Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/l4-X8_eXswBGFxKXYsID689ysSg.roa
File: l4-X8_eXswBGFxKXYsID689ysSg.roa (raw, json)
Hash identifier: 1gHzp+nOp9wIINJxkvsFKvC4ESGAANBEssCiAndsb1Q=
Subject key identifier: 97:8F:97:F3:F7:97:B3:00:46:17:12:97:62:C2:03:EB:CF:72:B1:28
Certificate issuer: /CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
Certificate serial: 019FB262507523B50A638DB53F2D3FE8DFE4
Authority key identifier: 73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/l4-X8_eXswBGFxKXYsID689ysSg.roa
Signing time: Thu 30 Jul 2026 09:36:55 +0000
ROA not before: Thu 30 Jul 2026 09:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200327
IP address blocks: 194.238.44.0/24 maxlen: 24
2a12:c480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:62:50:75:23:b5:0a:63:8d:b5:3f:2d:3f:e8:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d570c796d398f1f08cc450c53261e1a1e55bc3
Validity
Not Before: Jul 30 09:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=978f97f3f797b3004617129762c203ebcf72b128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:32:d7:35:fc:86:0f:99:05:94:48:22:5e:
11:5e:9c:36:14:7f:db:6b:4d:db:6a:09:08:f3:ff:
53:f9:c8:a6:29:87:4a:06:ce:7a:7f:f7:98:11:4a:
c0:e4:4d:70:8e:f8:e8:1b:4b:63:10:89:87:43:6a:
6a:0e:6d:38:75:51:05:3d:04:43:63:65:ce:06:37:
4d:dc:fb:44:d1:41:cb:37:20:eb:d7:7b:1d:6c:34:
82:c6:d3:e6:64:09:b7:2c:74:1a:35:ea:7a:57:d8:
48:e1:ea:7f:5c:ea:2a:8a:94:02:85:5c:c6:2e:a5:
9f:e1:5a:05:31:05:e7:da:d2:91:7d:b7:a0:81:6f:
1b:42:0e:45:75:4f:fa:04:6a:c6:55:e1:42:3f:6f:
42:76:b3:75:ef:03:6e:c7:77:f2:b4:c8:5c:d0:33:
32:dc:40:59:60:9e:04:f5:57:16:2b:df:42:d3:74:
da:96:3f:fe:46:d2:fd:f7:f4:31:cf:53:5f:cf:bb:
c2:f1:c8:7f:93:4c:09:28:84:ea:e4:9d:7b:31:6b:
56:7a:88:c7:13:6f:7b:c2:ab:c8:7f:c3:9e:d3:b5:
ef:8e:b0:8d:cd:de:1a:e6:5f:91:12:d7:4f:a9:60:
2c:17:28:cc:39:dd:7d:a5:61:62:ae:63:5c:8b:34:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:97:F3:F7:97:B3:00:46:17:12:97:62:C2:03:EB:CF:72:B1:28
X509v3 Authority Key Identifier:
keyid:73:D5:70:C7:96:D3:98:F1:F0:8C:C4:50:C5:32:61:E1:A1:E5:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/l4-X8_eXswBGFxKXYsID689ysSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a25f4-fbe9-48e9-9a71-dc1ad567ee10/1/c9Vwx5bTmPHwjMRQxTJh4aHlW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.44.0/24
IPv6:
2a12:c480::/29
Signature Algorithm: sha256WithRSAEncryption
83:ce:5d:eb:1d:e7:8e:d2:f1:73:26:df:af:9f:26:f0:a2:41:
39:31:18:15:8b:4c:39:ac:63:a4:cf:53:b4:29:7a:b2:62:47:
23:60:09:a8:f4:9e:6a:8a:93:85:67:9a:da:d5:0a:f0:13:92:
5a:fe:44:4c:75:63:40:1d:9c:6d:02:41:c9:b9:f0:c5:c5:b9:
02:a4:52:40:a2:41:31:61:86:00:cb:62:1c:85:0a:a4:9d:ec:
f3:85:82:2b:8e:2b:f2:a6:e3:bb:2c:54:b0:1d:31:be:a0:8b:
98:86:17:a3:23:5b:62:a3:2a:d3:fb:05:61:6f:4f:d2:14:8b:
33:84:5e:d4:f6:6c:5f:dc:1e:e1:0b:24:9d:3a:e1:72:ad:f4:
b1:5d:24:cd:57:93:c4:db:0a:00:ec:cb:da:30:ab:90:0a:38:
71:ec:6e:3e:11:f4:ad:36:15:64:88:cb:be:8a:18:ea:83:a5:
bb:3d:82:c9:94:9f:ae:8c:93:5d:21:96:47:fc:cc:fd:fd:79:
ca:10:18:38:a4:3c:5c:9f:26:9a:60:8b:3c:71:87:9b:d5:d5:
d2:18:84:bb:2e:d8:b6:44:26:08:ee:c0:a1:64:47:01:e2:3f:
5e:22:62:3d:6c:a1:18:53:3c:16:f9:be:af:7d:d5:fd:31:3e:
86:15:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:23 2026 by rpki-client