Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/4LzWb20kE4we9HfPWDOaVJUkf9o.roa
File: 4LzWb20kE4we9HfPWDOaVJUkf9o.roa (raw, json)
Hash identifier: tm1HMP4ByosG7FRRT44j9jYJJXwP+YhCfxOxgEkaOXA=
Subject key identifier: E0:BC:D6:6F:6D:24:13:8C:1E:F4:77:CF:58:33:9A:54:95:24:7F:DA
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F236937B3018AEE4A0EAC76848C119EA0
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/4LzWb20kE4we9HfPWDOaVJUkf9o.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:37:b3:01:8a:ee:4a:0e:ac:76:84:8c:11:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0bcd66f6d24138c1ef477cf58339a5495247fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:49:a5:63:9d:90:8e:6b:d9:c4:77:49:0e:
b1:be:2c:3c:7e:8c:af:cb:c1:0e:f7:18:39:45:7e:
58:a8:bb:2e:30:d8:3b:60:d9:e3:c2:22:82:d2:69:
a0:cf:86:f0:cf:1c:7d:f4:7f:35:d2:17:8a:5b:07:
3f:5c:29:9e:8b:98:29:7c:67:16:cc:d2:ba:12:35:
a3:a2:46:eb:b9:1f:7b:22:d9:85:56:50:ef:82:05:
fd:91:0d:d6:fc:22:70:57:79:9f:e3:5e:46:47:d2:
be:45:38:11:91:18:eb:b5:21:68:bc:7c:da:0e:f8:
5a:2f:96:df:0f:4f:82:1c:c4:9e:28:b4:67:17:cd:
ef:36:93:01:1d:77:16:34:58:55:79:f6:92:48:bb:
dc:b5:52:4a:d3:6e:5b:34:a9:1c:41:be:ac:5a:ed:
81:41:e0:dd:e3:60:89:44:31:16:96:df:39:88:c1:
d4:8b:5d:c3:d2:fa:80:b0:45:71:b0:7c:0f:d2:43:
ff:f6:35:5e:9b:ea:03:61:e6:ef:fb:7b:48:bc:c1:
84:ba:b0:c3:24:48:fc:9a:20:58:27:45:14:77:2c:
d6:c6:20:5d:2a:d8:7c:1d:86:99:ec:32:3f:fb:86:
f6:82:a1:42:b4:2b:24:e8:32:d5:d4:0c:a9:4e:9c:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:D6:6F:6D:24:13:8C:1E:F4:77:CF:58:33:9A:54:95:24:7F:DA
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/4LzWb20kE4we9HfPWDOaVJUkf9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
45:e9:5c:de:16:f0:1d:f2:64:00:d5:c7:c5:7e:1e:ca:c1:68:
d1:a8:9f:26:6b:da:b1:90:cc:9c:a6:6c:70:0d:03:2f:ea:2c:
c6:9d:07:85:cd:9e:cf:da:7f:0d:b6:62:70:f9:d6:e5:f6:d8:
7e:22:0d:63:b8:38:68:79:6f:51:80:d0:4e:49:06:49:67:d3:
90:87:52:f4:2e:a6:ff:72:e7:35:63:ea:cf:ac:46:5b:6a:4e:
82:b3:ed:d9:90:2e:d8:5b:dc:17:da:63:2e:0c:eb:73:d0:4b:
a5:e9:f3:39:46:e3:b7:e7:cf:56:4e:18:8d:40:8b:4b:02:49:
7c:73:e8:9d:52:52:8e:8a:a7:10:f3:5e:54:c2:a7:04:53:b4:
25:b6:86:d6:11:c8:66:e0:ee:e3:be:af:68:a2:a7:39:39:05:
c1:38:b1:b3:9e:68:d3:14:e9:f2:0e:02:d6:06:fa:1c:c5:55:
72:f3:e8:28:17:e0:5e:de:f0:6a:fd:c6:67:57:7e:70:1d:39:
ab:75:51:d1:ff:ff:8c:21:d2:58:57:e9:15:3f:b2:c6:6f:b6:
a0:dd:01:a0:53:4e:cd:d2:36:e0:84:bd:6c:0a:20:c3:58:3e:
6f:07:bb:0c:b2:41:da:ba:3b:e6:dc:3f:90:bf:70:34:87:49:
ac:71:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:29:15 2026 by rpki-client