Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/4f6TNmLDfwHmEzXslemxRywKRJQ.roa
File: 4f6TNmLDfwHmEzXslemxRywKRJQ.roa (raw, json)
Hash identifier: 3/6yha2Tky/PNq7zE0ksBiNawuvZxQxEI/c3nZdX/Jc=
Subject key identifier: E1:FE:93:36:62:C3:7F:01:E6:13:35:EC:95:E9:B1:47:2C:0A:44:94
Certificate issuer: /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial: 019F2368B79971F5D71FBFDBBCCF92A8A911
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/4f6TNmLDfwHmEzXslemxRywKRJQ.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 263759
IP address blocks: 185.91.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:99:71:f5:d7:1f:bf:db:bc:cf:92:a8:a9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1fe933662c37f01e61335ec95e9b1472c0a4494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5b:b2:51:44:3e:2b:98:7b:00:33:ca:0d:3a:
0b:00:72:88:69:4e:b9:70:6c:d8:d9:f8:9f:7e:85:
e9:e7:1a:0d:be:21:8a:30:1a:c4:92:e4:c4:c8:c2:
24:1d:93:28:f8:fc:4e:f2:8b:e3:4d:b2:6f:d0:8a:
85:48:86:ef:9f:a1:46:fc:1d:c0:5e:7e:df:11:2a:
53:d8:70:7c:fd:dd:25:70:d1:71:e3:ba:0e:ec:d3:
77:cb:ef:1c:48:ad:da:d3:a2:ed:77:08:0e:ec:94:
5f:dd:7c:f5:f5:f6:6b:38:ba:7c:50:60:21:6e:e6:
d1:80:44:73:43:23:db:a6:7b:cf:c1:e1:28:0a:49:
28:8f:1d:43:98:49:fc:da:70:c0:b1:d5:a3:48:53:
2a:3e:23:f6:1c:5b:90:54:cb:ca:ef:e5:5f:e7:13:
8f:52:9a:01:47:69:09:d6:29:c4:f7:1a:5c:91:c3:
1f:51:26:46:2c:4f:ac:5a:56:5a:05:c6:29:e9:a1:
2d:cb:3e:11:f6:be:3d:0d:0c:b0:73:d3:7d:88:89:
da:78:2e:da:ad:f4:2d:71:69:eb:bb:c6:8b:35:d4:
67:ee:16:ac:0a:1e:63:f5:6f:83:09:27:49:c3:16:
a6:3e:3f:0c:95:b3:da:47:87:00:01:ce:ad:bf:c3:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:93:36:62:C3:7F:01:E6:13:35:EC:95:E9:B1:47:2C:0A:44:94
X509v3 Authority Key Identifier:
keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/4f6TNmLDfwHmEzXslemxRywKRJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.206.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e1:e3:c7:87:be:9e:d7:79:ff:f9:10:f9:5b:7a:4f:0c:97:
25:b3:aa:d3:35:54:42:88:4b:30:ec:b9:23:0e:f1:45:ec:bb:
74:c6:73:22:71:ad:f3:f3:fc:07:0c:be:ff:b5:a6:4f:e9:3f:
eb:7a:96:5f:59:82:0a:d9:5e:0b:00:af:b9:86:ea:57:a0:9a:
b0:1a:cb:cb:a5:65:a0:86:d3:3b:cf:04:a0:b1:1a:2d:0c:7e:
f4:71:ab:f6:85:2f:c9:b0:0f:05:59:05:fb:48:c3:5c:95:d4:
0d:a6:13:cc:e9:ab:15:eb:54:49:fa:99:ae:8d:ab:7c:a2:41:
a7:7e:bd:d4:e6:0b:b5:76:da:f4:33:ce:3c:49:cb:0c:c2:84:
4d:cd:aa:53:de:d1:da:3f:03:00:68:a0:93:c5:2e:57:4d:0b:
79:ee:5e:4f:04:44:d4:af:c7:b4:e6:93:e6:e4:ab:0e:46:35:
aa:eb:32:99:a5:eb:d5:c9:58:02:55:eb:05:67:58:ec:d3:fd:
fa:15:23:ec:c0:dd:e8:e2:0c:68:0d:46:94:46:3f:18:93:5d:
ff:f5:cc:d3:93:4a:98:89:ca:4f:73:fb:81:07:55:ba:0a:a3:
d1:dc:49:a6:55:17:5b:25:63:5c:33:71:6d:b1:65:d9:95:99:
79:0b:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 13:14:54 2026 by rpki-client