Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4m4JCHoeWMtT1QgVkkbkfwfwfig.roa
File: 4m4JCHoeWMtT1QgVkkbkfwfwfig.roa (raw, json)
Hash identifier: tmGewXSKRrfEM1zB0kvba/l+5JR0pFDuYx+Ct5hvRIw=
Subject key identifier: E2:6E:09:08:7A:1E:58:CB:53:D5:08:15:92:46:E4:7F:07:F0:7E:28
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F6C98973863A58ADB246832D9D4A923C2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4m4JCHoeWMtT1QgVkkbkfwfwfig.roa
Signing time: Thu 16 Jul 2026 20:22:47 +0000
ROA not before: Thu 16 Jul 2026 20:22:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:98:97:38:63:a5:8a:db:24:68:32:d9:d4:a9:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 16 20:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e26e09087a1e58cb53d508159246e47f07f07e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:34:9a:05:6a:6b:fc:fd:6a:0a:6a:b5:5b:
e3:8e:05:9c:ba:7a:76:75:d9:74:08:60:5e:69:73:
46:39:4d:46:41:8f:21:1c:31:ae:e3:7a:f2:42:ef:
04:b5:ab:95:62:0a:91:a3:b3:dd:11:a7:91:f1:ec:
ac:27:b3:ea:38:e2:f9:bb:7e:f9:25:26:be:56:d6:
72:a9:7b:51:9b:59:af:40:3c:0f:f5:af:57:c9:7e:
ae:57:8b:44:fa:32:20:4d:96:40:31:02:df:cc:66:
c2:31:b9:27:53:c8:df:41:c6:9b:cd:3b:77:6a:c7:
86:51:44:db:00:ee:8e:e2:a3:04:67:f0:9c:f4:48:
53:bd:26:55:82:80:c4:c4:56:ea:0b:9d:51:d0:eb:
46:43:82:92:52:6a:a6:ee:ee:ad:8d:a0:f3:cf:4b:
13:07:cc:22:a4:a9:c8:c5:26:2a:01:74:17:a0:3f:
33:f2:3b:e5:f5:50:28:4b:42:3f:92:6a:cb:bd:65:
5f:7f:5f:64:2d:99:e8:eb:3a:fe:6c:73:bd:ac:10:
bb:33:ac:6e:21:58:6b:35:d9:65:dd:be:f1:a7:a4:
28:78:2f:34:fc:ae:47:fd:e3:d0:00:55:53:3a:6e:
40:80:7f:46:33:18:ea:0e:e1:5b:be:e3:03:90:8b:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:09:08:7A:1E:58:CB:53:D5:08:15:92:46:E4:7F:07:F0:7E:28
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4m4JCHoeWMtT1QgVkkbkfwfwfig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:03:01:ec:1d:48:08:77:ff:fb:6c:81:6e:99:06:6d:e9:28:
5e:8b:21:92:50:7c:fd:cf:31:30:e5:cd:8b:6d:d1:c6:65:fa:
c5:f6:8a:d8:b2:7a:6d:a0:12:c8:87:50:85:1f:09:26:47:da:
d2:85:de:46:a4:4c:6c:8f:15:ca:76:5f:20:fc:b4:0b:8e:21:
c0:e8:43:bd:e2:f2:5a:04:82:1f:9c:db:fa:2a:f2:46:5f:66:
eb:fd:4d:6d:71:22:88:df:87:fb:ac:45:b3:8e:bd:79:0f:86:
ec:a6:c4:d5:48:64:c7:3e:23:80:b3:02:c8:25:95:c7:72:31:
cb:6c:47:03:95:91:4d:40:cb:db:f8:03:cf:db:00:8c:45:48:
36:a6:ad:9f:4f:8e:2a:70:99:8e:d6:78:01:c3:84:ad:ab:c7:
5f:1a:1c:88:c8:4e:8e:c7:96:fb:12:ad:da:3f:d0:e5:9a:ea:
32:8b:b2:b5:e2:44:6b:ac:10:ea:91:f3:64:7c:a6:b2:0b:d1:
ba:72:b0:f0:6b:70:2a:84:21:3a:cf:54:09:d7:10:e5:68:16:
4f:de:2c:61:56:00:85:53:57:06:4e:26:7c:61:0e:c7:4d:81:
de:b2:97:97:58:c5:99:5a:5b:98:92:67:f0:5c:9d:e2:1f:5d:
3c:a7:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:52 2026 by rpki-client