Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/4W8zMWdvB6Q5Y33ST-LiwR-bi9I.roa
File: 4W8zMWdvB6Q5Y33ST-LiwR-bi9I.roa (raw, json)
Hash identifier: yYLJjJcxGbsPt1kbF7TqW+8yFUQxUCBfKdPuqHD0TvQ=
Subject key identifier: E1:6F:33:31:67:6F:07:A4:39:63:7D:D2:4F:E2:E2:C1:1F:9B:8B:D2
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 019FF03F0A9D4B3C54271BA95AEFF46A7B34
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/4W8zMWdvB6Q5Y33ST-LiwR-bi9I.roa
Signing time: Tue 11 Aug 2026 09:54:51 +0000
ROA not before: Tue 11 Aug 2026 09:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 91.223.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:3f:0a:9d:4b:3c:54:27:1b:a9:5a:ef:f4:6a:7b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Aug 11 09:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e16f3331676f07a439637dd24fe2e2c11f9b8bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:66:1f:dd:78:98:e3:2d:23:33:35:d5:63:
f9:75:f5:6e:57:ab:a7:70:32:f5:4f:22:a0:f4:32:
f5:be:b4:63:39:c2:d9:e8:eb:d1:b9:ee:8c:c8:b3:
27:ed:40:d1:37:f8:54:2f:6c:8c:02:65:3b:39:35:
9d:a2:b2:21:3b:b9:36:a2:da:d3:7e:51:d1:27:d8:
36:99:37:e9:e3:7c:d5:1c:68:84:09:13:ad:48:8d:
1f:db:55:7b:8a:cc:2b:aa:fb:a4:ab:2c:28:2a:e2:
d9:d7:e3:ab:6c:4e:a1:56:a8:77:e4:b0:1c:a1:e3:
8e:13:55:b4:8b:e8:4d:ec:ed:e8:33:2d:a2:77:46:
71:cc:9c:1f:17:d9:3d:8f:fd:b1:a8:44:e6:6d:fb:
14:ba:0a:7d:ba:d1:4c:d4:d2:49:f9:b2:5c:41:fb:
81:32:02:a5:1c:15:77:dc:d8:dc:dc:b1:c6:91:7e:
72:7a:07:80:f5:79:30:fb:ae:6f:2c:5f:39:97:2f:
67:1f:04:32:ce:c8:23:bb:ef:29:30:ea:f8:7d:ea:
b3:29:7e:c6:36:46:11:41:22:49:d6:db:d5:47:bf:
08:94:a4:22:e0:42:ce:c2:a3:42:b3:3a:0b:5e:b4:
4c:2e:9b:bd:d3:f6:84:de:99:09:d4:57:96:0f:97:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:33:31:67:6F:07:A4:39:63:7D:D2:4F:E2:E2:C1:1F:9B:8B:D2
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/4W8zMWdvB6Q5Y33ST-LiwR-bi9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:45:90:3c:54:c4:8e:4d:7d:cc:40:d4:9e:2b:c8:a7:89:1f:
cd:4e:8b:e1:57:c0:86:79:3f:d3:89:3f:d1:33:cc:53:69:fa:
84:38:25:a7:33:95:f4:da:2d:87:36:2d:a9:b7:88:02:dc:dd:
3c:5d:41:b5:7f:b5:3e:17:9a:77:81:90:30:34:16:bf:ca:3c:
1e:ae:49:b6:ec:e8:e9:1d:96:06:68:da:09:7e:45:9b:a2:b6:
75:1d:81:29:b2:3c:49:8c:d7:44:6c:b9:57:11:a4:d2:f0:81:
b0:19:e1:e4:d8:84:63:a8:04:d6:72:26:6b:36:ad:f6:4e:5e:
a7:05:80:b1:3d:56:ce:25:f4:78:43:2c:1a:45:67:50:0a:97:
2b:e3:84:36:20:88:e0:0f:da:ae:28:64:2f:a2:8e:8d:bd:f1:
a6:c5:f7:30:ff:c7:40:66:e0:58:6d:ec:be:49:22:b4:55:d2:
b0:37:3c:e8:4a:b4:a2:cf:42:d1:6c:f5:e4:bb:a9:a3:a9:6d:
3c:28:e2:02:af:2f:70:73:2f:d2:bd:20:04:17:2b:41:ad:2a:
da:14:e4:5a:0d:72:ed:ec:90:35:69:ae:1a:10:ab:82:43:38:
eb:67:7e:18:0c:13:b6:d4:65:dd:1c:2e:50:fd:e7:11:98:aa:
96:7a:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:09:52 2026 by rpki-client