Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/4HCRVHg_7Fpp7PvqVl5KuccIESk.roa
File: 4HCRVHg_7Fpp7PvqVl5KuccIESk.roa (raw, json)
Hash identifier: puBwqjPV6QqbrN+4fAjWbkC+7OOzoSwZ1Vj+oyvzRbs=
Subject key identifier: E0:70:91:54:78:3F:EC:5A:69:EC:FB:EA:56:5E:4A:B9:C7:08:11:29
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019DD5A5D8E5F70851B9EC63EA7BA22CDE0B
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/4HCRVHg_7Fpp7PvqVl5KuccIESk.roa
Signing time: Tue 28 Apr 2026 19:51:49 +0000
ROA not before: Tue 28 Apr 2026 19:51:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 141.98.151.0/24 maxlen: 24
212.66.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:a5:d8:e5:f7:08:51:b9:ec:63:ea:7b:a2:2c:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Apr 28 19:51:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0709154783fec5a69ecfbea565e4ab9c7081129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:b9:7f:0a:78:7a:9d:89:7e:b8:d8:15:93:
2b:87:f5:d4:ec:c5:1a:78:64:b8:91:1e:20:6a:0b:
f8:73:9b:2c:cb:87:e0:cb:f2:d7:dd:0a:6e:78:03:
de:37:db:9b:f4:56:e4:11:ec:8f:0f:3f:84:93:ad:
64:a5:67:1b:7c:0f:0b:22:28:53:b4:3a:58:79:22:
cb:3d:64:30:6b:11:58:04:53:a3:61:a4:c8:35:70:
2f:79:e1:2f:e0:7c:27:e7:e3:9f:b5:a6:5a:c8:75:
01:bb:dd:19:5d:2b:e1:eb:a8:7c:6c:a8:ca:27:8a:
12:5f:ed:aa:47:3f:0c:72:c2:7a:e9:12:0c:a3:11:
ac:5b:28:fb:e6:11:6a:06:1d:ff:dd:f5:d4:f1:d2:
a9:37:9e:ec:f0:62:64:d9:32:1b:64:4b:5d:00:04:
8f:61:dd:68:6a:94:b9:14:03:7f:c0:e7:4f:06:75:
89:08:e0:c1:4e:92:54:ca:6d:bb:5a:bb:bf:f3:29:
d8:d3:be:ab:cb:fc:97:4e:3e:39:03:9e:db:2d:fb:
3f:c2:0f:02:af:5d:15:b2:d5:19:66:42:b5:10:ae:
91:0e:6c:24:53:e9:6c:94:fe:04:e5:5d:b9:00:7c:
e7:5c:5f:78:a2:71:b5:89:de:e7:1f:f4:34:5e:4d:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:91:54:78:3F:EC:5A:69:EC:FB:EA:56:5E:4A:B9:C7:08:11:29
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/4HCRVHg_7Fpp7PvqVl5KuccIESk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.151.0/24
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f0:95:28:47:aa:a4:be:71:e5:64:d8:7e:c2:9a:56:02:2b:
5c:0b:6e:4e:55:34:40:c2:9c:e7:b6:4c:10:26:01:d0:95:24:
a1:7a:71:56:df:c4:a7:9e:37:7b:1d:4d:26:4e:a5:d1:13:0f:
cf:82:02:21:86:e4:26:80:cb:02:52:09:58:79:30:a4:9b:60:
e5:97:e6:88:ae:7a:17:33:20:78:a1:55:92:9a:3b:53:da:85:
dc:92:24:7c:53:b2:6d:d1:51:f8:c6:2f:bf:f0:c8:55:ed:63:
f0:a8:0c:57:d3:68:3c:5d:26:40:b9:5e:c8:a1:e5:99:ab:5a:
7a:a8:ee:d3:83:06:8b:31:ee:af:86:f7:9b:1a:7f:27:8c:aa:
83:ae:fa:8d:72:09:fa:92:ab:dc:e8:4e:3c:67:78:a1:8c:ac:
fd:32:a4:ad:fa:90:fe:d5:78:5f:5a:90:3b:a8:0a:f5:c2:5b:
a0:7c:04:d2:e1:f0:ed:07:76:76:3b:51:d7:d9:f7:64:ba:72:
ac:73:2d:58:c2:7f:80:bc:c7:b2:4a:16:46:f0:1d:51:8a:ed:
13:c7:17:b7:75:eb:4f:b8:ab:ba:a9:28:48:06:27:68:a3:c7:
b7:98:2f:b6:08:55:f3:4a:0b:31:89:49:88:68:55:87:a6:74:
43:63:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:59 2026 by rpki-client