Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa
File: p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa (raw, json)
Hash identifier: kAMjQBMCevRJPQ3xQ3upCSjuH0vkRwCESyxAvVo8NDI=
Subject key identifier: A7:85:AF:34:34:37:67:46:C9:68:50:93:64:EE:45:C5:83:DE:0E:30
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019F908CCC6EEA8216A909EB76E7AE08C96F
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa
Signing time: Thu 23 Jul 2026 19:56:14 +0000
ROA not before: Thu 23 Jul 2026 19:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 94.158.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:8c:cc:6e:ea:82:16:a9:09:eb:76:e7:ae:08:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 23 19:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a785af3434376746c968509364ee45c583de0e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:86:97:0a:ac:ac:1a:89:2c:7e:a3:f6:ea:
7e:c8:ff:f6:fa:f0:33:88:a6:b1:d7:49:c9:cf:69:
20:4c:06:46:55:6e:e1:1e:e0:e6:ad:53:25:36:7e:
cf:81:62:14:a3:ba:bb:39:e3:e7:bd:ea:30:68:7a:
63:4a:e7:d2:55:59:04:07:9c:ed:86:f8:69:de:62:
6a:55:d8:77:a7:03:69:ee:d1:c5:0f:c3:31:45:d4:
c8:e7:fc:39:00:02:d1:be:29:5f:75:b0:19:f9:77:
ba:5f:39:18:6d:f2:bc:77:8c:c0:76:b8:cd:4c:e1:
0d:0c:26:5f:bd:01:8c:a6:fe:b0:c3:65:e2:4b:4e:
44:2e:73:6e:35:28:51:9c:2e:3e:e8:73:bd:e6:9a:
77:db:46:61:01:85:0c:4d:d4:86:92:50:3f:e8:af:
99:a6:b1:a2:1b:6f:23:4b:c9:d9:e8:fd:df:51:6d:
2d:39:9b:20:64:ad:7c:1c:4c:3b:ff:f1:80:a7:46:
86:6d:29:5a:d1:82:0c:d5:c4:d4:68:67:56:45:8d:
b2:b7:fb:ee:c9:e2:9f:8b:90:67:b1:61:11:fd:f2:
e1:f5:00:44:8f:5a:5d:e3:52:22:73:b7:e6:6f:4a:
cc:c6:85:bd:86:54:d5:b0:a2:8d:c8:47:f9:92:ef:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:AF:34:34:37:67:46:C9:68:50:93:64:EE:45:C5:83:DE:0E:30
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/p4WvNDQ3Z0bJaFCTZO5FxYPeDjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.21.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7c:cc:ef:49:69:b5:ee:49:3e:40:db:4d:25:cc:f7:57:c8:
9b:1a:e3:cb:50:25:e3:b2:23:7e:bf:29:68:51:97:34:a8:cf:
64:d6:84:a2:1a:40:32:d5:cf:b2:45:88:96:76:f0:a8:8e:c4:
aa:89:f6:d4:47:72:7d:58:78:28:6d:a5:a0:1e:7a:9b:42:f3:
a8:b1:b1:1d:fd:45:19:5b:cf:c8:e5:ed:0c:a1:a6:d3:0e:91:
3a:26:c2:e6:b5:1e:f5:35:bc:54:e3:35:ba:13:f4:df:a5:90:
90:7b:7b:7e:a0:09:e9:d8:39:ff:3a:7d:42:c4:ec:a2:30:ff:
4a:e0:2b:a1:7c:cf:32:85:72:1f:15:ad:7a:21:51:7e:49:16:
bb:a2:9f:c1:d4:6d:b2:33:82:7c:dd:9b:28:66:40:d5:61:84:
3d:a7:c6:67:2a:5f:d0:17:45:7a:f0:f2:8f:c9:68:48:4b:e6:
8a:8f:d4:4a:2e:6d:b4:21:9f:0d:aa:fd:61:8d:06:57:8f:e7:
b4:d8:29:5e:bb:e2:0f:dc:75:f9:b1:cd:d2:63:9f:05:b8:1f:
3c:8e:7b:1c:2d:dc:5e:92:65:f5:83:7f:66:db:0e:59:63:14:
ac:01:7b:61:ec:aa:dd:ea:eb:d4:5a:87:20:51:65:88:6f:46:
9d:2e:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:32 2026 by rpki-client