Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4n-hRD4YbuSHfo2UlAzpZTJ97H4.roa
File: 4n-hRD4YbuSHfo2UlAzpZTJ97H4.roa (raw, json)
Hash identifier: xSLrXELu372yuOx4jc3ycvJo6yMEe7QGVJz6VXnQD3c=
Subject key identifier: E2:7F:A1:44:3E:18:6E:E4:87:7E:8D:94:94:0C:E9:65:32:7D:EC:7E
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0DEFC0A60D437550477C8802BF2A58092
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4n-hRD4YbuSHfo2UlAzpZTJ97H4.roa
Signing time: Sat 26 Sep 2026 18:30:54 +0000
ROA not before: Sat 26 Sep 2026 18:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 94.184.31.0/24 maxlen: 24
94.184.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:fc:0a:60:d4:37:55:04:77:c8:80:2b:f2:a5:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 26 18:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e27fa1443e186ee4877e8d94940ce965327dec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:01:18:23:f2:39:41:38:de:31:ab:56:99:
c9:93:02:41:8c:c0:60:42:ac:32:80:e3:5e:d1:39:
4f:08:4d:39:af:b9:26:87:ad:f8:dc:d3:f6:53:42:
eb:69:13:91:56:7d:eb:57:86:c2:0d:bc:bc:71:1a:
8f:f5:61:66:94:65:78:5b:41:dd:07:cb:c2:a8:20:
dc:0c:33:46:bb:f3:d4:ae:9d:8e:b1:80:14:54:45:
60:78:6c:67:31:44:fd:ec:a1:a8:58:7e:47:8a:39:
f3:df:97:a6:f5:fc:ab:fd:e9:d6:56:ad:0d:3a:3b:
2f:a7:2c:d5:b6:6e:3a:96:13:e8:d2:16:2d:6e:70:
a7:97:1d:a3:fd:11:7d:f2:86:fd:81:9e:36:58:df:
52:31:ff:9b:5a:f0:c5:a6:99:42:c7:e3:0f:26:b9:
09:45:f8:dc:8c:c5:ab:50:64:34:2b:f9:38:39:78:
47:44:d2:c7:a0:c4:59:8e:a0:aa:42:68:00:fb:25:
96:ab:4e:90:28:a9:bc:c4:45:b6:5c:9a:5b:6e:42:
ed:cd:a4:3d:fd:87:c7:45:f9:82:2f:e9:bd:7e:ea:
c4:7c:a1:d2:b0:d1:63:01:61:fe:ce:79:97:0f:75:
98:82:12:45:28:4f:0f:ad:ce:6c:eb:51:ae:5b:22:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:A1:44:3E:18:6E:E4:87:7E:8D:94:94:0C:E9:65:32:7D:EC:7E
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/4n-hRD4YbuSHfo2UlAzpZTJ97H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.31.0/24
94.184.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:df:4a:7d:e1:e7:5e:bc:fc:59:85:eb:fb:ce:ba:f2:de:9d:
c3:95:d9:e0:69:f2:a9:2d:18:a7:ff:7e:4a:15:48:68:e1:9a:
70:92:6b:5a:ae:46:e7:1c:a0:69:38:fc:8c:6a:35:19:90:ff:
26:b2:6a:48:f6:66:4c:c2:48:8d:6f:c3:d5:26:33:4f:70:84:
80:a2:c6:6c:d0:cd:77:20:8b:a1:76:e1:3d:24:1a:cb:52:6b:
e8:69:77:2f:7a:b4:00:d2:12:d9:26:86:df:65:2b:f5:ac:2e:
68:e2:4f:e2:f7:15:2f:2e:00:7e:82:3d:0a:fc:0d:d9:bf:fc:
52:82:3e:1c:8c:7b:63:29:50:46:d5:ba:8c:c6:10:18:42:af:
84:96:c7:a3:81:1a:f9:f1:99:0d:34:5c:d4:d0:17:81:32:83:
ec:1c:bc:f1:9f:a5:5f:03:29:f7:34:a3:04:71:ae:73:0e:0b:
53:a6:c1:d3:88:41:40:aa:16:a5:98:91:9d:2a:ac:07:fe:bf:
e1:35:9d:18:18:50:d5:c3:d2:ac:d2:b0:3f:88:c9:0a:c8:a7:
15:7c:ad:fd:98:1e:c0:d8:36:a2:58:a3:58:a4:43:ba:86:70:
ce:6f:79:61:8e:b7:8c:99:3f:5e:f3:08:9a:aa:fb:e1:58:fd:
2e:31:a3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:54:40 2026 by rpki-client