Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/4XefERenMAQ3NiRiLifJbaOh1bI.roa
File: 4XefERenMAQ3NiRiLifJbaOh1bI.roa (raw, json)
Hash identifier: EBxY06tfLDyTmDSe657Eshz7yBdzhaon1Ky7Pws1MFE=
Subject key identifier: E1:77:9F:11:17:A7:30:04:37:36:24:62:2E:27:C9:6D:A3:A1:D5:B2
Certificate issuer: /CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
Certificate serial: 019CA3C9F1FA1C2173E9D6FC1829A5FA6545
Authority key identifier: 1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/4XefERenMAQ3NiRiLifJbaOh1bI.roa
Signing time: Sat 28 Feb 2026 10:27:26 +0000
ROA not before: Sat 28 Feb 2026 10:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216398
IP address blocks: 193.25.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 10:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a3:c9:f1:fa:1c:21:73:e9:d6:fc:18:29:a5:fa:65:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
Validity
Not Before: Feb 28 10:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1779f1117a73004373624622e27c96da3a1d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:b8:2b:eb:67:f2:7f:f1:fe:36:92:8f:56:
99:16:55:a4:1e:4a:f5:a9:f0:e5:5c:ee:94:e8:a9:
49:47:8a:ce:74:fd:51:13:8d:56:bf:11:6a:80:ed:
72:a7:db:ff:10:0c:fa:d8:37:85:b7:0e:ce:c2:70:
37:fe:8f:a8:b2:62:e6:c7:30:98:4b:06:c7:37:8f:
dd:53:f2:22:25:84:41:ad:90:81:2c:ac:f2:89:1c:
3d:d4:32:0a:49:a7:c9:0a:a4:e2:79:f5:0b:73:a2:
d6:03:c3:3b:7a:54:de:54:ab:b9:d3:b6:ac:ce:d8:
90:a6:ab:98:55:f2:ab:78:66:0e:4f:5e:c9:b5:66:
d5:b0:d5:af:0a:9c:a4:3d:bc:16:3a:42:3c:79:9a:
e1:b7:5b:0e:c8:36:13:d5:7a:40:21:58:47:7e:24:
59:d4:9a:23:91:7f:c1:06:9f:ba:85:4b:8e:a6:fd:
45:53:b2:bc:dc:ca:cb:a7:5b:26:e1:66:9a:59:72:
82:48:61:bb:fa:49:4e:bd:0f:41:16:c3:c8:d1:f5:
f1:09:90:40:9d:c5:12:d5:0a:e5:40:53:d7:11:50:
38:35:24:de:ef:d9:d2:d9:8e:3d:90:1c:2c:f2:6a:
e9:2c:e6:05:d0:50:38:c5:16:ff:58:83:35:25:28:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:9F:11:17:A7:30:04:37:36:24:62:2E:27:C9:6D:A3:A1:D5:B2
X509v3 Authority Key Identifier:
keyid:1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/4XefERenMAQ3NiRiLifJbaOh1bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8d:1a:0b:41:ab:c8:68:af:42:d2:b1:8f:bc:fc:20:98:9a:
9f:7b:b9:88:bf:61:20:9a:b4:48:dd:d1:c4:80:7b:71:40:d3:
d3:97:a3:c2:e4:29:0c:8f:86:2c:71:9e:ed:a2:e6:93:90:e1:
35:67:ee:f2:40:5e:46:64:ae:c4:33:da:46:66:9b:18:f9:65:
7a:6a:8f:73:54:1e:11:ee:b5:20:46:ff:c1:58:e0:01:79:f8:
eb:04:dc:a3:ac:ce:2c:5a:b4:3f:9d:30:1d:4a:ca:a7:87:4c:
50:58:31:9c:72:8a:53:68:35:0a:3b:33:e7:53:dd:29:e0:d3:
48:7c:a6:82:d2:79:1e:3e:98:b4:af:dd:02:2a:d6:5f:21:ae:
43:69:50:44:b2:6e:04:9e:eb:eb:ae:b9:c9:95:18:3a:3b:82:
ca:4a:3d:45:14:f6:a4:f1:01:10:22:fb:7d:ca:4d:b6:b9:b4:
d8:8d:9e:27:99:19:27:f7:88:de:a1:95:e4:b3:5c:d8:2f:75:
d3:8a:50:5a:c3:e4:8d:3d:5a:75:5e:9d:e6:40:57:5f:6d:ce:
c5:f6:7b:98:fe:fd:48:8d:56:fa:19:be:83:07:5f:92:30:3a:
70:b5:28:2e:99:1f:ea:5c:af:91:7b:59:66:44:3c:31:9c:79:
45:05:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 19:47:48 2026 by rpki-client