Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/4SlzM-sGWP46tyVv_wrUa4CabZA.roa
File: 4SlzM-sGWP46tyVv_wrUa4CabZA.roa (raw, json)
Hash identifier: Jx1fb+Jw8u6JyIBt5MEzG+uInp5htojQWTHAKQkPCzk=
Subject key identifier: E1:29:73:33:EB:06:58:FE:3A:B7:25:6F:FF:0A:D4:6B:80:9A:6D:90
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 01A1A1180AE07D5DD33B3B06F79FED7D5470
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/4SlzM-sGWP46tyVv_wrUa4CabZA.roa
Signing time: Tue 03 Nov 2026 11:07:49 +0000
ROA not before: Tue 03 Nov 2026 11:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6461
IP address blocks: 195.63.192.0/20 maxlen: 24
195.63.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:18:0a:e0:7d:5d:d3:3b:3b:06:f7:9f:ed:7d:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: Nov 3 11:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1297333eb0658fe3ab7256fff0ad46b809a6d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:95:23:e0:01:3f:87:df:09:ee:51:05:2a:
b7:47:ba:e9:56:b8:04:e2:c6:9e:31:6c:5e:37:10:
b4:7b:62:c2:5d:d1:b6:66:07:97:37:13:d7:8c:80:
90:33:65:27:e6:e2:39:8e:b1:7f:80:6f:df:1e:52:
3a:22:2d:94:13:31:81:97:6f:5a:9d:17:07:ff:2d:
85:5f:8b:24:b7:6b:f9:8f:0a:a7:1e:3b:b5:bc:f4:
62:8e:9f:b0:07:d8:fd:d6:d0:82:62:e9:a2:f4:bf:
53:94:06:ee:44:da:0e:1b:38:e8:d5:02:d6:1d:60:
e1:a4:5a:de:dc:75:91:c6:4a:ea:6b:8b:a4:11:8e:
73:7f:70:f3:83:7d:b4:bf:20:6b:e6:18:f4:c7:83:
31:1f:9f:00:5c:50:53:7b:17:59:37:d9:93:24:31:
cc:d3:98:cc:dd:92:1c:62:94:a5:c6:94:90:9e:93:
c7:37:a9:c8:07:6c:ae:b9:10:53:44:82:d3:56:53:
7b:5c:e8:6f:48:31:de:ac:e9:31:24:ba:6f:9a:3b:
27:4e:4b:44:34:58:a7:9e:5a:4c:40:bc:31:69:cf:
83:db:b8:66:8b:42:03:7f:b1:b1:e7:93:c8:72:41:
84:82:e9:ca:6b:e5:18:35:a0:6c:f9:7f:02:30:61:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:73:33:EB:06:58:FE:3A:B7:25:6F:FF:0A:D4:6B:80:9A:6D:90
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/4SlzM-sGWP46tyVv_wrUa4CabZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.63.192.0/19
Signature Algorithm: sha256WithRSAEncryption
e5:8f:4a:49:97:c3:04:88:c4:07:14:bb:14:43:ab:ff:e5:03:
d2:d5:22:5e:eb:76:d9:08:d9:01:01:8f:3f:e1:d6:05:27:78:
10:ba:d5:1b:5c:35:d0:e8:88:fe:00:5c:27:eb:cc:46:18:fa:
bb:2f:c3:57:66:62:e4:44:77:47:f8:c3:01:02:f7:36:95:29:
c2:5d:57:16:f2:bb:f4:c7:a8:7a:5c:5e:7b:85:00:3f:fe:48:
1a:87:3c:85:1d:ec:c1:92:da:fb:8e:54:ad:b8:1a:63:40:2f:
57:d9:fd:65:a7:89:08:20:db:ef:71:49:89:b2:17:1d:8a:d8:
4c:da:68:a6:bb:74:06:b0:5a:68:08:1f:b9:86:9d:0f:7d:3f:
34:70:44:81:88:6e:49:fc:3f:39:ca:08:fe:97:42:f6:bc:2f:
8b:71:85:25:d4:01:26:d3:a4:82:f4:67:d2:ed:df:e2:fd:60:
97:3e:a9:74:4e:be:d9:10:87:74:3d:d2:70:36:db:18:48:77:
a6:e4:27:cd:66:0b:b8:d6:f2:aa:0f:24:c6:33:97:84:ad:bc:
7e:a7:cb:9d:92:00:e2:b9:50:49:27:bb:42:a5:9b:ff:a4:53:
75:b4:ce:d5:2c:6d:4d:d0:21:d6:c9:5b:08:46:0d:cd:d3:75:
09:2c:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:41 2026 by rpki-client