Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa
File: 4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa (raw, json)
Hash identifier: 0Knyq2lSkHBl5OxmwpQgrMQirBzFuxXt+/bCQAQTrMg=
Subject key identifier: E2:46:95:6C:54:2F:AC:93:80:84:F4:12:95:26:98:3E:2D:E1:18:A7
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FAE39D902C2F7497555EC197427C20BE2
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa
Signing time: Wed 29 Jul 2026 14:14:14 +0000
ROA not before: Wed 29 Jul 2026 14:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197458
IP address blocks: 81.16.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:39:d9:02:c2:f7:49:75:55:ec:19:74:27:c2:0b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jul 29 14:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e246956c542fac938084f4129526983e2de118a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:26:8a:2c:8d:7f:5e:6e:b8:12:d5:47:ee:
38:18:2d:d5:84:2d:ac:56:19:37:da:48:a6:d2:22:
aa:c9:1c:bd:fc:9f:00:da:0e:75:e8:b5:b5:12:15:
c9:e1:a6:03:89:21:da:9f:1f:e6:7a:73:8b:37:0b:
7b:8e:6f:15:31:76:22:a4:a7:b9:1f:24:1a:7d:35:
12:4c:fb:a7:4f:62:e7:ea:b8:a6:9d:43:ab:d1:4b:
3a:10:5b:77:cf:fd:c4:53:89:ad:a2:23:50:dc:31:
5c:60:27:33:41:b8:c5:d3:91:d0:aa:9c:26:f7:60:
89:0c:63:aa:f6:d8:55:57:72:d9:f2:71:2a:a0:4a:
b1:23:c8:c7:1d:8d:c0:ab:37:9c:c6:fe:01:53:93:
ee:b3:f7:47:55:19:47:82:39:70:8f:86:6a:fa:ae:
9d:f2:ed:34:e0:91:a4:d2:0d:8e:58:05:6f:b7:e3:
c6:a7:b4:75:c6:c3:08:24:6e:2a:6f:59:18:df:6e:
71:63:66:14:4f:ea:82:c7:b3:6f:60:1e:b8:78:84:
9f:eb:b7:94:e0:0c:87:fc:a4:56:4b:93:15:b9:7b:
0a:29:63:15:62:2e:d7:0f:0a:09:48:c3:e3:ae:f7:
14:2e:32:4a:e7:8b:dc:0c:94:25:09:43:7b:f3:b8:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:95:6C:54:2F:AC:93:80:84:F4:12:95:26:98:3E:2D:E1:18:A7
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.154.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3f:c4:7b:57:bd:87:7d:8c:12:22:6b:ac:5b:b5:a2:29:ea:
4a:43:cb:3b:c0:16:ae:43:0c:c1:e7:de:e5:5d:ae:61:2f:10:
4e:0b:b8:0d:1d:9e:68:cb:b8:82:34:f0:ed:7b:50:c4:ae:ba:
ee:94:92:1b:f1:3c:07:62:82:3c:2a:10:10:e8:c9:99:9c:ee:
03:2f:12:82:ad:44:37:16:df:5b:8e:cf:96:4d:5e:d4:de:89:
91:69:d4:4e:58:23:24:f5:f2:00:4f:e7:fe:93:d3:83:ce:18:
71:a4:8a:9d:8c:ff:c6:f6:cc:98:69:36:40:73:4c:5e:7b:71:
74:b0:b2:36:d5:a4:3e:c7:40:5a:c0:34:05:fc:33:38:e7:14:
60:60:4f:5c:f9:5c:45:f4:52:be:41:ac:f7:b8:52:e2:4e:49:
f7:87:eb:8e:29:a8:ce:da:5b:da:04:3f:79:16:d1:9f:cf:3b:
80:59:b5:c2:87:7e:a8:cd:04:d6:25:7f:2a:46:20:3f:61:5b:
04:e0:c9:b3:4e:3b:2b:69:8a:5a:26:8b:15:d1:a0:d6:dd:58:
8c:fb:1b:58:72:20:34:76:86:92:e1:98:27:8e:af:66:c1:25:
35:80:fc:99:7b:90:8a:8c:ed:ea:d5:56:08:52:0a:3a:33:1b:
0b:f0:51:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+uOdkCwvdJdVXsGXQnwgviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjYwNzI5MTQxNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ2OTU2YzU0MmZhYzkzODA4NGY0MTI5NTI2OTgzZTJkZTExOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZMmiiyNf15uuBLVR+44GC3VhC2s
Vhk32kim0iKqyRy9/J8A2g516LW1EhXJ4aYDiSHanx/menOLNwt7jm8VMXYipKe5
HyQafTUSTPunT2Ln6rimnUOr0Us6EFt3z/3EU4mtoiNQ3DFcYCczQbjF05HQqpwm
92CJDGOq9thVV3LZ8nEqoEqxI8jHHY3Aqzecxv4BU5Pus/dHVRlHgjlwj4Zq+q6d
8u004JGk0g2OWAVvt+PGp7R1xsMIJG4qb1kY325xY2YUT+qCx7NvYB64eISf67eU
4AyH/KRWS5MVuXsKKWMVYi7XDwoJSMPjrvcULjJK54vcDJQlCUN787iehQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJGlWxUL6yTgIT0EpUmmD4t4RinMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvNGthVmJGUXZySk9BaFBRU2xTYVlQaTNoR0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURCaMA0G
CSqGSIb3DQEBCwUAA4IBAQAmP8R7V72HfYwSImusW7WiKepKQ8s7wBauQwzB597l
Xa5hLxBOC7gNHZ5oy7iCNPDte1DErrrulJIb8TwHYoI8KhAQ6MmZnO4DLxKCrUQ3
Ft9bjs+WTV7U3omRadROWCMk9fIAT+f+k9ODzhhxpIqdjP/G9syYaTZAc0xee3F0
sLI21aQ+x0BawDQF/DM45xRgYE9c+VxF9FK+Qaz3uFLiTkn3h+uOKajO2lvaBD95
FtGfzzuAWbXCh36ozQTWJX8qRiA/YVsE4MmzTjsraYpaJosV0aDW3ViM+xtYciA0
doaS4Zgnjq9mwSU1gPyZe5CKjO3q1VYIUgo6MxsL8FE9
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:50 2026 by rpki-client