Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4v62m0yV47JFNjOxIC4ebwJazVU.roa
File: 4v62m0yV47JFNjOxIC4ebwJazVU.roa (raw, json)
Hash identifier: tY33gy4qlnTQvZElqqEg/87nGsh5cYElBE+9Ba+qU7c=
Subject key identifier: E2:FE:B6:9B:4C:95:E3:B2:45:36:33:B1:20:2E:1E:6F:02:5A:CD:55
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1D5E31D37AD777A543B4459E0051E5163
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4v62m0yV47JFNjOxIC4ebwJazVU.roa
Signing time: Fri 13 Nov 2026 17:09:53 +0000
ROA not before: Fri 13 Nov 2026 17:09:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402931
IP address blocks: 83.98.128.0/24 maxlen: 24
83.98.130.0/24 maxlen: 24
83.98.132.0/24 maxlen: 24
83.98.135.0/24 maxlen: 24
83.98.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:e3:1d:37:ad:77:7a:54:3b:44:59:e0:05:1e:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 13 17:09:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2feb69b4c95e3b2453633b1202e1e6f025acd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:1b:5a:c8:c7:d7:5e:ff:6f:60:28:f0:b0:
85:b1:a2:dd:3d:fb:a6:ac:08:88:bf:a9:3b:83:c3:
9b:10:d8:6f:20:2d:aa:8b:09:3c:78:c7:bc:94:36:
91:24:ac:5f:08:88:2c:d8:dc:64:b2:98:bb:38:50:
b2:73:17:96:ac:fd:3c:d1:9c:3a:30:04:31:55:c4:
5b:b9:20:24:47:b1:08:13:f3:53:30:a7:78:0a:92:
a9:d4:b4:86:7e:0d:77:50:de:a1:61:2a:38:4a:bd:
2c:89:9a:ed:93:b7:32:ca:2d:81:f0:a1:9c:2b:4d:
1a:5d:49:27:cf:11:90:24:68:58:9b:ff:b6:fc:8f:
69:e2:4a:dd:b3:38:06:91:24:3f:db:b7:ec:91:e6:
e2:79:bd:d1:26:bd:da:a8:36:a8:06:54:5f:af:13:
a0:26:cb:2e:1a:ab:59:eb:70:a8:d8:59:2c:a9:8c:
7e:90:b7:c2:65:a6:b3:8a:ba:24:29:81:3c:01:af:
5e:e3:36:8a:40:7d:f1:db:07:e6:b2:5a:b8:17:f3:
a6:54:2d:62:2e:3a:dc:b0:56:49:eb:29:3c:fe:6b:
af:cf:89:4c:13:ed:f5:af:01:f8:90:bd:43:1f:71:
25:a7:af:63:cb:0f:3d:c1:f2:ce:a1:2e:b0:17:ae:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:B6:9B:4C:95:E3:B2:45:36:33:B1:20:2E:1E:6F:02:5A:CD:55
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/4v62m0yV47JFNjOxIC4ebwJazVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0/24
83.98.130.0/24
83.98.132.0/24
83.98.135.0/24
83.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e3:2e:9c:4b:ec:08:a0:7f:36:d4:ab:61:88:ea:ce:f1:3e:
de:5b:ff:e7:aa:fd:06:35:65:f7:3d:3e:1b:2b:12:52:b9:1e:
ac:19:6d:f7:27:85:a6:fc:96:45:6d:08:1a:b6:55:ae:a8:ac:
c5:a8:62:53:8a:48:38:03:02:fe:2f:e0:6d:8e:f9:a5:af:c3:
b3:db:11:83:61:8d:25:aa:70:f8:b0:b1:e6:27:fb:88:18:f5:
42:dc:04:be:50:3b:00:d2:ef:28:a9:76:c9:35:d0:7b:d6:d8:
f3:4c:56:0a:22:23:7f:25:17:ef:d7:2e:fd:2b:ea:18:2f:40:
83:65:19:20:6a:80:82:d3:69:de:c7:49:f9:00:b8:65:cc:02:
f5:98:fc:5a:4c:61:67:2b:53:fd:c6:2d:fe:a1:56:95:54:ac:
8b:d1:8f:22:18:58:88:fb:ae:be:e8:09:9c:62:4b:f2:d4:20:
f9:25:4a:c6:77:6f:19:2d:3a:e6:72:3c:8e:ca:e6:ac:4a:c9:
9f:56:96:03:11:98:ae:59:77:c9:cc:61:f6:4a:1c:c6:1b:f4:
8c:00:3b:3f:78:6f:71:7d:df:a9:c4:86:6f:fa:3a:1c:b7:4f:
dd:b0:98:fa:d2:19:16:71:07:87:29:59:38:20:a2:2c:0f:14:
64:37:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:34 2026 by rpki-client