Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R4X27POI9eepACqLOehhNKnv4to.roa
File: R4X27POI9eepACqLOehhNKnv4to.roa (raw, json)
Hash identifier: G7oU0707FRkP9DGVXvtmpLl6fXTp86olaQ5kP1uZmcs=
Subject key identifier: 47:85:F6:EC:F3:88:F5:E7:A9:00:2A:8B:39:E8:61:34:A9:EF:E2:DA
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A12B5CA9928CE471DE026AA0AE1E55FC68
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R4X27POI9eepACqLOehhNKnv4to.roa
Signing time: Sun 11 Oct 2026 14:27:35 +0000
ROA not before: Sun 11 Oct 2026 14:27:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 93.88.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:5c:a9:92:8c:e4:71:de:02:6a:a0:ae:1e:55:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 11 14:27:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4785f6ecf388f5e7a9002a8b39e86134a9efe2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:14:67:ac:7e:6b:27:dc:c3:e0:6b:bd:dc:
c4:5f:4b:85:38:09:ec:8b:f6:d5:ae:96:7a:10:c5:
1b:06:b2:a5:21:ad:86:78:5b:0d:ba:65:a9:1f:95:
f6:2c:36:f0:45:5b:5e:f7:e4:2b:ff:b2:2f:32:7c:
1b:d3:19:b7:aa:c5:90:11:ce:23:04:f6:8d:1c:9b:
14:61:08:96:3f:79:ce:39:e5:5b:47:5a:80:34:ed:
c7:a4:c3:19:05:64:45:6f:2a:81:48:04:cb:1c:56:
33:18:3c:cb:9c:b9:15:e8:84:6a:19:3f:ac:7c:9d:
db:de:e8:42:d5:2b:01:42:99:59:6e:82:63:33:64:
26:44:c1:71:23:c3:89:a8:b5:80:31:f8:81:72:51:
44:83:31:34:82:ea:64:11:fa:9d:fb:d0:34:a8:db:
34:12:81:a8:6d:a7:cf:09:b2:23:25:c9:41:21:16:
ad:20:18:0d:63:fd:8d:71:60:77:67:d5:8e:96:9a:
9d:7b:a0:21:58:1d:25:17:89:a9:f5:cc:1b:57:5d:
39:33:7d:09:88:d9:f4:06:db:d5:c8:a8:bb:5d:75:
71:6e:3c:6d:81:66:dc:e6:f3:12:5b:fe:19:b9:8f:
a1:9b:da:92:f5:9b:79:bd:bb:16:f7:8f:da:6e:a8:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:85:F6:EC:F3:88:F5:E7:A9:00:2A:8B:39:E8:61:34:A9:EF:E2:DA
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/R4X27POI9eepACqLOehhNKnv4to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fd:9e:a3:71:62:50:91:e6:64:61:78:f8:f1:ad:49:ce:90:
be:83:31:1d:22:59:96:be:7a:d4:58:82:32:1c:3d:f0:a4:8d:
06:ab:e7:87:31:16:64:70:8f:10:b6:7c:3e:d9:82:51:26:21:
76:86:ee:93:05:db:ef:65:4c:2f:e4:61:c2:82:c9:fd:1c:3c:
d6:79:84:f3:52:26:f4:b5:84:87:db:d0:27:22:28:11:df:80:
0d:ab:bb:e7:4d:93:00:85:7f:2e:d6:3c:b9:53:8d:77:74:23:
09:31:69:fc:1d:b2:46:de:cf:3e:84:17:6e:84:b0:45:e7:1d:
a6:f5:ef:4b:49:d7:0c:fd:2f:28:6b:fe:0b:1d:73:f6:0e:10:
20:90:e0:95:a3:5b:1c:40:b2:84:26:89:d6:27:1f:84:d8:4b:
9e:0d:7b:93:7c:34:f8:3b:da:88:cd:05:4c:a1:63:55:3c:e6:
25:e2:7e:22:94:c6:2a:b8:62:d7:97:18:80:ed:95:89:27:2b:
51:97:e6:4d:8a:a5:ef:97:0b:3b:af:76:bd:82:d5:97:f0:c5:
ae:70:95:48:7c:50:10:ac:2c:9f:3c:43:dd:e8:4a:cb:fe:55:
96:ec:63:8b:b6:0e:37:0e:54:82:f7:f6:b0:d9:a7:fc:36:87:
18:2a:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:32 2026 by rpki-client