Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R-4WtASg99W_j6XasTyU1la4fIw.roa
File: R-4WtASg99W_j6XasTyU1la4fIw.roa (raw, json)
Hash identifier: 5Xb5AddaMW2LL4cTeCwCYRf5qYZyRR9fs0L/luoYJGc=
Subject key identifier: 47:EE:16:B4:04:A0:F7:D5:BF:8F:A5:DA:B1:3C:94:D6:56:B8:7C:8C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0FE7DC77FF73BC0C46567FCDA519256E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R-4WtASg99W_j6XasTyU1la4fIw.roa
Signing time: Fri 02 Oct 2026 21:20:51 +0000
ROA not before: Fri 02 Oct 2026 21:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216150
IP address blocks: 191.217.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:7d:c7:7f:f7:3b:c0:c4:65:67:fc:da:51:92:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 2 21:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47ee16b404a0f7d5bf8fa5dab13c94d656b87c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:1b:be:ac:12:31:71:59:66:7c:f0:02:04:
13:ef:f5:ff:d5:aa:16:3a:b6:67:f1:df:06:c6:19:
99:b9:f1:56:04:7b:a9:91:d8:16:3e:8c:2a:18:d2:
2c:f6:5c:4b:ad:d4:b5:c5:32:8a:11:09:18:8e:35:
f4:3e:36:b2:a6:ec:c7:4f:fb:bc:00:65:c9:41:1c:
7c:34:0f:4e:b4:3d:5b:ab:13:33:ff:3b:a8:44:67:
02:a5:a6:3c:d7:47:66:b2:9b:de:db:73:60:ed:eb:
67:64:1f:8d:c2:58:bd:2f:74:62:75:ac:f2:72:00:
a9:29:98:cd:85:04:ec:53:41:ab:7a:00:73:ad:a1:
a1:0a:b2:6a:d5:64:33:4c:14:66:af:49:68:48:9b:
75:de:c7:8d:28:1f:b4:20:18:10:5f:eb:87:b2:a5:
57:d1:05:0d:47:e7:e8:95:b7:94:da:72:2e:62:18:
95:04:7b:e5:b8:05:c4:74:63:43:d7:21:42:11:4a:
8c:b2:bf:21:d3:2b:94:ed:11:b3:b7:a1:85:82:5f:
bc:9d:4b:b1:02:d4:ec:6b:5e:e5:5e:40:0b:25:3e:
26:82:37:a4:36:f2:bd:03:de:ff:26:c4:11:e4:0d:
4a:5a:2f:71:3e:87:c5:f0:77:0d:28:76:e4:b6:42:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EE:16:B4:04:A0:F7:D5:BF:8F:A5:DA:B1:3C:94:D6:56:B8:7C:8C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R-4WtASg99W_j6XasTyU1la4fIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.214.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:f1:29:47:3c:a0:c1:ce:54:62:f6:af:73:fb:bc:7d:74:
b1:a4:dd:14:89:ea:9c:9d:c4:d6:3e:dc:47:4d:dd:9e:ee:ae:
84:09:49:84:98:d7:22:47:ec:5e:a3:38:ac:8b:16:b8:89:f5:
2e:80:d5:eb:ce:72:22:7f:f5:77:e8:cc:f0:28:00:bc:e5:5d:
94:ea:61:36:ed:87:fa:6c:16:98:45:59:0f:6b:6b:44:33:a9:
a4:c8:ed:83:1d:21:c1:97:f4:64:9e:4e:2a:36:60:f2:95:3b:
3d:20:07:9d:22:04:d1:9d:5b:fa:e8:90:79:e5:44:f7:cd:84:
ff:fc:05:58:f6:21:65:8f:7d:d0:9d:57:8d:da:54:2e:a0:9a:
00:ef:b0:ee:24:6a:40:39:48:15:d7:5b:4b:13:af:a4:3c:22:
79:de:b1:12:6a:56:77:0e:10:3c:f0:09:d8:95:c0:c3:a0:02:
02:6c:4f:f7:6f:49:3f:c2:ed:82:18:9e:82:69:e1:cb:25:7d:
bc:df:21:bf:5e:c9:bb:84:23:ed:c1:3a:a0:da:fc:b2:d8:62:
5d:8b:3b:74:3c:ac:3f:3e:46:a5:e6:83:44:b7:83:38:54:b8:
1d:45:01:f9:82:f0:32:f1:81:40:71:ee:ba:4e:85:29:ca:db:
4c:6c:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:07 2026 by rpki-client