Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4c04L4M_0Fh4Z29ygdmCRALZyrw.roa
File: 4c04L4M_0Fh4Z29ygdmCRALZyrw.roa (raw, json)
Hash identifier: ZTYcfgc1PqEBq4WNMxzF+5vmWxMtyaO9j+MjwQkRmnw=
Subject key identifier: E1:CD:38:2F:83:3F:D0:58:78:67:6F:72:81:D9:82:44:02:D9:CA:BC
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01A163B6FD542F6A3D0EA476BF7E0F40CB95
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4c04L4M_0Fh4Z29ygdmCRALZyrw.roa
Signing time: Thu 22 Oct 2026 13:04:59 +0000
ROA not before: Thu 22 Oct 2026 13:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214962
IP address blocks: 45.153.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b6:fd:54:2f:6a:3d:0e:a4:76:bf:7e:0f:40:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 22 13:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1cd382f833fd05878676f7281d9824402d9cabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:f8:85:c6:c6:7a:30:a7:f6:0b:ba:e3:18:
36:9f:79:96:74:d4:67:8a:8f:66:33:1e:18:00:19:
65:c0:9b:97:cd:de:ca:91:97:03:fa:de:48:c8:4d:
b5:2a:cd:59:d0:93:ea:84:c8:e8:42:30:54:21:58:
57:35:f9:86:5c:6b:94:a3:15:bd:67:13:1a:73:2d:
34:aa:be:79:94:a3:5a:64:4e:a7:6f:83:2d:9a:6f:
f2:90:cf:5f:97:46:72:2d:39:76:d3:3b:65:4c:d0:
a2:de:2a:a8:93:82:16:5d:20:e3:c4:99:b8:eb:6a:
0b:d3:4c:0e:a6:6e:c9:b0:d8:a6:54:84:b1:0e:44:
ee:11:5c:5b:c3:f9:67:6e:2a:69:7f:1d:d2:69:4e:
e8:b3:5e:d2:b8:94:39:44:45:80:59:41:78:4b:0a:
a3:3d:c2:65:ef:21:dc:19:e3:22:c7:c7:84:db:fb:
77:e1:98:f1:15:01:b9:c8:a0:d7:f9:38:8d:ef:32:
8f:17:1b:45:74:e1:01:5c:01:4e:b1:1f:96:ac:10:
c0:2b:7e:64:4b:90:06:2d:4b:1b:f2:2e:7d:f6:d5:
61:16:f5:7a:38:0c:88:29:ce:ed:2b:8a:c7:aa:33:
59:6d:0d:98:3c:14:90:8d:ec:21:19:b9:eb:28:4e:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:38:2F:83:3F:D0:58:78:67:6F:72:81:D9:82:44:02:D9:CA:BC
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4c04L4M_0Fh4Z29ygdmCRALZyrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.166.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f8:ad:fb:82:85:8e:00:33:a8:bc:c8:bb:4d:dc:e8:8d:15:
01:ee:2a:2d:fe:07:75:3f:05:6a:ba:6a:77:d9:13:52:93:41:
f1:0c:04:ec:33:58:df:39:ce:7c:a2:b4:75:93:c4:5f:bd:17:
a9:09:13:d1:b8:36:8b:4f:7e:12:a9:e6:49:78:cf:cd:77:22:
08:81:02:49:e7:04:90:e2:9e:9f:23:e8:1a:00:50:eb:e1:90:
ea:5e:5c:d5:ea:88:69:2c:25:b7:fb:1e:f7:f7:dd:51:63:07:
b4:7e:e7:48:d3:7f:ae:e1:cf:38:4e:45:48:29:07:68:21:0d:
b6:cf:bf:26:1f:ca:9a:75:99:2c:7f:39:27:eb:ac:82:19:da:
5e:b0:dc:84:14:38:c2:5b:88:97:63:41:a2:b2:b3:84:11:d8:
f1:0b:74:09:db:89:fd:55:b7:b4:8f:a4:7d:49:3e:5d:d0:61:
ee:95:f5:04:19:22:d9:87:8d:c9:79:42:18:9c:8e:dc:9c:46:
7f:bb:af:c0:b9:43:eb:68:19:87:ec:bd:a7:8c:5a:29:e6:cf:
53:b8:0b:8e:82:99:5a:58:ff:4b:f9:df:79:4f:46:e8:c5:58:
1d:66:05:95:95:5d:22:fd:03:c2:ed:47:17:c3:dd:a8:c2:c7:
37:46:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:44 2026 by rpki-client