Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t4hla4KBZW_u3S9aDX40D5FoIpE.roa
File: t4hla4KBZW_u3S9aDX40D5FoIpE.roa (raw, json)
Hash identifier: cdVBPBpDY5vSc5dSCcL32dwfLqjDbvXZ/0HnEK04MV0=
Subject key identifier: B7:88:65:6B:82:81:65:6F:EE:DD:2F:5A:0D:7E:34:0F:91:68:22:91
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BDFCDB61E2E5C137C96C604628292
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t4hla4KBZW_u3S9aDX40D5FoIpE.roa
Signing time: Tue 15 Sep 2026 21:49:28 +0000
ROA not before: Tue 15 Sep 2026 21:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11325
IP address blocks: 142.228.124.0/23 maxlen: 23
142.228.128.0/23 maxlen: 23
198.33.108.0/22 maxlen: 22
198.33.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:df:cd:b6:1e:2e:5c:13:7c:96:c6:04:62:82:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b788656b8281656feedd2f5a0d7e340f91682291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:fc:60:47:94:5e:1d:18:b4:a7:97:a5:1e:
e4:7c:8e:5d:82:5d:76:fe:7f:d2:6d:9c:58:d1:81:
f2:76:0b:0f:66:56:1a:cf:c8:8e:45:33:17:77:5b:
71:a7:ae:aa:6e:e7:b9:b0:70:08:ec:b0:e6:f3:56:
c3:3a:39:20:eb:be:20:ee:e4:82:98:0c:f8:c9:94:
ce:2d:c1:5d:28:dc:5e:06:93:a6:a4:14:32:cc:29:
89:d2:f0:23:df:e2:08:bc:5a:9d:92:eb:2e:ee:71:
64:10:da:52:6e:df:97:fe:25:09:74:d1:5c:09:8a:
8c:71:f1:23:be:ad:3b:56:21:6b:33:76:4c:e5:ec:
d2:8e:e4:1a:bb:ae:6a:90:75:74:1b:94:f5:d8:69:
db:70:fb:64:cd:c8:b9:31:e5:88:8d:78:65:ad:0e:
c3:49:c7:a7:44:32:b9:a1:57:bd:9d:7a:19:01:80:
1b:b2:0b:5b:2e:e8:69:3e:18:a9:e1:a0:8d:d1:dd:
ae:bc:2e:f1:26:3b:f9:f3:a8:4e:14:fd:d9:d3:b4:
b9:aa:77:77:2e:59:4d:1a:34:07:7a:ba:24:f6:38:
fb:e7:a8:f7:56:60:62:f9:34:7a:a5:84:0d:0b:7e:
98:78:ac:13:de:8c:86:be:f2:00:1d:02:aa:91:a0:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:65:6B:82:81:65:6F:EE:DD:2F:5A:0D:7E:34:0F:91:68:22:91
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/t4hla4KBZW_u3S9aDX40D5FoIpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.124.0/23
142.228.128.0/23
198.33.108.0/22
198.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:8a:d7:4f:9c:f6:e0:f1:d3:4f:8f:0e:94:0c:02:71:3a:25:
6f:17:7c:22:25:00:60:c4:bd:94:e6:73:1b:70:15:ae:5d:e3:
3e:7a:5c:d9:00:5b:e3:a9:e5:a0:08:e9:12:8d:76:cf:08:d3:
ba:f8:09:f7:25:7a:75:db:38:23:ed:a7:88:15:4e:9e:d9:1c:
c9:fc:c9:25:60:2a:dc:9b:00:7c:1a:a2:b9:5a:00:bc:17:36:
23:38:ae:c6:e1:f1:ac:e3:ca:df:42:e3:fd:5f:0c:73:70:da:
ce:4b:a2:3e:4e:c2:61:7d:2d:6d:a0:f0:85:de:6d:11:de:13:
19:24:46:2e:d6:1d:41:d8:dc:13:73:73:87:8b:da:8f:a3:15:
b3:c0:18:bd:ed:b1:2b:5e:a7:ab:b5:d2:a2:1b:36:59:43:b5:
98:7f:89:57:a8:82:82:32:b9:e9:06:8f:27:3f:51:a6:c6:15:
33:ea:c8:48:76:77:ac:aa:22:ab:f6:cf:c6:60:89:d9:a2:93:
70:eb:e5:7a:3c:ad:8d:20:9a:17:97:15:1e:48:eb:63:c5:3d:
b1:e3:1b:43:a2:6a:bc:98:d9:45:17:87:12:2d:cd:06:c5:0c:
ab:5f:3e:d0:4e:d9:42:6c:f1:2e:1d:b2:09:11:9d:46:e6:e5:
12:d1:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:51 2026 by rpki-client