Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/4VECAtiWqje_60X7y9lsdprg2oI.roa
File: 4VECAtiWqje_60X7y9lsdprg2oI.roa (raw, json)
Hash identifier: +zMygkYKU5ImT2bqbHmd0qv5emwVpKIl+ThnFqmu454=
Subject key identifier: E1:51:02:02:D8:96:AA:37:BF:EB:45:FB:CB:D9:6C:76:9A:E0:DA:82
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 019E8C86D5229AA20D95C42D64A3B9B42DF1
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/4VECAtiWqje_60X7y9lsdprg2oI.roa
Signing time: Wed 03 Jun 2026 08:08:27 +0000
ROA not before: Wed 03 Jun 2026 08:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.238.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:86:d5:22:9a:a2:0d:95:c4:2d:64:a3:b9:b4:2d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Jun 3 08:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1510202d896aa37bfeb45fbcbd96c769ae0da82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:ce:25:3f:a3:6b:74:f8:21:ce:e1:b4:d5:
9e:1c:4c:42:ff:c6:f3:74:c8:a4:0e:02:5c:d7:53:
63:14:13:19:17:59:6e:16:1c:6e:83:6b:a9:53:57:
dd:1b:62:a5:6c:7a:10:25:d1:cd:02:6f:cc:1a:34:
1b:9c:c3:30:7c:a6:bd:1d:3a:51:7f:54:ba:d0:75:
aa:ff:da:44:27:93:a6:f0:c7:b1:22:3d:e2:5b:d3:
05:21:31:ba:32:61:8f:f7:42:88:5b:a0:4f:c6:e2:
13:60:9b:f5:98:12:33:b6:85:c4:3f:7f:c6:fc:03:
11:58:79:52:70:21:aa:cb:94:18:73:cc:43:f1:be:
6f:41:8f:95:b3:3e:cf:58:c7:46:36:6a:17:67:3d:
c2:21:46:d1:c8:be:07:a9:36:1c:81:5d:8b:d0:09:
52:42:87:0d:fd:b0:ad:ca:0b:6e:ab:26:c2:a8:f2:
97:0d:26:a3:8d:08:da:2c:5a:9e:9e:57:90:38:c4:
e9:d2:35:70:a4:43:58:a7:47:08:21:e6:91:bf:ab:
69:5a:e2:ae:db:86:5f:7f:8b:40:c2:bc:0a:58:a5:
41:85:e0:c3:b5:cf:18:8f:fc:f0:f3:5b:a2:96:43:
2d:b5:e4:6a:d5:fd:e0:9b:f8:58:3b:e0:7f:f3:c0:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:02:02:D8:96:AA:37:BF:EB:45:FB:CB:D9:6C:76:9A:E0:DA:82
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/4VECAtiWqje_60X7y9lsdprg2oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dd:f3:dd:d3:c0:f2:49:69:46:bd:8e:f9:a8:5f:2c:0d:29:
21:88:f4:2f:f7:6b:f6:19:07:b6:c8:62:bc:27:3d:59:83:59:
aa:67:e8:27:0c:fc:b8:7f:77:fa:ae:24:b1:13:6e:ad:77:d3:
4a:2f:d1:dd:9a:71:21:6a:ed:3a:e4:d0:b8:3b:8a:35:61:91:
d2:f1:c3:e4:45:e2:37:f0:f7:4f:e0:10:2c:60:b4:4a:27:8b:
cc:58:a6:29:a9:90:f0:de:42:31:33:69:ce:0d:b1:35:0f:8f:
f8:2d:14:aa:6e:e8:f2:1e:5b:16:72:dd:01:f2:ae:d0:a6:6e:
37:70:f4:41:be:4c:25:11:18:23:2f:5d:6f:8c:00:f6:ef:31:
cf:d1:7d:11:b4:85:e7:eb:5c:9e:30:fa:7b:a5:d5:29:d2:8b:
20:b7:7c:55:4b:b7:c3:b8:d4:db:4c:95:27:91:c6:1e:5a:df:
7c:3c:25:36:59:9d:6b:4b:5f:42:da:5d:7f:a1:c3:bf:95:64:
25:a5:dd:6a:89:86:8a:84:c4:bb:dc:6a:26:65:a4:27:96:70:
3e:72:bb:84:20:ee:7c:2c:0f:65:43:f5:a2:3f:02:f0:30:4d:
d9:88:f1:54:47:a4:8b:0f:34:ea:40:a7:4c:73:1f:1f:a1:b8:
cb:43:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:26 2026 by rpki-client