Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Ror4-CfLmWcTaTyHA0iJv7ATKKc.roa
File: Ror4-CfLmWcTaTyHA0iJv7ATKKc.roa (raw, json)
Hash identifier: Tw7JWISrLHQ/oL9q+UlKj39hw8rBBywNyF5smzbvEWM=
Subject key identifier: 46:8A:F8:F8:27:CB:99:67:13:69:3C:87:03:48:89:BF:B0:13:28:A7
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A068AC58D189054DFABB54876CA5566A4D
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Ror4-CfLmWcTaTyHA0iJv7ATKKc.roa
Signing time: Thu 03 Sep 2026 19:08:40 +0000
ROA not before: Thu 03 Sep 2026 19:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218910
IP address blocks: 94.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:ac:58:d1:89:05:4d:fa:bb:54:87:6c:a5:56:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 3 19:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=468af8f827cb996713693c87034889bfb01328a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:f9:b4:ee:5e:df:92:b7:89:63:47:4a:e2:
e7:37:8d:a2:6a:50:e8:f2:6f:6a:b0:e6:92:a0:be:
db:29:11:86:de:22:87:c4:43:41:e8:54:76:ef:8e:
25:b1:b1:e4:ea:5e:d8:72:dc:28:39:2d:dd:d7:58:
ef:8c:05:99:45:2b:c7:bf:6a:6f:12:b1:6c:5c:d0:
45:00:57:66:e8:11:52:af:e2:bb:98:c8:cd:5d:8d:
d1:bd:29:d1:b7:0d:8a:f3:e3:3d:f0:7b:24:35:4f:
88:c6:86:b7:a7:3a:f4:cc:df:46:66:55:d4:1f:b1:
cf:5a:79:1b:6e:df:5f:57:b1:fe:7c:89:9b:ba:4e:
28:20:01:cb:35:ca:d7:bd:cd:5c:9a:58:66:1e:00:
51:1a:fa:d2:3e:41:18:b2:67:ef:34:40:f3:22:69:
eb:2f:c5:d4:4d:d3:45:db:a8:41:67:77:7f:bd:af:
ca:58:0a:22:2c:bb:3c:3e:31:b9:2c:34:5d:6e:ff:
96:48:ba:ca:b1:a6:c5:c9:10:90:4e:e3:b0:55:9d:
be:c1:ba:bf:5f:94:ba:f4:25:7b:be:1d:38:0d:9c:
15:f5:2a:14:8a:35:d4:84:9f:1b:58:58:96:98:0e:
1b:1a:5b:59:9f:ef:93:2e:d6:0a:f8:bf:a1:6e:17:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:F8:F8:27:CB:99:67:13:69:3C:87:03:48:89:BF:B0:13:28:A7
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Ror4-CfLmWcTaTyHA0iJv7ATKKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
96:03:5a:11:f7:de:c1:34:e3:13:1c:c7:a9:14:37:10:1c:3e:
69:ba:8c:5e:e4:7c:f3:c3:4e:28:bd:5f:28:f8:c9:15:ab:55:
df:77:da:0f:2c:27:8e:96:66:ad:4b:cd:66:73:0b:d4:94:36:
bd:7c:0d:15:5d:c5:32:e5:17:b9:49:8c:e4:0e:c2:ec:06:f6:
0e:0c:40:91:d5:14:aa:a0:2a:04:46:a1:96:12:a2:d9:d1:d4:
8b:62:ef:0b:80:2b:7c:fc:e7:ba:8a:14:da:c1:1e:ec:d7:97:
03:29:4e:f0:3a:b2:5f:ba:26:24:08:f7:fe:34:d2:9a:91:1e:
7c:b9:65:c5:d8:da:b0:f2:63:65:7a:d3:73:16:c3:cf:f4:ed:
65:48:87:bc:a0:48:6f:e2:10:61:3b:b1:51:c7:6c:f2:cb:b6:
16:0a:86:2c:23:9f:4c:16:76:c2:3a:36:1e:31:48:c5:a6:89:
6e:fd:66:2f:95:cb:01:84:03:4c:fb:dc:d0:a3:74:93:6a:30:
77:51:5e:bc:1c:4c:21:8f:f7:6c:0c:d2:a1:55:97:71:8e:67:
2b:de:5b:b0:53:4f:c4:3f:ef:62:01:e5:3a:31:b7:50:18:5f:
ed:3d:60:4b:29:17:5b:64:b9:0a:48:43:e5:ec:2f:96:13:0d:
2c:8c:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:57:04 2026 by rpki-client