Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a4eZtsxSoUsQLsQJUSldo0nW-QE.roa
File: a4eZtsxSoUsQLsQJUSldo0nW-QE.roa (raw, json)
Hash identifier: qETNMjbbv6m9d693TJqiz1wFLU2GtcYO5aUb7bDUTdw=
Subject key identifier: 6B:87:99:B6:CC:52:A1:4B:10:2E:C4:09:51:29:5D:A3:49:D6:F9:01
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019E3F4B419D583D116A8C497127DC7E1825
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a4eZtsxSoUsQLsQJUSldo0nW-QE.roa
Signing time: Tue 19 May 2026 08:12:37 +0000
ROA not before: Tue 19 May 2026 08:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 213.145.76.0/23 maxlen: 23
213.145.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:4b:41:9d:58:3d:11:6a:8c:49:71:27:dc:7e:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: May 19 08:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b8799b6cc52a14b102ec40951295da349d6f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d7:c4:fc:0d:36:28:e8:1f:f0:48:57:20:d5:
95:08:9b:3b:0b:16:48:d3:0e:73:ab:e9:cd:1b:78:
aa:69:e9:97:4d:c3:b9:7e:26:b7:19:6e:ea:92:70:
10:d1:1a:2c:9f:14:37:49:b8:70:aa:17:96:12:b7:
b3:0c:3e:a3:1c:33:2f:bb:16:b2:8d:d9:e6:a0:66:
0f:25:1a:49:ef:6e:6d:e5:2b:b2:52:ae:ac:6f:7a:
ac:4f:4d:13:68:14:e5:44:f3:6d:2e:00:c5:90:8c:
28:e2:63:36:a2:68:fd:d4:1f:7e:65:74:67:e6:3c:
ea:55:32:62:6b:03:0c:5f:f6:93:6a:36:55:65:29:
08:00:20:4f:f7:48:7b:83:a6:c3:64:9c:23:99:b4:
c0:eb:2d:4c:68:61:a1:14:f0:c2:f3:1d:34:5d:91:
92:b4:48:6f:04:31:9b:89:93:6f:1b:4d:5d:1b:65:
94:ac:fd:42:88:b2:f0:c0:f8:68:6c:13:b5:e3:be:
f9:1f:58:7e:67:f2:cd:64:03:76:d7:3e:78:75:ef:
91:3d:78:29:6a:93:95:63:85:0f:46:88:36:85:2e:
0d:49:d8:4f:aa:f8:c4:1d:8f:eb:cd:7f:af:9c:ee:
9d:78:0d:23:ad:24:d7:52:d5:d3:55:82:a0:dd:b5:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:87:99:B6:CC:52:A1:4B:10:2E:C4:09:51:29:5D:A3:49:D6:F9:01
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a4eZtsxSoUsQLsQJUSldo0nW-QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.76.0/22
Signature Algorithm: sha256WithRSAEncryption
30:6d:fc:6a:a7:bb:81:42:90:92:54:70:d0:37:78:e0:c4:7b:
e6:a6:d6:75:2d:80:53:47:a6:a2:eb:c8:6e:7e:4c:a5:3f:49:
2d:61:77:fe:33:69:4b:40:63:b5:9b:7c:0b:ed:d9:81:3d:e9:
68:a8:eb:5d:29:8c:f6:31:b6:8d:7b:7d:1e:f7:84:76:96:e7:
cf:aa:4e:bc:e8:f0:6b:76:df:02:f7:67:e7:2a:15:31:4f:c7:
c3:61:e9:5c:c9:72:f2:59:a3:bd:54:ef:3b:d6:08:ee:9e:b3:
a4:c3:8b:05:ed:d7:f0:6d:54:66:9e:fb:d2:2d:cf:b1:a7:70:
4e:28:48:92:e1:bd:e3:e0:e4:8b:09:b4:b5:88:dc:e0:ac:e6:
01:92:1e:5f:83:34:ef:79:19:7a:8b:c6:77:8e:ba:8b:1a:2c:
a3:54:7f:5f:25:8e:f0:32:77:e2:18:a1:17:8c:3b:c0:ea:2e:
91:02:33:cd:ba:69:02:4e:bb:60:2c:82:1a:73:1b:d6:57:d8:
d7:cd:89:50:7e:dd:b3:5b:b2:be:95:31:ce:6f:35:25:df:0d:
92:62:83:e2:a2:c6:66:bc:9f:28:24:fd:13:75:23:dd:7f:2f:
89:6a:80:3c:00:28:9b:c6:2c:9c:79:69:ef:97:34:00:49:59:
c2:4b:cc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:15 2026 by rpki-client