Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4ppnlbk9FIbJdUNSVTSk5Mv3K9c.roa
File: 4ppnlbk9FIbJdUNSVTSk5Mv3K9c.roa (raw, json)
Hash identifier: MrHPtBZU8gJeFe5MFqsX4sWX1PUvI4tOdauRrNjuucg=
Subject key identifier: E2:9A:67:95:B9:3D:14:86:C9:75:43:52:55:34:A4:E4:CB:F7:2B:D7
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019DCDFA9DE0F2AF8DE77DE1B63BE645247B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4ppnlbk9FIbJdUNSVTSk5Mv3K9c.roa
Signing time: Mon 27 Apr 2026 08:07:26 +0000
ROA not before: Mon 27 Apr 2026 08:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45054
IP address blocks: 45.159.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:fa:9d:e0:f2:af:8d:e7:7d:e1:b6:3b:e6:45:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 27 08:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e29a6795b93d1486c97543525534a4e4cbf72bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:aa:fe:a7:99:d5:36:24:b8:b5:61:f9:23:
33:e8:01:fb:74:c4:6d:ff:ed:1d:79:e8:42:79:d6:
0b:a0:fc:7e:1f:f8:a5:79:d6:f6:ec:19:87:b7:8f:
43:5b:44:e0:be:42:e8:e1:47:90:f1:26:b8:78:92:
3f:1c:67:01:81:4b:8e:c7:12:ff:11:62:61:12:cb:
c9:7d:a7:21:83:15:8a:ab:1b:2a:38:ea:4b:4b:d3:
74:f9:2a:ae:7f:05:57:db:89:05:04:ae:02:94:9a:
41:81:c5:26:d7:66:62:f7:77:21:1a:55:04:d9:c1:
1d:86:88:06:1c:0b:94:45:8d:21:7e:e9:71:b3:b4:
8d:13:0a:73:da:83:4b:cf:20:5c:ed:76:fa:de:7c:
3d:1a:11:0f:b7:fa:c1:5e:bd:e2:46:5f:6b:77:7b:
b5:da:67:38:32:9b:05:a9:37:f5:24:cb:fe:73:31:
5f:69:a7:a8:b5:be:7a:83:58:ea:5b:04:fc:5c:1b:
a2:83:97:b5:6c:2e:48:3d:58:1a:f8:7e:56:cf:b6:
19:ba:5f:ed:da:e7:b1:e9:07:97:d0:bb:25:e4:ab:
ad:84:48:c8:46:e2:89:67:81:d9:14:b4:18:da:05:
64:87:dc:40:69:ff:65:32:df:05:0b:5e:27:b2:e0:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9A:67:95:B9:3D:14:86:C9:75:43:52:55:34:A4:E4:CB:F7:2B:D7
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/4ppnlbk9FIbJdUNSVTSk5Mv3K9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.200.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6a:bb:1f:a2:d3:8d:18:7f:df:14:67:69:26:95:ff:7d:1e:
a2:70:0c:73:c7:2d:46:ca:ea:60:4d:95:e8:77:cb:28:eb:42:
3f:6f:9f:dc:76:19:32:66:66:b9:e9:99:f5:39:b7:6d:cb:f3:
dd:9d:d6:7f:cf:1e:7d:3e:ae:7a:f9:e3:14:f4:b5:3e:e0:3b:
25:e4:a8:e4:f1:e4:08:7a:b5:90:e7:a0:b4:31:50:79:86:67:
21:03:9e:23:7a:1b:eb:f3:02:c6:89:6d:26:58:0e:85:e0:3c:
ec:b0:4e:82:6c:06:cb:03:41:8f:1f:56:6b:a8:27:2f:bf:8c:
cf:4f:fe:01:47:cd:df:39:2b:14:de:ea:b1:f7:09:86:55:80:
33:b6:21:f6:7a:55:30:18:a2:a9:da:3c:ec:2f:8b:92:b0:cc:
56:f7:cf:0c:dc:66:2c:10:3f:60:76:e7:eb:f6:c8:d9:72:12:
02:aa:0d:64:dd:8a:46:c9:bb:49:e0:8a:4d:90:35:cb:a1:82:
da:49:d4:d6:35:cc:05:52:d6:59:1b:95:fb:4f:93:89:e9:f9:
1b:4f:e6:fe:85:18:e5:c1:e9:0b:76:fc:57:7b:cc:0f:a0:f3:
e3:20:e5:38:74:49:99:2e:ec:50:11:bc:c2:1b:da:16:5e:6b:
14:61:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:17 2026 by rpki-client