Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa
File: 4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa (raw, json)
Hash identifier: tVTEQ5EqgDdG6S5oFPG0kZJ9juKgZKh/vp79fStLNpo=
Subject key identifier: E0:B5:D6:E4:5A:ED:67:3A:9C:BE:A2:CF:B2:1E:9D:49:FA:E3:15:ED
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 01A0A3ADC0E448EE4AF50794F64A0C0DFE89
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa
Signing time: Tue 15 Sep 2026 06:07:48 +0000
ROA not before: Tue 15 Sep 2026 06:07:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209809
IP address blocks: 194.26.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:ad:c0:e4:48:ee:4a:f5:07:94:f6:4a:0c:0d:fe:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Sep 15 06:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0b5d6e45aed673a9cbea2cfb21e9d49fae315ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:80:f4:33:3b:e6:5c:a7:32:0b:c3:2b:eb:
e9:71:f1:97:39:2e:2b:58:8b:d3:30:2d:47:10:0a:
48:ae:dd:6c:3b:18:a8:51:d1:1d:f1:7c:35:81:49:
e9:24:ff:bd:62:86:4e:62:ad:4d:dc:a4:b7:60:d0:
78:8a:63:51:a0:1b:39:49:6a:95:92:2d:14:38:26:
0b:0a:ef:35:6d:9e:6a:47:1a:cf:10:75:f6:bb:f3:
94:c1:a1:61:9b:2e:0a:d4:cd:02:70:46:12:bf:3b:
41:c7:17:6a:15:d1:c8:8f:42:e7:9c:3b:eb:9a:1e:
35:a5:56:6f:dd:88:1f:e4:bd:7e:64:7d:be:2e:a0:
78:2a:23:c6:95:67:fb:f9:a5:f8:ed:6a:43:90:c8:
e9:14:ea:78:13:87:d7:23:3a:22:13:c7:f6:17:f1:
2d:99:db:b1:05:d5:4f:1f:41:ea:b6:40:3d:62:a4:
b9:90:c9:38:b0:e4:ff:f7:72:51:cb:9d:57:bd:65:
bc:3a:ba:7c:23:a6:a8:62:0e:d4:0c:4f:f6:ca:a6:
c4:ba:2c:78:aa:65:86:0b:89:4f:f5:b9:a8:5a:cd:
4c:2d:3d:cb:01:2e:4a:97:0b:24:64:13:18:92:2a:
ee:e6:1b:c7:02:5d:39:39:db:41:79:f3:f2:56:23:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:D6:E4:5A:ED:67:3A:9C:BE:A2:CF:B2:1E:9D:49:FA:E3:15:ED
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/4LXW5FrtZzqcvqLPsh6dSfrjFe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.66.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:2a:1d:0a:29:63:29:0a:d1:d6:e2:5f:ff:0c:9b:a3:73:
ee:87:d9:b3:58:6d:14:70:47:df:88:55:46:d9:8f:53:ce:7e:
0c:d0:c0:19:76:55:d7:c1:54:92:47:41:7e:8a:84:91:96:82:
93:ec:c2:7d:9a:22:d2:16:7a:b7:dd:37:73:06:51:62:e6:d2:
86:18:56:9a:35:e2:3b:d7:db:64:c1:9c:71:14:c6:c0:08:34:
c6:01:4e:0c:5f:1e:88:02:ac:78:4e:bb:68:b8:30:24:de:34:
d8:93:b4:c9:b0:5d:46:76:ef:20:12:1a:31:25:98:03:c8:5c:
b2:85:35:6f:a1:ed:34:18:43:26:a1:69:66:ab:55:14:78:54:
ad:b3:2d:df:f2:e8:44:b1:d1:43:0c:57:7f:5c:6d:5c:7f:60:
15:a7:0c:aa:4a:c1:08:4e:d3:2c:3e:0d:dd:e4:61:dd:b3:b8:
43:ce:c7:43:7f:d1:49:33:df:2c:c5:cd:0f:f3:52:13:7d:57:
d1:cf:3a:6f:98:52:dd:0a:75:f3:8e:dd:1f:23:45:26:7a:6b:
e1:1e:27:18:a6:41:89:a5:a3:ea:46:a8:2a:e9:87:a7:9f:92:
6a:cb:ad:88:4d:42:b8:4a:04:9b:ea:eb:7d:5f:e5:6b:60:c3:
d0:2b:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:45 2026 by rpki-client