Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4MCAetrKgVOgziX3eUQM1qCMcoA.roa
File: 4MCAetrKgVOgziX3eUQM1qCMcoA.roa (raw, json)
Hash identifier: pKEGkBvTYQ30ve6Dr1u+ev6XKEMVVvkV1Qtxo8jX2fg=
Subject key identifier: E0:C0:80:7A:DA:CA:81:53:A0:CE:25:F7:79:44:0C:D6:A0:8C:72:80
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F2368661A528AA769660070C705606B8E
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4MCAetrKgVOgziX3eUQM1qCMcoA.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197165
IP address blocks: 189.74.106.0/24 maxlen: 24
189.74.114.0/24 maxlen: 24
189.74.115.0/24 maxlen: 24
189.74.116.0/24 maxlen: 24
189.74.117.0/24 maxlen: 24
189.74.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:1a:52:8a:a7:69:66:00:70:c7:05:60:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0c0807adaca8153a0ce25f779440cd6a08c7280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:1d:f2:45:41:fe:49:9d:cb:77:d7:8f:56:
2f:f3:c3:c7:74:02:e5:63:72:e4:37:3a:c8:08:fb:
02:77:a6:dc:47:98:3c:3c:18:03:57:6a:eb:12:00:
ee:38:e4:f9:8c:58:e5:22:41:38:9b:50:75:e1:99:
09:c7:77:e6:d7:01:76:eb:56:56:44:2d:98:18:19:
55:3a:bd:eb:b6:8a:c8:03:27:89:9b:be:28:c6:03:
26:03:50:af:9f:cf:7f:24:08:cc:a0:59:09:c1:2c:
bf:08:f4:ae:d9:97:d2:02:bc:c6:6a:4e:e7:62:dd:
a0:a6:9f:cd:ea:cc:cc:04:71:22:a8:a3:da:4f:d3:
52:ef:ac:1e:14:21:cf:b5:40:bf:77:a1:c0:93:f1:
3f:b0:0e:df:c1:52:ec:79:54:b6:01:ff:03:72:49:
31:bf:ae:d2:3c:5d:e0:b2:1b:7c:05:1c:91:8d:eb:
4e:37:3f:4c:0e:58:f5:eb:9d:cd:7b:cf:6a:99:b5:
2e:2a:f6:43:3c:0d:37:34:db:26:0d:68:f1:54:05:
51:0c:a2:a9:20:0f:bf:2e:58:99:a0:fb:f2:e2:ad:
8c:5c:e7:1e:76:07:0b:77:2d:ef:5c:b3:09:f5:d9:
10:d2:13:d4:46:b7:fd:4c:01:7a:5a:43:60:a0:9f:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C0:80:7A:DA:CA:81:53:A0:CE:25:F7:79:44:0C:D6:A0:8C:72:80
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4MCAetrKgVOgziX3eUQM1qCMcoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.106.0/24
189.74.114.0-189.74.118.255
Signature Algorithm: sha256WithRSAEncryption
29:cc:39:9a:07:5b:d0:09:3d:69:20:25:06:00:9c:65:c6:16:
ea:09:e3:38:d3:30:96:b3:c0:c5:f2:92:87:ec:20:ab:02:47:
b7:46:27:cb:3f:18:31:2a:b7:0f:4e:0a:59:80:09:b6:03:18:
05:4e:8f:28:5f:95:b9:b2:bb:ad:e7:2d:b7:8a:d0:c6:ec:1a:
3e:3a:34:46:97:9a:3a:3c:d3:2b:a3:8b:b7:67:88:96:cf:59:
fb:a4:d5:69:c4:e9:98:7f:4d:d4:8f:cc:19:a3:42:2a:e0:da:
f0:2c:6f:7b:d5:e3:50:97:29:27:bf:2b:fb:5b:b8:c7:58:a2:
d4:04:b3:f5:f2:40:64:47:8d:9c:d7:09:af:34:74:d5:24:a8:
9f:fa:3a:4a:62:5d:d0:76:dd:af:1a:9e:f6:70:70:4f:f9:7d:
f8:39:e2:6d:43:ac:84:51:99:0f:22:bc:08:d3:47:8a:0f:12:
30:56:9b:96:24:b2:ef:d7:0d:8a:ae:24:25:44:f8:05:54:d8:
8d:8a:22:68:88:e5:7e:f3:db:e1:89:8a:90:f1:a4:ff:91:1a:
d4:41:51:dd:f7:01:4c:aa:99:ba:2b:bb:52:11:29:72:7f:b5:
33:c4:72:79:04:da:07:f7:33:d4:58:c8:41:c5:a9:36:8d:92:
48:4c:23:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:37 2026 by rpki-client