Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4AglBXSxw1B7VId6dAcaovkehhc.roa
File: 4AglBXSxw1B7VId6dAcaovkehhc.roa (raw, json)
Hash identifier: U+P6iKGDY1W2hGOT6uN0tSqA5DHkRaNwK9zH/R7tgtw=
Subject key identifier: E0:08:25:05:74:B1:C3:50:7B:54:87:7A:74:07:1A:A2:F9:1E:86:17
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A00E8B092617B193E73536E34004F871FE
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4AglBXSxw1B7VId6dAcaovkehhc.roa
Signing time: Mon 17 Aug 2026 07:06:27 +0000
ROA not before: Mon 17 Aug 2026 07:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.184.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:8b:09:26:17:b1:93:e7:35:36:e3:40:04:f8:71:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 17 07:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e008250574b1c3507b54877a74071aa2f91e8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:70:9c:21:46:9f:a4:cd:cc:60:e0:89:52:
38:d9:bd:44:e3:9b:ba:c4:a7:25:5f:49:cc:8d:2b:
73:68:d9:ba:ec:37:0b:93:6b:8f:8e:ac:e4:1d:a2:
a3:4d:e7:c5:30:3b:00:1c:ae:22:82:cd:04:d7:2b:
b8:73:86:a6:b1:25:bd:05:fb:df:19:38:32:ca:17:
5e:03:aa:45:d3:84:f2:83:c2:21:03:c2:3d:47:62:
06:a5:1c:e3:63:69:5e:ba:dc:4f:31:cb:fa:43:47:
26:b2:65:e0:f9:db:96:d5:07:72:a0:ef:4f:08:84:
ca:8b:1b:b2:75:18:0a:bc:c8:f0:5b:43:b4:c1:50:
8f:1a:12:f4:1c:c5:a4:77:7b:23:c4:84:49:8f:c7:
59:2f:9a:4f:40:32:62:c5:3f:ec:b6:46:c2:c3:85:
cd:72:2a:b6:55:dd:73:ba:df:47:e0:ad:07:89:ff:
93:38:76:ec:07:be:2b:d9:0e:fc:dd:a3:f8:16:6b:
89:2e:f5:6b:fc:24:b8:cc:a9:68:50:28:49:0a:45:
97:14:b4:96:c0:c7:98:4f:b1:49:2c:b2:63:b7:74:
e8:b3:27:cf:48:23:2f:52:05:15:12:51:3f:1f:89:
56:07:49:90:02:b6:12:77:b9:fe:2c:6b:6d:da:30:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:25:05:74:B1:C3:50:7B:54:87:7A:74:07:1A:A2:F9:1E:86:17
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4AglBXSxw1B7VId6dAcaovkehhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e2:b9:55:6c:29:96:ea:26:e0:b4:e0:60:fb:74:83:59:81:
71:84:29:e0:df:4e:3f:d5:44:44:17:ba:bc:1c:11:3c:83:b0:
72:45:6a:9c:e9:50:51:de:9f:ab:53:50:46:24:ec:fa:a3:27:
f1:ee:cf:c6:7d:62:79:3b:de:98:10:49:54:e0:cd:63:98:38:
11:9e:c6:10:28:68:63:85:ff:2e:bf:ed:f9:d7:30:d7:16:25:
ef:f3:be:38:99:28:24:c2:67:79:99:ee:31:e0:92:9a:d6:97:
bf:5a:ab:bb:e6:ce:62:21:0c:2f:58:7b:93:fc:dd:3a:73:51:
93:aa:3c:fa:f7:0f:0d:73:bd:e5:45:67:1a:4b:36:13:18:b1:
8d:3e:a6:32:d8:d3:ad:b8:e8:d6:22:90:96:82:c9:79:45:fe:
dc:25:f7:b7:fe:eb:08:9d:9e:72:6f:a9:cd:86:68:cd:6b:c3:
3e:1b:0d:09:ab:f8:08:62:b2:4d:39:b3:81:7c:99:27:16:ba:
11:49:4c:b1:f5:e5:38:7d:ca:93:99:66:66:f3:d8:d2:6c:10:
16:cd:04:57:3f:ab:b5:72:01:e6:41:9f:9d:a8:8f:c3:74:a5:
a7:10:ae:eb:36:bc:8b:30:1a:56:5b:f1:44:0d:6a:39:53:73:
8b:01:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:54 2026 by rpki-client