Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4SQgpK8BNeEWZfyYsAVSi9v3OtY.roa
File: 4SQgpK8BNeEWZfyYsAVSi9v3OtY.roa (raw, json)
Hash identifier: OjohDknvXgNvEpw0X132+NPUbbI+DpOi1V9m5ErFpAs=
Subject key identifier: E1:24:20:A4:AF:01:35:E1:16:65:FC:98:B0:05:52:8B:DB:F7:3A:D6
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019EAB9E311FF6BFF703FC78D077BE742B65
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4SQgpK8BNeEWZfyYsAVSi9v3OtY.roa
Signing time: Tue 09 Jun 2026 09:02:11 +0000
ROA not before: Tue 09 Jun 2026 09:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 84.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:9e:31:1f:f6:bf:f7:03:fc:78:d0:77:be:74:2b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 9 09:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e12420a4af0135e11665fc98b005528bdbf73ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2e:17:65:9e:c7:4e:d9:ee:ee:06:3f:72:f3:
0c:2f:5a:1f:6f:1f:d9:7b:de:be:67:7c:f5:e7:92:
4f:43:ba:cb:e9:57:4e:c7:e3:d4:62:2d:ba:58:15:
8b:81:6a:6e:23:cc:54:f0:9e:f2:72:35:8e:d6:06:
5a:18:2c:a8:61:77:76:f6:93:3d:76:8f:b0:02:5f:
0b:f7:25:fd:1b:46:29:ba:2e:6a:e4:7b:e2:17:c6:
6e:47:c4:aa:51:2a:55:8d:9b:a7:83:05:b1:85:5f:
e3:91:15:ba:00:71:e8:46:7f:2b:62:95:a1:77:ec:
dd:f0:41:75:0e:7b:4c:ec:c4:a1:97:af:c0:a9:19:
8b:8e:ea:7e:33:01:cd:16:bc:c8:40:85:ce:d9:e8:
53:af:61:ef:40:16:4d:6b:7d:0c:e2:cd:96:9a:cd:
1e:58:68:d2:a7:0e:1b:d6:b5:ca:1f:02:38:e9:72:
26:b1:78:c5:f7:4b:3d:a9:ea:7d:a4:d1:9f:01:3a:
f4:44:e4:9a:89:50:7c:06:e2:c4:4b:65:ed:8d:fa:
86:7b:47:56:c1:f4:d9:f4:cb:93:5c:6c:9b:c2:19:
78:a7:ae:cb:91:8f:02:d0:5e:4a:2b:f8:18:4b:33:
c4:b4:e3:06:64:78:e4:65:c5:ac:97:88:ef:60:b7:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:20:A4:AF:01:35:E1:16:65:FC:98:B0:05:52:8B:DB:F7:3A:D6
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/4SQgpK8BNeEWZfyYsAVSi9v3OtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a5:f9:f6:ab:fa:81:73:d0:83:6b:90:92:92:ec:07:e4:74:
c5:a8:54:79:e5:25:70:59:82:d6:78:f7:85:f9:f1:d8:85:7a:
4f:bd:a4:1a:ca:2d:2d:2e:97:25:cf:0b:42:b3:c7:4a:0e:93:
29:8d:27:9f:87:6e:bb:18:f4:34:d8:8a:de:7d:52:6f:af:8d:
40:89:d0:56:56:b6:af:a0:ab:1a:61:33:43:e3:6e:f9:c5:0e:
ba:44:ca:93:87:5b:6f:9e:06:4a:af:22:72:78:aa:0e:b7:bc:
bf:23:b1:c1:bf:ce:e7:8b:58:5d:b0:d1:c8:55:73:4f:94:9f:
2c:aa:99:b6:dd:fd:b6:ae:74:8c:b4:c0:fc:d1:c3:38:52:08:
76:55:b2:a1:17:4c:e5:13:dc:20:c2:76:1f:53:d1:96:d7:c2:
b4:24:df:18:90:e3:4e:aa:60:e7:6a:0c:df:0a:1f:33:53:f0:
7c:3b:30:ae:b2:f5:72:77:88:15:5a:00:8e:e0:be:a7:7f:cc:
cf:1c:dd:00:70:17:2e:9a:0d:1a:31:0a:d5:4d:e4:8e:62:3e:
9a:77:92:59:1f:a6:f7:43:90:30:5c:79:a2:da:87:fc:8b:4e:
a6:6e:5e:3a:6b:c1:95:68:7a:d5:83:6f:46:48:4c:47:77:44:
50:bf:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:50:55 2026 by rpki-client