Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa
File: 4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa (raw, json)
Hash identifier: TQ6l7XAp2vjcp5JOmsdpz5IqQGsnKehqiFiPx6igx/8=
Subject key identifier: E2:61:E9:BF:1F:4B:91:8E:AD:E0:8F:AC:30:93:28:69:6C:7C:54:5D
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 019DA5CF520F94D32BF9A741FC6BF0A297E5
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa
Signing time: Sun 19 Apr 2026 12:55:20 +0000
ROA not before: Sun 19 Apr 2026 12:55:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.239.62.0/24 maxlen: 24
185.138.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:cf:52:0f:94:d3:2b:f9:a7:41:fc:6b:f0:a2:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Apr 19 12:55:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e261e9bf1f4b918eade08fac309328696c7c545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:d6:21:b8:f4:10:aa:81:cc:ad:ca:9a:c3:
4c:6f:58:ec:9e:3a:1c:8d:82:b2:2c:af:b4:5e:10:
3e:02:de:d9:92:55:72:a1:55:b9:ee:fa:94:0b:2c:
80:d0:36:ef:a5:5a:22:e7:02:0c:ca:2c:b3:98:15:
c7:35:7a:4a:fc:5a:2a:42:bb:64:1f:2d:83:d6:9d:
e6:6f:12:99:09:a3:d1:80:06:a6:a2:2c:51:a7:ba:
fd:cd:00:38:2d:fe:2d:cd:62:73:7d:25:02:0b:53:
91:23:8b:a8:01:0b:13:0e:79:7e:e4:a0:94:e1:33:
3f:19:f0:d5:cd:70:e2:3a:e2:23:9c:a3:e5:da:44:
7b:6f:09:7c:4e:2c:ba:41:40:9a:9d:e8:2f:6b:f5:
fe:81:13:6d:86:a0:f5:ea:53:e3:5b:46:f1:9e:66:
1f:e8:ca:10:0b:78:96:6b:fd:30:51:49:10:38:0d:
55:91:e7:b3:cd:3e:71:ea:d2:a8:22:a6:0a:88:a8:
1c:55:5c:af:39:c5:e0:e8:06:2c:a3:48:cb:bb:11:
f9:c8:e9:53:7b:fe:c3:b5:60:d6:89:6b:e2:54:82:
3f:4d:27:ba:db:2d:90:2a:e9:7f:66:38:3e:a9:1b:
ca:a1:20:28:dd:b1:70:17:da:6d:8c:a0:b4:86:76:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:E9:BF:1F:4B:91:8E:AD:E0:8F:AC:30:93:28:69:6C:7C:54:5D
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/4mHpvx9LkY6t4I-sMJMoaWx8VF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
87:61:c4:08:70:1c:6c:40:79:26:f2:f4:e6:7f:77:31:da:a4:
7d:d3:20:dc:b7:9f:ff:07:17:8e:c3:34:5a:f7:b4:71:df:10:
ff:1d:6e:9f:61:bd:18:38:e4:b4:e5:6e:44:c2:2f:75:39:18:
44:81:9d:71:97:52:f9:31:8d:12:27:72:6b:27:0c:3a:90:5c:
a3:6d:2b:13:9b:a5:ed:26:d1:ba:70:f5:7f:e2:ed:96:74:ad:
ae:cd:cc:0c:79:ef:4b:8a:b3:8e:b7:60:56:94:f0:5f:6f:ca:
9d:78:fc:55:15:87:1b:32:9a:83:a2:e4:bb:7c:08:80:05:17:
76:83:0e:fd:b0:cb:70:01:ee:4d:e2:a9:22:b7:45:81:82:6f:
87:25:f8:6e:70:63:57:71:d1:74:e7:90:ae:c1:14:b5:e6:9e:
b2:9c:68:a1:d5:69:45:b7:56:8a:b4:1c:d3:0c:5b:ac:47:c2:
f9:dc:57:5a:5f:6d:77:f9:5a:03:62:d2:2f:11:83:ae:82:df:
1c:ad:ae:56:b1:02:95:11:5b:6b:f8:e7:47:93:3b:9c:ea:28:
d3:7c:6b:4a:28:df:4e:0e:15:34:8b:1a:37:d9:c4:b3:17:a4:
07:f3:45:43:e5:45:3e:3d:e0:89:46:44:33:01:a4:5c:9a:cc:
d7:4f:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 15:29:46 2026 by rpki-client