Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa
File: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (raw, json)
Hash identifier: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=
Subject key identifier: 73:80:E6:E1:48:2A:50:BE:02:53:1F:67:38:E2:F9:B8:10:33:15:30
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F23B700C57FD301F9DD38F70DA65DC950
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa
Signing time: Thu 02 Jul 2026 16:43:43 +0000
ROA not before: Thu 02 Jul 2026 16:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219463
IP address blocks: 185.29.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:b7:00:c5:7f:d3:01:f9:dd:38:f7:0d:a6:5d:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 2 16:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7380e6e1482a50be02531f6738e2f9b810331530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:1b:f5:44:b7:3a:6b:80:6e:76:17:32:dd:
ba:2c:ae:00:1d:f3:c4:b5:b5:3b:ae:84:a9:18:9e:
1e:43:9c:da:30:0f:69:5d:45:a6:9f:f4:8e:42:d0:
5a:cd:0b:56:44:f4:db:83:2a:48:f3:f2:77:84:69:
ef:19:f5:c7:78:e3:a8:99:90:e8:cf:f3:8d:d7:29:
da:5f:54:7f:67:8e:9b:41:39:0b:55:b5:6f:14:44:
d9:f9:04:fa:4b:95:89:92:a0:96:9c:5d:49:41:d4:
4f:37:22:62:78:f0:44:fd:7a:5f:19:65:ca:81:7f:
46:5c:2e:4d:8f:19:91:78:e2:c6:5f:64:50:5c:c4:
8e:5e:5c:60:ad:e7:8e:a5:55:03:41:c2:8a:db:1c:
2e:47:cd:f2:b1:fd:56:71:6b:45:fc:f0:35:68:2f:
80:5f:35:72:23:e8:5b:d7:f1:de:a7:6c:72:8c:a7:
d5:83:3a:ac:ce:cc:92:fd:9e:0e:53:d8:ff:d6:26:
a9:29:cd:a6:fa:bd:0e:4d:87:94:c1:1b:07:aa:58:
97:ee:c8:5a:c4:0c:62:84:7f:0f:f2:a9:9a:9a:25:
60:66:12:1c:b5:4d:c6:96:e3:78:a5:a0:da:4d:84:
9c:4f:aa:db:13:35:ff:22:2a:37:c7:c9:5f:dc:58:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:E6:E1:48:2A:50:BE:02:53:1F:67:38:E2:F9:B8:10:33:15:30
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.253.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cb:56:1e:96:ff:21:fc:58:30:e4:9a:cd:e4:d8:ea:71:59:
1c:b5:e3:9a:d7:9f:ec:cc:f2:f6:ec:e5:1a:3a:d8:51:33:ee:
86:25:43:8e:8f:90:a4:e9:6f:35:f1:d3:8a:d9:20:64:0c:89:
e3:35:1c:21:76:2d:f6:db:f0:06:43:f0:c8:41:15:12:0e:57:
ed:92:41:c1:4b:0c:cc:a7:6a:7a:42:c0:e8:19:d4:9d:40:6d:
2f:5b:1c:99:29:74:3d:7b:39:b4:ac:99:d0:42:5f:b0:af:ca:
a0:be:51:96:0b:77:b0:fe:93:21:10:93:b9:81:59:78:8f:77:
5d:63:77:bf:6a:78:29:3c:55:79:07:c2:aa:3c:05:71:68:08:
2b:d9:b2:ec:ff:cf:ac:6c:1f:c0:0a:dd:42:24:19:40:c5:fb:
59:82:2e:97:49:d6:e5:cf:48:cb:a3:97:c4:1c:00:9e:17:49:
cc:28:0b:da:a3:45:7d:ab:de:99:a8:4e:80:e5:27:56:66:c2:
fe:02:ec:21:bc:37:1f:1d:fe:94:bc:55:fd:09:e3:d1:24:49:
5e:06:b6:d2:3e:7a:ff:7f:55:86:10:f8:0f:5b:03:df:f5:4a:
bd:f2:7e:43:2b:44:19:5d:7d:db:c6:0e:01:c9:23:dc:f8:fc:
e5:d2:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:07 2026 by rpki-client