Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4VQFCrAwTG8K8zEpbG93nwK8bsY.roa
File: 4VQFCrAwTG8K8zEpbG93nwK8bsY.roa (raw, json)
Hash identifier: mehlrdNJdbvfVZw3mJB3kVDGn1MVwF6v69T6RJNRGTY=
Subject key identifier: E1:54:05:0A:B0:30:4C:6F:0A:F3:31:29:6C:6F:77:9F:02:BC:6E:C6
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0863AFC9AFD5D38E56E90244C0F9D4063
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4VQFCrAwTG8K8zEpbG93nwK8bsY.roa
Signing time: Wed 09 Sep 2026 12:53:27 +0000
ROA not before: Wed 09 Sep 2026 12:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 94.184.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:3a:fc:9a:fd:5d:38:e5:6e:90:24:4c:0f:9d:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 9 12:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e154050ab0304c6f0af331296c6f779f02bc6ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:84:90:d1:72:dc:13:d6:ff:f2:17:02:a5:
a6:f3:42:d8:ac:f8:38:39:f4:c5:31:26:13:ba:e5:
13:97:8b:29:b4:e6:eb:fe:73:cd:fc:5d:6c:66:68:
a6:19:9e:5e:89:3d:ce:9f:53:67:ae:01:4d:0a:43:
9d:c3:4a:22:c0:1e:b7:98:4f:d8:a5:d1:a2:a1:67:
72:02:4e:20:b3:c7:f0:af:ef:d1:2a:6b:64:a0:eb:
d4:f2:e1:ff:8f:00:0b:a6:7e:ec:9b:dd:5d:94:ad:
ff:70:36:0d:35:b7:31:a0:f6:66:02:da:78:3b:09:
1c:37:d0:69:67:50:b5:b6:c2:b1:63:26:08:62:ed:
19:18:69:79:22:a2:73:bd:31:dd:d3:00:d4:13:72:
c3:9d:8c:de:23:28:6a:90:82:b0:a9:f2:4c:a3:fc:
ba:86:f2:5d:1f:fd:94:9d:15:8a:07:4a:63:94:46:
5e:10:0e:37:88:2b:14:1c:00:c5:be:16:83:a6:16:
3f:81:73:44:1b:ff:a3:ee:c9:71:38:59:cd:2f:37:
dd:22:60:35:cf:36:df:9f:9d:09:8b:12:23:69:65:
24:b2:d7:7a:c3:37:ac:16:16:d7:46:9a:3a:c6:b2:
c8:71:39:73:cb:9c:40:41:46:72:bc:cb:ac:5d:6e:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:54:05:0A:B0:30:4C:6F:0A:F3:31:29:6C:6F:77:9F:02:BC:6E:C6
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4VQFCrAwTG8K8zEpbG93nwK8bsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:0b:c1:9e:6e:f0:47:4e:1c:2e:b5:ae:ac:3a:02:b0:04:bd:
97:0a:3f:f3:07:d9:3f:b0:2d:45:b5:f0:66:27:19:e0:b7:0c:
d0:01:71:b1:99:2c:0d:2f:e4:f8:ef:c9:7c:28:74:94:f2:a4:
55:ea:53:66:be:b7:c2:5a:af:46:f3:57:59:f7:5c:83:09:e2:
5f:1e:28:0b:60:bd:2b:74:12:29:b3:9f:fd:87:1e:07:b9:e1:
a5:07:bb:ca:82:a7:5d:06:9d:45:56:7e:67:60:e7:66:71:3d:
75:27:31:7e:ac:6d:93:b4:84:b9:54:e3:c8:fb:e5:6d:67:5e:
4a:9c:52:ff:61:4c:77:29:9e:18:c1:dc:67:22:97:27:19:87:
2b:75:d1:94:c6:1a:ca:16:7f:d9:67:c4:50:e1:84:f7:55:55:
c1:a4:b0:20:9d:99:0e:77:5a:bf:11:e0:d3:02:e1:a5:e2:36:
51:02:ab:05:f2:b1:76:c4:8f:38:3d:ac:66:8b:b4:a8:b2:f4:
47:3b:4e:a2:98:f7:99:00:2a:e2:e0:04:42:4e:56:d0:75:a8:
52:5d:51:ba:9b:09:fe:63:9e:75:0f:27:24:f5:c0:85:4c:c7:
f1:b6:b3:03:6f:34:8c:34:b5:40:0b:57:ad:e3:05:3d:42:95:
dd:eb:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:30 2026 by rpki-client