa (raw, json)
Hash identifier: 4475h5maUOx4jCwnFFSO/+38leG2b35wFaPNErJ0ZnE=
Subject key identifier: E2:6E:D0:49:C9:29:D9:C8:BF:7D:25:E9:28:01:26:DB:CE:77:E7:2E
Certificate issuer: /CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Certificate serial: 019FD3073B158DD9129A96309853AB2BBE80
Authority key identifier: 75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/4m7QSckp2ci_fSXpKAEm28535y4.roa
Signing time: Wed 05 Aug 2026 17:44:54 +0000
ROA not before: Wed 05 Aug 2026 17:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201973
IP address blocks: 80.246.96.0/20 maxlen: 20
80.246.96.0/24 maxlen: 24
80.246.97.0/24 maxlen: 24
80.246.98.0/24 maxlen: 24
80.246.99.0/24 maxlen: 24
80.246.100.0/24 maxlen: 24
80.246.101.0/24 maxlen: 24
80.246.102.0/24 maxlen: 24
80.246.103.0/24 maxlen: 24
80.246.104.0/24 maxlen: 24
80.246.105.0/24 maxlen: 24
80.246.106.0/24 maxlen: 24
80.246.107.0/24 maxlen: 24
80.246.108.0/24 maxlen: 24
80.246.109.0/24 maxlen: 24
80.246.111.0/24 maxlen: 24
2a03:f8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:07:3b:15:8d:d9:12:9a:96:30:98:53:ab:2b:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d977aa2a4c10c7b47af2add96804487e2274a9
Validity
Not Before: Aug 5 17:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e26ed049c929d9c8bf7d25e9280126dbce77e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:67:90:6d:4e:e4:c0:3e:8c:d1:52:bd:36:
e5:bb:08:d9:55:70:91:1d:b6:3a:20:2b:ba:3e:f8:
67:de:fa:a4:97:47:79:ef:b7:6e:66:57:a6:7f:17:
5f:31:39:6b:53:62:f6:dd:68:7e:1d:b5:ae:6e:6c:
8b:7f:a9:9a:65:4f:41:89:6b:ac:12:c2:26:20:d8:
90:f5:a4:c0:97:b4:ef:1d:1c:16:ed:a5:8f:98:f9:
38:4a:72:91:55:81:f6:30:d3:7b:9d:37:5a:23:27:
e7:12:ab:0c:2f:19:77:6d:64:70:66:d6:1e:13:14:
1d:04:aa:e6:20:48:4d:81:4f:af:31:65:f2:e7:71:
9e:b0:d3:1d:ff:85:10:dc:90:f6:c1:62:df:12:9f:
0b:29:f9:c8:f4:51:d4:e3:a5:40:d5:c9:84:08:27:
7a:60:14:ef:6f:a1:26:4e:39:28:5f:10:0c:b7:f0:
ec:7e:74:23:e2:77:e4:3f:ec:d2:be:74:af:54:b1:
49:f7:46:21:bc:53:15:bd:ce:ee:37:55:35:e4:12:
1a:36:24:e7:7f:be:9a:c8:1a:65:a0:1d:82:e0:77:
82:00:cc:61:43:52:12:8b:71:6a:a8:df:97:85:0f:
e4:42:c7:a1:45:d4:06:aa:7f:ff:34:41:ba:d4:5b:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:D0:49:C9:29:D9:C8:BF:7D:25:E9:28:01:26:DB:CE:77:E7:2E
X509v3 Authority Key Identifier:
keyid:75:D9:77:AA:2A:4C:10:C7:B4:7A:F2:AD:D9:68:04:48:7E:22:74:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddl3qipMEMe0evKt2WgESH4idKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/4m7QSckp2ci_fSXpKAEm28535y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8038fe-a9de-4a2c-adc7-126df5446de9/1/ddl3qipMEMe0evKt2WgESH4idKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.96.0/20
IPv6:
2a03:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:01:c0:d1:66:90:58:ab:7a:6c:b6:74:bd:b9:db:ad:24:8f:
3f:8f:8c:9b:3a:87:93:c0:51:99:d0:c5:3f:11:1b:38:c7:58:
2a:c5:ea:7e:90:2d:1c:a0:9d:d2:d8:b1:2f:04:43:f4:83:67:
b0:e7:fc:74:8f:ef:97:3e:af:38:5c:72:9e:ed:d6:c8:76:ad:
dc:b8:bb:bb:ee:4c:90:d4:e9:77:cb:9c:f7:94:cf:9c:a9:4d:
5b:0b:7c:93:60:33:33:6f:2a:ac:47:c3:6e:0c:a3:12:b5:bf:
4c:70:b8:f2:ed:49:59:a6:bf:ed:1d:30:c4:cd:90:d7:a5:e3:
a0:eb:34:5f:91:3a:17:63:e2:ed:14:bd:a5:57:2c:79:7f:c0:
fa:c6:17:ef:07:74:7f:31:98:13:c3:1d:c9:16:e5:6d:1e:02:
48:aa:86:43:99:b6:6f:e4:ab:c5:a2:e6:2d:2c:2a:1b:84:ce:
ed:ad:09:c0:94:ea:a2:c4:27:b0:68:c0:eb:b4:1c:1e:db:b5:
0d:f2:61:42:49:eb:2e:32:1c:a0:ed:9a:a6:2d:f3:26:8d:a5:
f6:dc:b7:57:b2:2b:3b:7b:ae:44:93:8f:4d:74:59:d1:bb:a9:
4b:49:65:6a:08:7d:8b:d5:ac:29:f3:89:5f:4e:c1:4e:ec:bd:
4e:8f:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:23 2026 by rpki-client