Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa
File: i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa (raw, json)
Hash identifier: hpsDw2pZ0DBvAOgm+bdbqvL0ShlWV31Jn+1J+8xpu30=
Subject key identifier: 8B:86:4C:C7:C5:E2:43:E6:BF:CD:4B:F1:D8:CE:87:0A:AB:EB:63:BE
Certificate issuer: /CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Certificate serial: 019F26D6E53A8EA93C79A944E9A5382B4ED0
Authority key identifier: C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa
Signing time: Fri 03 Jul 2026 07:17:25 +0000
ROA not before: Fri 03 Jul 2026 07:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 185.57.136.0/22 maxlen: 22
185.57.136.0/24 maxlen: 24
185.57.137.0/24 maxlen: 24
185.57.138.0/24 maxlen: 24
185.57.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d6:e5:3a:8e:a9:3c:79:a9:44:e9:a5:38:2b:4e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4da0669cc5fc1da9eed8b0a133a61bfe3df5856
Validity
Not Before: Jul 3 07:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b864cc7c5e243e6bfcd4bf1d8ce870aabeb63be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:4e:39:e5:b0:10:b5:6b:a7:3b:c6:e0:94:
69:2a:a9:34:2d:86:ba:31:cb:d0:98:a4:c6:c0:c5:
d4:6d:94:70:e7:47:ca:3a:a1:66:e3:6a:96:23:4c:
9e:4c:55:73:ae:af:25:fd:48:6e:bd:44:7b:6b:33:
96:72:43:b4:84:b4:2d:d3:9a:ec:4c:02:07:fa:44:
d7:2b:0e:6b:86:fd:04:88:c3:3a:72:9b:12:da:0d:
c8:36:02:1c:63:e9:ac:f9:c9:33:f6:60:e2:89:d5:
02:b9:c6:33:b2:80:94:59:1f:52:a5:dc:79:e2:c4:
61:31:01:e5:91:bd:14:1d:ac:83:97:ff:f9:4e:0c:
2a:6c:b2:31:cd:0a:7f:b7:8b:8a:fd:74:c8:ab:4f:
d6:9a:df:38:e2:ab:d2:f1:69:dc:84:13:32:3c:85:
08:43:db:cf:6f:74:a7:3c:33:14:1d:24:e6:2c:3c:
6a:75:76:48:24:dc:08:4a:78:f2:a8:9f:87:40:c8:
00:a4:7d:e9:8a:6c:ef:cd:13:63:d5:f6:f0:18:20:
45:1f:58:d2:51:70:2c:db:9d:5d:8a:b1:ae:50:12:
2a:f0:06:85:77:ba:30:60:ea:09:ae:63:5b:53:c0:
45:6e:c4:88:49:64:1e:bc:16:8c:fd:5e:3e:dc:7a:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:86:4C:C7:C5:E2:43:E6:BF:CD:4B:F1:D8:CE:87:0A:AB:EB:63:BE
X509v3 Authority Key Identifier:
keyid:C4:DA:06:69:CC:5F:C1:DA:9E:ED:8B:0A:13:3A:61:BF:E3:DF:58:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNoGacxfwdqe7YsKEzphv-PfWFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/i4ZMx8XiQ-a_zUvx2M6HCqvrY74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0d49d5-2983-40ad-9d50-72b3e62a8e3d/1/xNoGacxfwdqe7YsKEzphv-PfWFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:83:e4:fe:18:d6:b9:b6:a4:4d:c5:47:ea:ed:d2:a0:47:42:
39:66:16:8e:10:0f:3e:b0:e6:be:dc:ab:59:90:88:5a:21:80:
b5:93:ec:59:ee:f9:44:d9:fd:a6:fd:4d:03:38:06:4b:79:67:
f9:46:2e:56:b4:c7:92:71:b1:a3:d1:4e:da:8a:6f:08:84:07:
16:0a:54:7e:ca:85:3e:93:67:16:bd:98:65:aa:f2:05:ac:83:
9c:94:0b:4e:ba:46:06:f1:75:b2:f7:cd:04:61:30:9a:69:2b:
33:41:53:9f:60:6d:3b:73:ad:f5:12:d2:a2:79:7b:1e:30:a0:
98:89:f8:3f:c2:7a:6e:e4:a4:95:46:73:b3:f3:75:e3:4a:12:
d2:11:22:d9:0b:73:ea:1e:57:d9:4b:8a:a7:41:fa:be:72:88:
c2:49:c1:17:7a:68:36:7e:ba:14:89:2a:c7:21:2b:6d:85:52:
c1:62:59:93:c1:bb:2f:c5:7a:76:89:90:4c:64:b4:3a:67:da:
ba:b9:19:d6:bc:5a:62:82:14:e5:cb:55:7a:2b:fd:28:2d:85:
00:19:f4:b6:f7:0d:f4:cb:6f:55:0c:90:7d:6e:6b:33:47:69:
e8:b1:7a:9d:f0:23:e5:f0:ce:79:83:40:5b:7d:ec:4c:d2:a9:
ea:b0:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:52 2026 by rpki-client