Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4jGIiATZq4TkLAlP3GqnlZCHdbQ.roa
File: 4jGIiATZq4TkLAlP3GqnlZCHdbQ.roa (raw, json)
Hash identifier: XbK/BSBEauZMTDxFLkVPjSP5YMI0C8C5rzZsnr/reO4=
Subject key identifier: E2:31:88:88:04:D9:AB:84:E4:2C:09:4F:DC:6A:A7:95:90:87:75:B4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A05C87B8AE12B251DC3A323A35312DABD1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4jGIiATZq4TkLAlP3GqnlZCHdbQ.roa
Signing time: Tue 01 Sep 2026 10:33:13 +0000
ROA not before: Tue 01 Sep 2026 10:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 84.245.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:87:b8:ae:12:b2:51:dc:3a:32:3a:35:31:2d:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Sep 1 10:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e231888804d9ab84e42c094fdc6aa795908775b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:2d:39:f7:b0:7d:2b:ce:9e:fc:e2:e0:73:
a6:06:99:80:5c:e3:10:42:db:18:c3:87:61:55:2b:
af:aa:8e:09:46:41:e2:05:7a:d7:3d:a9:f7:f7:1b:
31:f5:0a:8d:b8:79:a8:04:46:b5:5d:28:7a:f8:5f:
9f:34:70:d6:f8:3f:6c:fe:eb:77:fb:48:73:8a:2b:
5c:8e:12:8c:27:e0:83:74:c1:6d:66:8b:69:7a:7b:
1a:5e:b1:2f:f3:d5:f6:ee:cc:8e:62:d6:96:e4:de:
e4:a9:09:36:36:67:b6:2a:c7:b3:3b:f9:70:e1:3b:
52:85:a7:ea:1e:18:79:ca:6d:b5:52:9e:06:f3:87:
d7:7f:9e:db:c1:57:88:e5:1a:1d:6f:0a:cc:7c:f7:
c4:09:16:81:53:b2:87:8c:40:cb:a0:d4:09:e8:26:
99:04:b6:e6:b0:42:2d:fa:58:98:e6:a7:d9:18:26:
54:22:00:22:3a:2d:d2:0e:75:36:75:e3:38:02:90:
b3:64:d5:b4:d7:ca:7a:c5:e8:12:23:11:50:c9:de:
86:73:51:23:96:04:38:da:0d:d3:8a:a2:81:91:48:
35:bb:3c:be:4c:d2:65:b4:9b:fa:80:68:8d:7a:ee:
d6:b5:7f:4e:30:73:28:42:5e:5d:ff:f5:d2:9d:78:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:88:88:04:D9:AB:84:E4:2C:09:4F:DC:6A:A7:95:90:87:75:B4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/4jGIiATZq4TkLAlP3GqnlZCHdbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:84:ac:a2:47:0e:50:15:a4:57:9e:00:e1:51:80:62:e7:cc:
b1:17:e6:47:ec:00:ab:d7:7d:05:44:a9:75:3c:60:1a:06:93:
25:b8:d8:04:45:58:04:0d:f0:c1:43:82:6b:d1:71:3c:ae:f5:
be:f5:2b:32:54:28:d6:97:d5:bf:73:cf:e1:2e:fe:ff:35:c2:
41:7a:3d:22:19:3f:9c:4c:b7:56:44:9c:a7:e8:f4:f7:d8:3f:
d8:b3:77:8b:89:62:1f:5e:dc:34:cf:ef:a8:d9:b9:d3:2e:6f:
1f:02:84:22:85:5b:9e:8a:cb:dc:1f:2b:af:2a:0e:cb:a0:f9:
51:89:1a:b1:46:61:dc:89:7b:02:45:54:93:9d:6c:57:59:2e:
ff:6c:45:b9:ac:6a:41:83:ab:68:84:31:3e:b8:e2:91:95:f5:
d6:18:f2:83:c4:63:e9:b1:74:71:58:61:39:50:85:e9:b5:0c:
d1:19:f3:3f:ba:14:a2:ac:78:f5:35:b7:b2:77:df:68:b0:9a:
f6:c6:bf:9a:69:a1:92:66:a0:07:03:51:a4:7b:06:c1:83:cb:
cd:f8:08:6c:9d:8f:8a:56:6e:a8:63:24:53:9c:21:20:9c:ca:
3e:02:9f:ca:a5:64:38:c7:9e:c7:9e:4f:08:9f:12:77:9c:56:
88:76:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:39 2026 by rpki-client