Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4RkkBW7W-c2GgFTsAwmsKYbcqGA.roa
File: 4RkkBW7W-c2GgFTsAwmsKYbcqGA.roa (raw, json)
Hash identifier: IJM1Kwd6B35HtzwX7GuH+9mqeqXK0v793pdEAEkLYF4=
Subject key identifier: E1:19:24:05:6E:D6:F9:CD:86:80:54:EC:03:09:AC:29:86:DC:A8:60
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0CEF04FE3947C2C4EA677409DE46D308E
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4RkkBW7W-c2GgFTsAwmsKYbcqGA.roa
Signing time: Wed 23 Sep 2026 15:44:10 +0000
ROA not before: Wed 23 Sep 2026 15:44:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.140.144.0/24 maxlen: 32
138.124.187.0/24 maxlen: 32
2a0e:4001:100::/40 maxlen: 128
2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:f0:4f:e3:94:7c:2c:4e:a6:77:40:9d:e4:6d:30:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 23 15:44:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11924056ed6f9cd868054ec0309ac2986dca860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:ba:1c:67:91:37:0a:49:3a:c0:17:8b:b6:
50:54:a4:a2:b7:f6:97:8b:33:4f:d0:a8:b6:a9:ba:
ea:7b:01:42:0e:c3:bd:20:21:7c:42:df:af:78:f7:
8c:c0:23:64:11:ac:76:e2:0f:e7:22:f7:56:84:02:
6f:97:3a:d2:3b:7f:c3:a5:f4:c2:d8:fb:a6:e5:6f:
1c:53:08:de:ed:f4:66:6b:4b:69:79:2d:a6:46:f5:
c2:aa:92:78:7b:55:95:6e:8d:c0:0d:dc:7b:df:b8:
a0:64:5a:b0:ec:ab:bc:3e:32:28:b7:0a:ea:fa:be:
89:e3:ca:01:39:0f:26:bb:93:9c:7a:b9:c2:4b:a8:
2d:0e:0e:36:82:55:6f:31:7a:5b:9e:0c:d2:b7:6c:
e2:7a:5d:ef:50:14:78:f0:21:dd:ed:d7:19:57:87:
00:0f:ce:74:2f:32:82:dc:7d:42:ed:53:a4:2e:99:
a2:d9:f8:79:79:7f:a0:e6:a6:9f:6f:86:86:a7:63:
cb:60:a6:97:fa:66:53:0f:bc:f6:aa:9a:3f:b3:a7:
36:b3:77:89:42:31:e1:ef:25:82:54:2c:8f:d9:5b:
c0:ad:d5:29:a5:ca:f8:9c:5c:5d:ef:1b:e7:06:e1:
76:0e:5e:55:1c:64:91:b2:c4:ec:bf:be:d6:0f:38:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:24:05:6E:D6:F9:CD:86:80:54:EC:03:09:AC:29:86:DC:A8:60
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/4RkkBW7W-c2GgFTsAwmsKYbcqGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.144.0/24
138.124.187.0/24
IPv6:
2a0e:4001:100::/40
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:4b:a3:db:dd:d1:da:76:c6:a5:9a:e2:81:de:de:5b:9d:5a:
03:00:c9:5e:d1:cb:fc:08:3e:8a:3e:1b:73:5f:82:61:14:48:
fa:19:a8:d5:45:e8:0c:93:8a:70:ae:55:ad:88:46:d4:f4:32:
1d:ec:95:38:35:78:11:29:cb:c9:be:b3:26:18:3c:3d:4d:00:
f6:fd:30:2d:c8:98:0c:62:fc:10:e4:23:35:ba:f2:78:4b:58:
32:40:7f:60:d3:e9:e7:28:0d:bb:08:aa:29:a1:4b:2a:c3:a8:
65:5e:48:b1:ec:2f:d6:64:79:82:45:f9:c6:93:c0:76:a9:35:
fe:76:bd:54:5e:21:0a:66:2c:c2:d8:b9:12:65:a3:4e:5c:59:
6d:52:65:f4:ce:b8:a4:64:55:ad:1b:52:84:53:a1:7a:a0:7e:
32:50:7f:50:90:a3:33:a6:57:d5:26:6c:b8:33:99:73:64:cb:
f7:49:2f:f5:65:a8:8d:ff:d9:eb:f4:65:74:ca:ea:42:0f:59:
aa:ce:ef:43:cd:e0:a2:18:fc:6e:47:67:7c:62:96:ed:25:e1:
2a:f5:20:60:0f:ad:90:56:bc:50:b6:de:07:e9:09:6d:7d:1e:
db:3f:3d:4b:d0:87:1f:aa:9b:10:ab:7f:85:80:bd:47:58:3c:
29:f3:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:25 2026 by rpki-client