Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/r4LSjefpPXh2NBWzmzML-YHCiVQ.roa
File: r4LSjefpPXh2NBWzmzML-YHCiVQ.roa (raw, json)
Hash identifier: 4cwAGYLXFcCvXhQaffPoqSeBEp85Obiw6bTDloA68I0=
Subject key identifier: AF:82:D2:8D:E7:E9:3D:78:76:34:15:B3:9B:33:0B:F9:81:C2:89:54
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 019DDED249D3A2146A408636B5F98827A93E
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/r4LSjefpPXh2NBWzmzML-YHCiVQ.roa
Signing time: Thu 30 Apr 2026 14:36:56 +0000
ROA not before: Thu 30 Apr 2026 14:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52194
IP address blocks: 185.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:d2:49:d3:a2:14:6a:40:86:36:b5:f9:88:27:a9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Apr 30 14:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af82d28de7e93d78763415b39b330bf981c28954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:6f:26:4d:5d:47:78:c1:8f:11:b3:51:25:
1c:9a:45:6e:18:ea:2c:f3:dc:fe:6a:23:7c:95:27:
1d:2c:bf:2e:8f:08:4d:2e:a9:e7:9c:f2:da:64:47:
44:a4:85:52:0e:96:ca:c9:d4:05:1c:89:75:a3:94:
8e:58:c4:a4:33:9f:02:aa:f3:80:8e:83:ac:eb:cd:
53:35:b7:43:88:4b:14:4e:29:89:64:d9:ef:73:42:
c4:b9:a7:e6:8e:0a:3e:48:a1:d3:4f:15:38:24:2d:
e8:b1:e1:2c:5e:43:b2:d5:25:85:67:f2:cc:2f:f1:
4c:f3:2e:7a:84:43:78:5e:f0:f9:d4:4e:a9:9f:10:
62:16:46:37:2d:e5:23:6f:c7:31:01:80:6e:48:08:
8e:2c:e6:93:b7:76:42:67:23:2d:8f:c3:50:98:f0:
8a:81:34:30:05:aa:c1:11:bd:5c:69:ad:c1:ba:fe:
3f:20:ac:18:06:06:a9:e4:ea:89:9c:ba:69:db:97:
34:6f:c2:87:6a:00:b7:cf:4d:e8:0d:42:19:63:8c:
7d:bc:31:d2:a5:16:ee:75:cc:61:c8:fd:7d:fa:65:
41:99:00:d0:2c:e5:25:4e:04:f3:66:51:29:9e:a7:
b5:0b:5b:0d:44:c8:52:97:a7:4f:72:c8:6f:2b:44:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:D2:8D:E7:E9:3D:78:76:34:15:B3:9B:33:0B:F9:81:C2:89:54
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/r4LSjefpPXh2NBWzmzML-YHCiVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
09:84:0d:9b:68:06:70:33:e5:d8:35:1c:5f:cd:47:a6:dc:a2:
bb:f2:7c:85:44:a9:68:e9:2c:9d:dd:1d:1a:76:b3:96:22:a2:
6b:4f:07:c4:ca:c8:05:3d:df:4c:1f:5d:7b:0d:9a:4c:d8:e0:
2d:6f:b8:0e:99:12:67:af:09:d5:b8:63:d3:32:6b:ea:ad:11:
15:f0:0c:6f:ad:ab:c0:62:eb:95:50:05:f6:66:91:b9:02:e9:
7a:ec:7c:d8:0a:1f:7a:09:00:9b:98:c1:44:0c:8d:14:ed:9f:
84:c2:b9:e9:5c:2a:45:fc:b9:45:09:58:a7:96:73:61:ed:75:
6e:41:1d:04:55:d4:86:e5:a7:5a:bc:02:d0:35:f2:25:e3:22:
5b:43:6c:83:b2:6c:09:82:96:1c:d3:1e:04:b6:99:9a:58:63:
97:03:83:c3:f6:7b:b4:60:8a:7a:86:ce:87:2a:97:fa:e2:bd:
ef:dd:86:26:c1:c6:b0:98:e1:5e:08:60:07:1d:dc:c8:39:fc:
9d:fd:b1:0e:19:e4:f5:f8:bd:58:c9:d0:47:9a:04:07:56:b4:
bf:10:58:59:2b:ad:2d:07:e4:06:93:f4:48:eb:25:d6:b1:10:
53:74:9f:61:7f:3e:35:32:1e:5a:b9:df:44:f1:e4:53:11:22:
8b:a7:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 09:05:38 2026 by rpki-client