Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4Zk2LEmfQKZJ7VhdDqBGkdOuJcE.roa
File: 4Zk2LEmfQKZJ7VhdDqBGkdOuJcE.roa (raw, json)
Hash identifier: t0C0RmQGI9nFnN6saGTC0amDif9jZygg/eBGZbC6QmA=
Subject key identifier: E1:99:36:2C:49:9F:40:A6:49:ED:58:5D:0E:A0:46:91:D3:AE:25:C1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019FAF73E0AB53100E8EB505F0B0CB72F419
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4Zk2LEmfQKZJ7VhdDqBGkdOuJcE.roa
Signing time: Wed 29 Jul 2026 19:57:14 +0000
ROA not before: Wed 29 Jul 2026 19:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205983
IP address blocks: 45.15.177.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
194.36.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:73:e0:ab:53:10:0e:8e:b5:05:f0:b0:cb:72:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 29 19:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e199362c499f40a649ed585d0ea04691d3ae25c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:c1:38:5a:8e:4c:fd:77:fd:9a:f0:73:22:
07:a9:20:90:4f:cb:56:3e:00:6f:6d:5e:74:04:19:
96:f0:f3:80:aa:e8:f2:cd:20:3d:b3:15:09:a1:ca:
24:46:86:62:d2:a7:eb:a5:c0:e1:8c:a3:70:46:7c:
74:4c:e2:59:86:96:fd:32:5d:c6:ec:ee:24:a9:17:
d8:f2:b6:b1:4d:35:31:23:b1:97:df:cb:43:44:d5:
5b:6e:a8:33:6a:e9:f4:4d:4c:20:99:86:43:53:de:
01:be:d0:9f:c6:a3:fe:e3:36:a9:11:fd:f2:ed:c1:
2d:f1:34:29:b9:2a:4e:5a:25:5e:fd:bc:8f:85:94:
56:72:03:a0:3c:64:9a:1c:e5:e4:ce:06:83:84:c4:
cc:0e:00:26:81:8c:96:e7:61:94:3a:a0:ad:d4:9b:
53:ff:da:19:ea:b3:a0:e5:61:8e:eb:7d:29:c0:59:
96:14:56:47:d6:e9:61:b3:fe:77:ec:9a:7c:40:ff:
49:a5:b0:1d:96:e7:9e:d9:f9:1e:f8:5b:e6:82:b1:
c2:85:aa:84:27:22:c6:06:68:de:00:70:82:49:63:
46:52:f5:78:0c:fc:55:85:ae:9e:f8:c3:aa:fe:15:
f2:a7:ae:c2:6a:48:b9:54:b0:f6:93:f3:52:f6:29:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:36:2C:49:9F:40:A6:49:ED:58:5D:0E:A0:46:91:D3:AE:25:C1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4Zk2LEmfQKZJ7VhdDqBGkdOuJcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.177.0/24
45.89.99.0/24
45.92.195.0/24
194.36.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:15:04:9f:5f:b5:7b:58:c6:aa:1b:d5:49:e9:c9:33:b2:f9:
d7:41:35:bd:7a:5c:41:79:5a:00:ef:1c:61:49:66:06:1a:c9:
03:e7:e5:7e:a7:4d:0c:f6:a8:e9:a7:cb:b1:af:d0:4d:cd:ba:
34:c0:21:16:1c:18:9e:b2:e1:26:bf:9b:6e:5a:16:ae:14:56:
e0:74:55:69:5f:0c:fb:3b:2c:66:bb:f6:3e:76:8d:71:2f:35:
00:cb:e3:f4:53:53:2c:d8:c2:f5:1d:6d:39:54:f9:63:02:84:
1c:3b:33:57:07:0e:e7:38:ad:1b:ad:d6:2c:de:87:84:1f:55:
e8:a6:73:55:bb:bb:8d:5c:35:a1:e0:1b:16:f2:f7:c6:36:0b:
ca:5b:d2:6c:43:89:fe:16:71:0a:11:2e:ab:81:eb:2d:78:a2:
b7:a2:5c:70:94:ac:d2:bf:b4:2c:c9:b8:18:bd:00:fd:cb:69:
10:3c:60:26:b0:f1:47:f6:10:0b:97:b2:2d:21:0b:43:ab:30:
9c:1a:9b:c7:30:db:ab:89:3e:5f:7c:75:98:0f:fd:55:63:07:
69:5c:2c:7e:da:48:7f:d3:4a:6c:47:df:cc:6e:7a:2f:52:0a:
52:ff:6e:89:ac:eb:d5:c7:e4:6d:c0:9f:8b:b2:03:c5:0d:af:
95:18:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 14:26:17 2026 by rpki-client