Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4E76dscPmsjQSGdidNPqKGs4ze4.roa
File: 4E76dscPmsjQSGdidNPqKGs4ze4.roa (raw, json)
Hash identifier: raHbhVsl7pPf6lzWtpsuxt2++uQ9kIq9QzbD4q2cNVE=
Subject key identifier: E0:4E:FA:76:C7:0F:9A:C8:D0:48:67:62:74:D3:EA:28:6B:38:CD:EE
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FDEADFAB86B61E8B274C92574B76F34C0
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4E76dscPmsjQSGdidNPqKGs4ze4.roa
Signing time: Sat 08 Aug 2026 00:02:51 +0000
ROA not before: Sat 08 Aug 2026 00:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219082
IP address blocks: 153.76.4.0/24 maxlen: 24
2a0f:b240:a4::/48 maxlen: 48
2a0f:b240:c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:ad:fa:b8:6b:61:e8:b2:74:c9:25:74:b7:6f:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 8 00:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e04efa76c70f9ac8d048676274d3ea286b38cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:12:5d:60:55:89:09:bb:6f:b9:a6:8c:a3:
95:bd:e8:3a:28:99:28:d7:07:f9:de:ad:d5:09:0c:
a1:70:6c:ca:8d:f2:6d:68:ec:d2:f3:d2:0f:c0:ba:
f2:d8:30:90:50:e3:8f:b7:a6:19:9f:6f:d0:be:fe:
6d:f6:2c:ff:50:1a:df:4e:b8:dc:d0:16:72:df:d0:
d0:ba:c7:5d:23:28:64:4e:90:22:77:41:5c:34:ef:
7d:fd:45:cc:4b:3a:52:8f:47:6a:e6:67:86:06:07:
96:43:30:4e:da:33:47:6c:d2:c7:80:7d:f8:7a:18:
8a:34:06:1c:2f:13:de:48:4a:f4:9f:39:9f:78:c1:
4c:3b:f9:2d:9a:21:d0:4f:a7:2d:73:5b:c6:38:4e:
f4:7f:66:84:00:fb:e0:4c:57:a8:79:b8:07:67:ac:
15:27:65:c9:74:78:25:13:1f:1b:40:51:2f:26:2b:
b9:30:c6:04:75:5d:7b:72:c1:fa:3a:e0:cd:e8:f2:
47:80:35:c8:fc:5f:c3:d5:c9:cb:39:ab:79:e1:e8:
a5:4f:4e:c9:7a:b2:99:6d:40:5d:48:39:70:b1:10:
af:c2:17:8c:fc:2c:31:ae:81:a5:0a:16:36:67:85:
2a:a5:66:9a:7e:7f:2d:31:da:f6:62:bb:67:bf:5a:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:FA:76:C7:0F:9A:C8:D0:48:67:62:74:D3:EA:28:6B:38:CD:EE
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4E76dscPmsjQSGdidNPqKGs4ze4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.4.0/24
IPv6:
2a0f:b240:a4::/48
2a0f:b240:c0::/44
Signature Algorithm: sha256WithRSAEncryption
44:f1:ad:7e:3c:c8:85:5d:8a:ba:a3:d0:31:e6:44:43:e9:a2:
0f:b9:a7:ae:82:22:6f:bb:ed:da:14:95:36:98:4e:2a:55:cd:
c7:5c:da:a5:86:cd:89:57:48:7f:cc:81:a6:fc:6e:57:89:62:
99:05:7f:c2:3e:56:e2:5c:b1:9f:d2:59:1d:41:12:64:18:1c:
5f:f7:a6:d2:40:ff:2f:8f:68:1b:ec:29:38:c5:a7:39:95:37:
ab:b5:ec:31:49:e7:56:7a:9c:c7:37:b9:0e:1a:41:ff:e7:45:
e3:2a:63:59:1d:fe:4e:95:66:51:c9:7f:c6:59:27:4d:c2:c3:
df:5d:ad:32:4d:3c:da:81:01:7d:ef:a0:6c:90:b5:c5:2d:1b:
a7:02:05:18:77:26:93:97:66:20:e1:19:e1:00:6b:41:7d:a2:
f7:b4:b5:b1:b5:fc:fa:0d:f1:22:cf:ca:88:9a:ed:2b:dc:36:
77:1d:ac:e8:30:a6:51:71:b5:b5:83:2c:e9:85:af:46:84:4e:
1b:37:16:50:53:20:52:7c:05:d6:f4:7a:37:4e:09:05:4e:65:
40:79:b4:45:2f:f0:10:92:9f:4c:f2:1d:69:8e:58:5e:12:20:
09:0e:64:10:c0:6c:e9:6e:ed:c7:60:f1:8e:6b:0b:fe:4e:59:
a3:a4:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:32 2026 by rpki-client