Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L4Rod0fs1FSyAKZ1cqJXiNh9Zo4.roa
File: L4Rod0fs1FSyAKZ1cqJXiNh9Zo4.roa (raw, json)
Hash identifier: rkVh2JrKAY+QucoYJ5ShUrVbG8g1OxIgU5J3Y9X+EdQ=
Subject key identifier: 2F:84:68:77:47:EC:D4:54:B2:00:A6:75:72:A2:57:88:D8:7D:66:8E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019FDC221E07623A51019603752D4D9748DA
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L4Rod0fs1FSyAKZ1cqJXiNh9Zo4.roa
Signing time: Fri 07 Aug 2026 12:10:51 +0000
ROA not before: Fri 07 Aug 2026 12:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 89.35.14.0/24 maxlen: 24
93.117.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:22:1e:07:62:3a:51:01:96:03:75:2d:4d:97:48:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 7 12:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f84687747ecd454b200a67572a25788d87d668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:6a:b9:5f:b4:93:de:4c:a1:a1:5b:6b:e4:
5e:be:45:26:eb:b1:3c:f6:a6:e5:f4:b9:32:1d:b8:
f6:c2:b1:2f:12:22:60:85:14:b3:63:bb:2b:51:8d:
80:ce:06:98:02:8d:b0:06:ba:b0:45:f9:2d:ea:8b:
48:64:27:94:07:1c:9a:03:80:fd:12:44:c8:0a:aa:
38:4f:9f:06:55:c8:05:86:b9:4e:de:5b:fe:86:69:
ed:68:40:af:68:56:a9:c5:65:e6:0d:f9:f9:0e:c5:
c4:06:74:9e:1f:3d:18:d8:3b:22:54:f4:b9:fa:35:
16:61:9c:c5:a6:6b:25:f0:63:25:22:0b:09:f1:54:
e6:6f:49:dc:a8:15:20:5d:ec:66:18:3a:59:a9:c4:
80:dc:65:40:fe:1d:77:82:a6:66:0f:39:97:f2:58:
f5:0e:8b:4d:ff:79:7a:aa:a4:cd:b4:ee:9d:c0:d1:
31:1b:5b:6f:34:81:40:d2:7e:76:d1:0b:d0:7b:df:
c0:ef:ad:f0:29:4b:2a:b2:1f:4e:10:a1:2e:a5:03:
e1:11:14:25:e5:22:ce:8e:de:39:5e:04:46:64:98:
c1:ae:73:bd:e0:7f:45:63:b7:5f:a7:fe:8f:58:c3:
01:95:7c:0b:33:6b:7d:3f:07:8f:f4:7e:f0:f5:22:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:68:77:47:EC:D4:54:B2:00:A6:75:72:A2:57:88:D8:7D:66:8E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/L4Rod0fs1FSyAKZ1cqJXiNh9Zo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.14.0/24
93.117.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e1:0e:14:f2:2f:20:5b:fa:d7:04:80:dc:28:43:36:5c:18:
3e:a2:62:c7:55:6e:ff:8c:f2:8e:8c:cd:a0:03:45:5c:37:c8:
1b:49:49:fe:62:95:eb:eb:24:b4:15:4e:b3:d0:35:e7:ca:4b:
77:8f:32:59:e0:e4:2c:11:ca:01:c3:86:06:4c:1c:1f:d8:27:
c2:a5:63:53:63:b2:37:1f:88:da:0d:cb:48:d5:0c:45:a3:94:
6b:42:c4:ba:80:97:8a:4f:4f:d2:ef:95:89:ed:80:37:fe:62:
a6:f8:21:d6:dc:ff:46:9d:6b:a2:5e:cd:db:e6:a7:74:a5:bd:
45:a7:3e:79:ad:21:78:35:67:47:2d:b4:58:c9:e5:66:dd:c8:
2e:26:2e:2e:18:88:60:8a:f5:7c:9d:99:76:f4:c9:dd:80:25:
67:86:35:61:85:ee:01:4a:75:37:dc:27:f2:00:ea:18:78:18:
af:47:76:7a:af:46:bb:2b:13:72:29:ea:bd:dc:2a:d4:16:0d:
44:c9:bb:9e:e8:50:e7:80:ff:25:10:6f:e8:a9:34:d2:f2:c2:
37:d8:7c:b0:73:96:08:d6:81:46:7a:8e:61:ed:7b:20:0c:d3:
74:51:79:1b:eb:59:9f:bf:8e:48:9d:56:f9:12:0b:6f:12:3c:
1b:e9:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:51 2026 by rpki-client