Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/4hkkLe2dcq377WzDqzkSvMCtsco.roa
File: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (raw, json)
Hash identifier: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=
Subject key identifier: E2:19:24:2D:ED:9D:72:AD:FB:ED:6C:C3:AB:39:12:BC:C0:AD:B1:CA
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019F044852A3FD589B1F14CB020AFA0114F0
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/4hkkLe2dcq377WzDqzkSvMCtsco.roa
Signing time: Fri 26 Jun 2026 14:14:36 +0000
ROA not before: Fri 26 Jun 2026 14:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213845
IP address blocks: 91.221.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:48:52:a3:fd:58:9b:1f:14:cb:02:0a:fa:01:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jun 26 14:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e219242ded9d72adfbed6cc3ab3912bcc0adb1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b6:3f:31:d1:a6:04:f6:0b:d9:03:6d:21:77:
5d:bb:53:65:5c:1f:ec:94:f1:ce:5c:f4:56:ba:8a:
1c:6d:35:05:76:cd:76:39:d6:23:e4:01:b5:e5:4c:
63:8b:d4:4b:02:89:af:2f:ea:59:b1:77:28:00:e9:
d6:c4:66:af:6c:d1:8b:ef:01:e3:05:03:7f:9c:06:
a1:8a:07:95:ca:dc:48:61:55:5f:30:72:88:7c:bc:
32:6a:11:79:37:27:3a:5c:28:d1:38:ac:34:79:1a:
41:72:c3:28:5d:03:9e:62:39:57:b8:7b:55:ff:f4:
29:26:78:a2:70:0f:8e:34:0c:41:bb:14:9d:1a:a9:
dc:3f:7d:ee:33:12:c0:8d:8c:eb:f3:5a:57:89:0c:
40:a9:f2:63:ea:dc:7c:32:51:04:39:d3:fc:08:8a:
b8:de:b8:a5:ce:1b:5b:16:2f:93:7f:6a:30:40:17:
85:c4:c7:56:95:79:27:fc:6c:f2:93:40:69:c5:dd:
a6:56:d0:4f:da:f6:cc:be:22:ac:88:6b:b8:0c:02:
9a:cc:6b:07:ec:a6:3c:96:ec:8e:a7:af:d6:f8:5d:
17:b6:3e:13:6a:d7:1e:ee:d9:3c:16:cd:62:0f:97:
59:8c:e5:32:16:06:0d:09:ce:e8:bf:1e:4d:ff:94:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:24:2D:ED:9D:72:AD:FB:ED:6C:C3:AB:39:12:BC:C0:AD:B1:CA
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/4hkkLe2dcq377WzDqzkSvMCtsco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.40.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2a:00:17:be:ab:7b:39:de:6f:dd:8e:d5:8b:4b:f8:22:6e:
08:45:be:ef:6a:a0:b0:10:cd:1b:e2:fa:45:70:e4:40:98:70:
68:78:62:ec:49:d9:53:49:fc:4c:05:8c:64:29:7a:0a:66:e0:
2a:3c:9b:7b:94:6d:b1:09:f6:08:da:9c:c2:b1:4c:0f:5e:f7:
05:b4:3a:52:59:50:f7:33:70:0d:01:ab:c4:67:8b:c2:6a:f9:
b8:2d:38:33:fc:5e:f8:1d:a8:35:1d:a8:45:3a:9f:7c:e0:27:
d9:67:4e:97:49:2e:7e:25:ab:3e:86:30:b0:66:a7:8f:5f:ec:
2f:b6:5c:d9:e8:84:05:08:5e:50:82:7c:36:72:a4:5a:43:69:
21:20:35:60:59:08:05:f2:be:73:88:4b:bc:cf:3e:97:0b:2c:
e6:68:9d:e1:7a:00:77:4b:d9:c3:63:a6:db:c6:35:c1:b0:06:
22:97:dc:e0:c2:c4:30:81:6a:22:61:36:e2:29:be:eb:1a:28:
4f:16:22:33:8e:d4:44:9f:45:04:75:3c:31:c2:5b:c5:a1:1b:
45:8d:c7:b0:ed:2c:32:6e:8d:00:be:50:3f:1b:1f:ea:a6:77:
b2:dd:81:a3:0e:55:0f:ec:3f:da:3f:4f:37:c1:d1:0d:32:73:
f4:6a:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:02 2026 by rpki-client