Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4p9Md_e5Jwbg-RMNBHIbWLiTeeA.roa
File: 4p9Md_e5Jwbg-RMNBHIbWLiTeeA.roa (raw, json)
Hash identifier: JjHq97ZNv6UY/MtArvtXiuY2VWrQ36HApT/+HzGeMVo=
Subject key identifier: E2:9F:4C:77:F7:B9:27:06:E0:F9:13:0D:04:72:1B:58:B8:93:79:E0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019F18165544952A1996710827FF91BCB7E4
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4p9Md_e5Jwbg-RMNBHIbWLiTeeA.roa
Signing time: Tue 30 Jun 2026 10:32:24 +0000
ROA not before: Tue 30 Jun 2026 10:32:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 81.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:16:55:44:95:2a:19:96:71:08:27:ff:91:bc:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 30 10:32:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e29f4c77f7b92706e0f9130d04721b58b89379e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:66:ff:6b:15:18:de:af:be:44:c3:1e:49:
6e:65:4c:a1:bd:30:2e:c7:1b:bc:a1:93:75:7a:cd:
8b:c8:c6:3d:2a:ec:0d:17:f9:46:bd:ec:2e:ad:45:
5f:59:e5:19:c0:25:ce:ef:4c:e8:e3:bc:74:53:2b:
91:f5:7b:08:af:74:73:cc:b0:50:13:9b:4d:ed:07:
b3:6c:dc:cd:e5:b4:d5:97:92:81:8f:75:f5:b7:05:
73:37:28:80:2d:a1:0f:fb:56:9d:33:0f:60:31:23:
85:27:51:f5:9b:64:90:cc:39:39:44:1e:02:ab:7e:
9b:a3:70:16:42:99:da:0f:c7:5d:b1:04:26:e0:9a:
b2:11:ca:04:e6:39:53:94:8c:4c:74:b2:7e:cc:39:
47:12:f5:65:e2:85:31:63:03:a1:29:4d:3e:50:2e:
11:e4:53:ff:05:ca:d2:b1:d8:11:46:1c:56:d6:fd:
c9:6e:ff:3e:70:a2:ff:86:15:16:a7:47:d4:b3:0e:
b8:ea:b4:ad:68:3f:82:ee:4a:a1:16:2d:f0:2f:47:
18:61:b0:31:69:49:42:50:88:86:a4:4e:5f:ee:16:
eb:2e:01:79:01:9f:e1:f9:bb:18:b8:af:a0:b1:5a:
4d:04:08:d8:a7:83:0e:95:bb:ca:e4:88:41:55:88:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:4C:77:F7:B9:27:06:E0:F9:13:0D:04:72:1B:58:B8:93:79:E0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4p9Md_e5Jwbg-RMNBHIbWLiTeeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5f:53:4c:5a:52:da:16:e0:1c:ab:a8:7b:68:0d:84:e4:e6:
c7:e2:50:60:e2:3d:70:ff:f5:01:7f:17:77:7f:aa:77:08:00:
a0:c3:10:16:b3:88:76:58:95:55:4f:8d:6d:f2:84:51:78:62:
00:3a:96:f5:58:93:24:e1:8b:f7:76:c5:8e:d4:1a:ad:e5:52:
da:c8:f1:7f:cb:c7:91:92:2a:de:bf:12:f7:df:84:0c:78:93:
0e:ce:9b:6c:3f:c8:9f:e2:a0:f4:19:d8:8e:0e:26:9b:d2:e3:
b7:a6:a6:49:f1:9d:fa:0c:43:36:e8:99:d1:6c:47:49:ca:b4:
af:1b:69:76:f0:45:e2:90:d7:0e:31:36:52:45:d7:d2:db:13:
db:cd:9c:8f:e1:fe:d4:1d:c8:52:47:df:a1:ac:bc:77:f0:d8:
f8:9d:47:14:4d:f9:2f:83:c0:d4:5c:12:c5:e6:e5:30:c3:a8:
2c:0c:81:e6:1e:83:68:8b:36:82:1c:b0:c4:aa:b4:fa:49:dd:
df:93:ef:a0:93:0a:3c:d5:d8:cd:7c:f9:53:28:93:11:a1:ec:
b2:9f:73:11:61:26:f0:3e:79:27:38:40:f1:2b:35:a5:3d:56:
18:da:71:14:52:ab:25:44:09:b9:63:af:f0:c2:93:d5:89:6d:
f0:64:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client