Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4yFqlG-hzAomQAkVAm7winCdo4U.roa
File: 4yFqlG-hzAomQAkVAm7winCdo4U.roa (raw, json)
Hash identifier: BGXaci6/lo9m+fCHAX+yAgkZVOsUzDhekvGhWqzjv+8=
Subject key identifier: E3:21:6A:94:6F:A1:CC:0A:26:40:09:15:02:6E:F0:8A:70:9D:A3:85
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019FD1B0DB65C7CB4A2F60E168B10344B9D4
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4yFqlG-hzAomQAkVAm7winCdo4U.roa
Signing time: Wed 05 Aug 2026 11:30:56 +0000
ROA not before: Wed 05 Aug 2026 11:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 85.208.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:b0:db:65:c7:cb:4a:2f:60:e1:68:b1:03:44:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 5 11:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3216a946fa1cc0a26400915026ef08a709da385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:e2:39:82:61:27:83:ef:55:6d:23:4c:17:
d6:8c:9b:ea:f1:7f:66:39:c1:61:ea:18:8f:36:62:
1b:04:9e:1e:99:f3:e0:2a:35:9b:57:38:63:24:3f:
17:72:d2:fc:56:7a:0a:fc:84:c4:50:c4:80:48:c3:
63:23:ff:fa:a7:38:6e:cc:03:7a:36:1b:16:d0:ae:
a2:4e:63:6e:ea:9f:b5:57:bc:4d:8a:d3:03:50:aa:
5c:76:b1:11:f5:8a:03:9f:48:34:ad:2b:e8:d9:02:
7b:bd:8e:ff:81:28:a7:13:08:21:1f:ac:a3:52:31:
34:a3:84:53:4b:fd:f9:ca:20:dc:9e:0b:a0:6b:04:
b5:2b:f6:ce:c3:6d:5a:ac:39:33:46:e5:9a:d9:90:
c9:48:3e:8f:46:1a:f2:42:89:49:4c:da:70:e8:b4:
4e:db:2e:7e:54:0a:60:b4:05:a7:5d:9a:2f:fa:1e:
49:0a:3c:60:3a:c8:ad:79:fa:3c:da:6a:9b:99:d6:
b6:81:09:f1:d4:65:7c:ee:80:7f:f0:84:c6:e4:c9:
d0:2e:7d:69:6a:b6:48:30:0e:75:10:96:22:0c:16:
84:83:53:da:cc:2d:25:54:7a:ba:ee:2b:c4:b8:74:
3a:c4:07:1c:52:24:b1:ac:a7:55:9d:0d:86:03:f1:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:6A:94:6F:A1:CC:0A:26:40:09:15:02:6E:F0:8A:70:9D:A3:85
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4yFqlG-hzAomQAkVAm7winCdo4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.113.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4c:98:3d:38:90:9e:82:27:ca:ad:18:bd:8e:41:84:17:eb:
c8:09:e7:2b:32:1c:fe:6b:16:e5:15:33:a8:52:c6:2e:39:58:
99:28:fc:74:0a:a3:6a:07:62:d0:5a:e7:5a:80:94:9a:0a:ed:
a5:c7:29:95:63:36:9b:70:82:eb:c5:e7:20:bc:69:52:7f:a0:
5a:b8:a1:4d:70:b8:12:ca:34:b1:73:cc:e1:70:97:0c:04:45:
26:5f:01:14:18:70:e8:c6:78:60:68:2a:99:8e:07:48:1e:16:
f2:e5:87:3e:c5:ac:fa:34:5d:a5:b6:1d:4e:ef:88:7a:4c:da:
13:ce:cc:2a:cf:39:34:22:48:c0:ec:94:b0:33:0d:d1:19:f8:
fa:8b:a1:60:4b:b4:32:68:5f:c9:a9:b9:d9:e4:f3:0a:b2:76:
a3:74:d7:5e:e6:63:90:c7:33:fd:30:8c:11:9a:22:d6:f5:93:
08:de:90:3e:25:0b:b7:90:92:a4:75:7a:e8:61:de:ff:96:bf:
11:bc:9f:75:0e:62:90:23:34:84:3a:ef:07:c3:95:08:2f:9a:
42:0a:74:1c:f7:b0:8f:14:d3:a7:94:0c:13:1c:86:4b:aa:8d:
7d:1e:0c:f2:18:7e:6f:9a:49:89:18:c4:05:4b:c7:50:a1:55:
90:68:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:28:54 2026 by rpki-client