Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4vFWTacP1XjQ3vN6OomKDOpVg3c.roa
File: 4vFWTacP1XjQ3vN6OomKDOpVg3c.roa (raw, json)
Hash identifier: S3vu0CZRawvYi/e+89yMAd3/fad52cOyXirUhf8xBh4=
Subject key identifier: E2:F1:56:4D:A7:0F:D5:78:D0:DE:F3:7A:3A:89:8A:0C:EA:55:83:77
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019FF5C672E33ACBEAC07258622B6FCE5430
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4vFWTacP1XjQ3vN6OomKDOpVg3c.roa
Signing time: Wed 12 Aug 2026 11:40:51 +0000
ROA not before: Wed 12 Aug 2026 11:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 187.13.70.0/24 maxlen: 24
189.74.124.0/24 maxlen: 24
191.44.33.0/24 maxlen: 24
201.50.115.0/24 maxlen: 24
201.50.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:c6:72:e3:3a:cb:ea:c0:72:58:62:2b:6f:ce:54:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 12 11:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2f1564da70fd578d0def37a3a898a0cea558377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:96:5f:d2:be:7b:a5:c2:df:6e:11:56:56:
61:f6:cb:c1:9d:de:c4:7d:67:04:ad:a4:eb:24:7c:
1a:02:9e:c8:98:da:19:61:6f:17:1b:cd:1f:57:c3:
5e:ff:5c:21:f3:55:08:8b:bb:2f:60:15:6f:bd:a8:
ed:cc:6a:fc:bd:c7:f7:3d:d0:a9:62:eb:64:0f:1c:
09:d1:2e:7a:27:a5:f1:72:d6:b5:3a:a2:37:47:61:
cc:70:df:0a:a8:05:82:5b:59:3e:44:5c:3d:ed:eb:
9d:02:bb:a4:3e:12:76:c9:12:af:53:f0:16:45:56:
54:54:d2:d1:65:fc:77:69:51:77:61:6f:82:6b:9e:
7b:d0:42:55:73:c6:55:1f:03:3c:c0:89:b3:3b:81:
68:0f:ec:c0:65:79:ff:c2:e5:c6:72:14:17:20:96:
0f:5b:94:47:d1:9c:20:9b:8f:9c:69:16:f9:12:67:
e7:68:d1:e2:18:3c:82:fb:4c:fe:0a:2c:7d:88:01:
3d:51:73:20:f9:32:1c:01:00:cd:63:04:d7:61:e0:
59:a9:55:46:2e:8f:e0:03:d8:21:4c:07:a0:c2:a2:
37:cf:b6:93:09:d6:c9:32:c3:39:9d:2a:4b:2e:0c:
de:f1:f6:fb:24:49:c0:1c:07:1b:e3:83:c2:f4:35:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:56:4D:A7:0F:D5:78:D0:DE:F3:7A:3A:89:8A:0C:EA:55:83:77
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/4vFWTacP1XjQ3vN6OomKDOpVg3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.70.0/24
189.74.124.0/24
191.44.33.0/24
201.50.115.0/24
201.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c6:94:4e:e4:0f:4a:f7:cc:05:c4:ea:08:e1:44:c7:3c:4a:
51:1e:24:62:c6:43:4b:ad:77:d2:45:ed:c0:31:d3:ce:50:e6:
25:ca:a9:6f:44:16:b3:ea:55:9f:8a:f5:d6:e5:7a:43:af:f8:
c7:bb:74:fc:4f:e4:fb:3f:8e:6d:39:8a:d5:64:1c:d6:be:9f:
e6:23:0f:9d:8a:b2:86:ec:f3:42:b5:ad:2b:c1:82:78:97:60:
54:44:27:f7:ec:97:8e:86:90:82:11:d7:a4:d1:df:60:aa:a2:
8f:2e:47:50:61:89:36:3c:69:d8:bf:32:5d:fb:bf:15:f2:15:
dc:93:b5:7e:30:83:0f:bd:2c:05:bb:4c:69:95:bf:93:ea:5c:
7a:ec:2d:b4:e9:db:d7:a4:4c:2c:f8:c3:45:6d:a9:22:e9:73:
5c:61:33:43:1e:c9:82:ad:b3:83:50:53:59:0d:66:67:09:54:
c3:3c:82:bd:15:e7:ad:02:5b:1e:55:b6:9f:e9:da:b5:02:1e:
d1:74:01:40:33:76:26:8e:45:07:b0:c4:ec:5a:dc:8b:70:fc:
31:a6:78:72:19:5f:99:0b:8c:aa:07:7b:20:8f:57:93:a8:f8:
92:9f:24:61:64:6f:19:1f:37:58:f1:23:e5:b8:96:6b:5a:fd:
2b:a8:bf:73
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ/1xnLjOsvqwHJYYitvzlQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwODEyMTE0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmYxNTY0ZGE3MGZkNTc4ZDBkZWYzN2EzYTg5OGEwY2VhNTU4Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7mWX9K+e6XC324RVlZh9svBnd7E
fWcEraTrJHwaAp7ImNoZYW8XG80fV8Ne/1wh81UIi7svYBVvvajtzGr8vcf3PdCp
YutkDxwJ0S56J6Xxcta1OqI3R2HMcN8KqAWCW1k+RFw97eudArukPhJ2yRKvU/AW
RVZUVNLRZfx3aVF3YW+Ca5570EJVc8ZVHwM8wImzO4FoD+zAZXn/wuXGchQXIJYP
W5RH0Zwgm4+caRb5EmfnaNHiGDyC+0z+Cix9iAE9UXMg+TIcAQDNYwTXYeBZqVVG
Lo/gA9ghTAegwqI3z7aTCdbJMsM5nSpLLgze8fb7JEnAHAcb44PC9DXd+wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOLxVk2nD9V40N7zejqJigzqVYN3MB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvNHZGV1RhY1AxWGpRM3ZONk9vbUtET3BWZzNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuw1GAwQA
vUp8AwQAvywhAwQAyTJzAwQAyTJ1MA0GCSqGSIb3DQEBCwUAA4IBAQAExpRO5A9K
98wFxOoI4UTHPEpRHiRixkNLrXfSRe3AMdPOUOYlyqlvRBaz6lWfivXW5XpDr/jH
u3T8T+T7P45tOYrVZBzWvp/mIw+dirKG7PNCta0rwYJ4l2BURCf37JeOhpCCEdek
0d9gqqKPLkdQYYk2PGnYvzJd+78V8hXck7V+MIMPvSwFu0xplb+T6lx67C206dvX
pEws+MNFbaki6XNcYTNDHsmCrbODUFNZDWZnCVTDPIK9FeetAlseVbaf6dq1Ah7R
dAFAM3YmjkUHsMTsWtyLcPwxpnhyGV+ZC4yqB3sgj1eTqPiSnyRhZG8ZHzdY8SPl
uJZrWv0rqL9z
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:27 2026 by rpki-client