Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa
File: 4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa (raw, json)
Hash identifier: T60YUCp6XTKgr3SfsDRJKBujmomI7/iUNH3bODa8p0c=
Subject key identifier: E3:20:ED:82:EF:44:5A:A7:4D:9B:A6:42:F0:60:9B:0F:6E:C7:0D:5B
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019E384B33A6F9AA973A95DF787A324292A9
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa
Signing time: Sun 17 May 2026 23:35:12 +0000
ROA not before: Sun 17 May 2026 23:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12400
IP address blocks: 195.225.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:38:4b:33:a6:f9:aa:97:3a:95:df:78:7a:32:42:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: May 17 23:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e320ed82ef445aa74d9ba642f0609b0f6ec70d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:7a:5b:0c:a7:8b:b7:36:f0:02:d3:01:96:
f6:4e:90:00:f4:23:13:1e:09:1f:c3:01:7c:0c:33:
3f:82:b8:b1:9f:cf:69:43:bb:0c:ef:69:68:2c:a8:
8e:3e:f2:7f:c1:65:b7:7e:a4:75:c1:1f:d2:8a:c2:
b1:df:69:bd:4c:c6:10:bf:b8:1a:be:8e:4b:b1:94:
cb:bb:51:e6:01:ef:90:72:2f:5b:db:85:bf:d6:fe:
e9:ab:26:fb:21:14:5f:2c:c3:57:f1:f7:c6:83:a7:
f3:4c:af:6c:f3:af:e1:ad:05:99:2a:68:b0:9d:82:
01:2a:9f:38:f2:c4:3c:ec:6a:21:61:04:a7:b0:26:
c0:56:4a:65:7f:85:12:d0:20:e0:21:b6:f5:e6:84:
ca:84:2c:18:1c:c9:15:8a:df:21:01:fb:4c:1a:17:
66:c4:e0:8b:65:67:92:e2:e9:cc:f2:4a:9f:42:35:
d4:5f:85:12:64:8d:59:27:bd:9d:60:3c:4b:6d:8b:
f5:49:93:8d:96:ed:ec:b9:7f:3c:d4:5e:2e:12:2a:
4a:eb:a8:22:56:e6:fb:9a:9e:c0:10:ae:84:d5:8c:
58:23:01:85:37:c6:21:d2:f4:3d:f0:cd:5f:3f:00:
da:68:9a:55:6f:46:0d:b5:cb:77:b1:bc:6e:b3:3c:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:ED:82:EF:44:5A:A7:4D:9B:A6:42:F0:60:9B:0F:6E:C7:0D:5B
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/4yDtgu9EWqdNm6ZC8GCbD27HDVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.47.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:29:a5:90:f8:a6:bf:c3:79:c2:2b:7a:b5:74:5a:a6:d3:
5e:da:80:c5:60:c4:84:22:06:f0:03:28:00:4a:4a:05:6b:77:
b2:64:c1:eb:a9:4f:82:a0:c5:ed:b3:9a:2e:d0:8f:10:76:4c:
36:07:25:84:b7:a8:6f:97:24:a3:5c:f3:0c:90:91:95:67:45:
0a:23:3a:1e:ef:a9:10:21:fc:7d:4c:df:a0:3d:04:1f:b2:47:
e5:a1:98:cb:83:98:ae:29:6e:6b:dd:6b:54:10:58:5c:8d:a5:
4f:d6:57:40:57:36:fc:4b:aa:92:da:3e:79:1d:e7:3b:4d:61:
7a:3d:39:b1:11:8f:63:eb:fc:e7:57:b0:4f:b2:cf:47:14:d4:
5c:48:59:b8:0b:d3:bc:14:6b:bb:e7:27:aa:97:07:78:74:a1:
59:be:3f:b4:06:f6:f4:a9:c5:a1:f0:09:27:f4:45:f0:86:2a:
e4:da:96:0b:39:06:c7:5b:2f:a4:0b:b9:54:7b:db:c7:31:65:
06:f3:43:dd:f9:84:2a:36:c4:eb:16:a1:d3:29:f8:f4:5b:97:
2a:c5:13:3b:a2:88:59:36:12:7c:3d:0a:8c:a6:ce:4d:c7:f9:
da:a1:11:76:9b:b8:79:b5:f9:d6:43:e9:28:9b:35:4f:44:6e:
89:5f:5f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:03:41 2026 by rpki-client