Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4cRYlAnW0hTkfUyXAU6d0jpBFnM.roa
File: 4cRYlAnW0hTkfUyXAU6d0jpBFnM.roa (raw, json)
Hash identifier: yRYaEa+pjaW12w8hwQxTQvT5T34NxQOpTkvApPpOWlI=
Subject key identifier: E1:C4:58:94:09:D6:D2:14:E4:7D:4C:97:01:4E:9D:D2:3A:41:16:73
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019D01F5A9420D3441A421D0459B8A65FD73
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4cRYlAnW0hTkfUyXAU6d0jpBFnM.roa
Signing time: Wed 18 Mar 2026 17:19:29 +0000
ROA not before: Wed 18 Mar 2026 17:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25818
IP address blocks: 87.101.4.0/22 maxlen: 22
217.19.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:f5:a9:42:0d:34:41:a4:21:d0:45:9b:8a:65:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 18 17:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1c4589409d6d214e47d4c97014e9dd23a411673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:55:eb:a9:d2:6f:51:aa:38:5e:6c:17:d7:
26:b0:ed:6b:e9:e2:1c:99:e0:6a:88:9d:b9:af:50:
0f:35:ed:83:bc:f5:a1:9c:47:b3:26:6b:de:0a:af:
b5:6d:d7:fa:b5:73:e0:c2:03:06:9c:e9:2b:ac:cd:
9c:6d:e6:ba:24:45:22:e7:02:15:11:14:b8:0c:5f:
58:da:90:d3:1b:02:e5:de:f8:8e:c6:db:75:8e:8b:
c2:34:b5:5c:20:f1:2c:a8:c7:26:98:4d:d1:20:e0:
84:29:20:24:50:16:5a:33:e2:76:ae:39:9e:e1:0b:
66:44:7a:db:a3:cf:0c:dc:ed:ec:f4:3e:eb:f0:a7:
ea:08:2d:03:d8:2b:1d:d9:b9:c4:f9:82:56:af:28:
b0:f1:2a:02:18:a4:2d:d4:46:aa:65:78:3d:b3:be:
6f:af:e7:0e:74:23:12:c3:0d:3d:c5:55:47:53:1e:
3d:30:b2:2b:6c:8c:da:26:3a:c5:31:69:28:88:38:
94:e1:c7:37:d3:27:a9:a9:67:e2:77:ad:88:49:44:
9c:49:28:53:6c:74:71:50:aa:22:30:ad:c2:34:25:
d2:8d:1b:b5:02:d0:c6:e5:cd:c5:d8:b1:f2:6d:74:
d3:a6:63:c2:fd:c3:86:5b:3d:08:06:46:e8:6b:58:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:58:94:09:D6:D2:14:E4:7D:4C:97:01:4E:9D:D2:3A:41:16:73
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4cRYlAnW0hTkfUyXAU6d0jpBFnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.4.0/22
217.19.16.0/22
Signature Algorithm: sha256WithRSAEncryption
17:9d:bf:82:db:36:6b:6d:91:2b:a8:76:41:9c:cd:7a:2a:fd:
ca:5e:7f:19:e2:10:fc:d0:0c:c2:57:67:01:e0:14:8a:ab:47:
05:1f:79:ee:f5:fc:a1:08:45:32:3c:a4:14:d9:1a:a4:86:82:
ba:21:10:9d:00:2d:a3:09:59:d6:9f:a2:89:22:94:3f:ff:d2:
3c:d3:7a:cd:7d:e6:23:88:08:d2:bc:ed:14:e4:69:8f:83:d2:
2e:8d:8f:c2:aa:6d:ca:d8:fb:8c:e8:af:4e:8b:37:a7:ea:52:
37:a8:9b:51:8a:91:5e:82:16:ee:fe:28:a6:65:6e:a1:e3:b1:
30:70:eb:25:39:ff:95:aa:a0:e7:8b:3f:a2:c2:f1:d1:0e:22:
2c:c7:4c:a1:e4:66:58:c5:ba:6d:71:ea:a7:4b:f9:69:13:d0:
86:e9:88:42:f2:7b:45:23:a7:42:46:7e:e8:79:03:9e:25:02:
bc:e5:08:34:2a:49:4d:8c:28:9e:b4:fa:06:9d:da:c5:e5:79:
79:d7:f1:c7:7b:ea:6d:ee:16:d1:5a:0b:10:04:61:8b:38:ee:
6c:4c:67:47:b5:f2:39:77:21:89:d6:d8:85:77:48:60:11:f0:
db:72:68:b4:24:f9:b3:66:2f:a9:5e:af:51:42:e6:ff:fb:4a:
b1:3d:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 18:54:21 2026 by rpki-client