Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4xd2VHjKpoK8dv28BbXgOPkMSuE.roa
File: 4xd2VHjKpoK8dv28BbXgOPkMSuE.roa (raw, json)
Hash identifier: aqArlLMarpqRWiIpxychPoFPzJ3xOeFHs6erD79AC54=
Subject key identifier: E3:17:76:54:78:CA:A6:82:BC:76:FD:BC:05:B5:E0:38:F9:0C:4A:E1
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019D3095353217A82AFB86C8C4519852A3CD
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4xd2VHjKpoK8dv28BbXgOPkMSuE.roa
Signing time: Fri 27 Mar 2026 18:36:17 +0000
ROA not before: Fri 27 Mar 2026 18:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50214
IP address blocks: 95.181.153.0/24 maxlen: 24
95.181.171.0/24 maxlen: 24
185.12.124.0/24 maxlen: 24
185.12.125.0/24 maxlen: 24
185.12.126.0/24 maxlen: 24
185.12.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:95:35:32:17:a8:2a:fb:86:c8:c4:51:98:52:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Mar 27 18:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e317765478caa682bc76fdbc05b5e038f90c4ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:50:10:be:66:c9:b3:45:72:9e:13:19:e8:
e5:8d:53:9b:43:e0:31:f4:f7:fa:78:46:b9:a2:23:
b6:e9:09:16:5d:a3:44:42:4c:b4:ca:f2:0a:23:43:
d7:09:43:4f:80:c5:4a:03:c1:02:2d:a3:c0:87:38:
0e:11:c3:01:55:a9:e0:55:aa:f8:1d:de:6b:c0:aa:
c5:d9:72:af:12:30:7a:fe:76:11:c8:14:38:d4:6c:
42:61:f8:3e:bd:70:30:d3:f6:19:2d:4b:e9:31:e9:
4b:8a:2d:63:5f:cc:84:82:af:9d:38:d7:e5:6e:ec:
b2:c2:5f:e0:82:26:ac:7b:61:0f:ad:8c:d6:cc:da:
e9:bf:be:3c:0c:09:93:55:f1:b8:ca:26:48:48:2f:
b3:78:1e:d8:11:be:85:bb:b2:2b:2c:4b:7c:cc:08:
d0:0b:66:eb:30:04:53:b2:13:82:3a:b6:98:31:ee:
79:7f:a8:84:77:ed:35:95:22:25:82:a9:f2:2b:3d:
f0:d1:48:82:05:0d:b5:cf:97:57:43:31:51:42:31:
7b:34:89:54:a5:73:23:4c:7f:2d:35:8c:5c:1e:5f:
18:67:c2:df:4f:b0:f6:43:3b:37:8a:8a:88:3b:34:
37:4a:67:0e:55:67:ac:97:5f:98:d3:ca:fe:cc:d3:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:17:76:54:78:CA:A6:82:BC:76:FD:BC:05:B5:E0:38:F9:0C:4A:E1
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/4xd2VHjKpoK8dv28BbXgOPkMSuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.153.0/24
95.181.171.0/24
185.12.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:64:de:cf:da:0e:78:89:0d:d8:92:e4:7c:f6:b1:46:8b:d7:
f8:69:84:f2:8f:f1:00:88:28:0f:3e:75:8b:01:2b:e2:fb:73:
bc:b1:92:6a:22:30:62:8b:1f:12:e2:16:25:14:fe:39:e6:2c:
fa:22:67:29:33:cc:c1:d4:5b:29:04:cf:3e:e4:d4:7f:ed:c1:
20:c7:1d:cd:2f:24:7c:c8:e9:80:4e:b5:c7:96:a5:c4:ee:53:
95:7a:c2:66:0b:03:c2:53:51:3d:fb:51:4e:1d:0f:d4:f1:9b:
d8:1e:2c:8c:53:be:5f:dd:a0:f8:c9:72:bd:af:b4:57:04:e9:
8e:5f:37:34:3f:74:1b:c4:b3:01:92:ba:7a:b5:e6:4e:90:dd:
33:6d:77:c4:cc:4d:33:73:0e:77:e7:d3:6f:7b:a6:b5:f3:8a:
2f:5b:c8:1b:cb:7c:e4:9d:88:1b:c7:2b:a6:ee:c8:67:be:43:
a9:50:20:03:1c:ad:cd:51:0b:4f:76:03:23:09:fc:2e:ba:3c:
8c:09:87:d7:c0:24:1b:ad:26:65:9f:79:7f:0a:2a:6d:7b:e8:
cb:81:41:3e:6b:dd:97:fc:b2:39:d0:df:c9:1f:17:5b:a2:34:
d5:c4:2c:70:1e:c5:c0:2c:aa:85:09:87:f6:1f:95:86:ba:cc:
ca:c5:24:7e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0wlTUyF6gq+4bIxFGYUqPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjYwMzI3MTgzNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzE3NzY1NDc4Y2FhNjgyYmM3NmZkYmMwNWI1ZTAzOGY5MGM0YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO5QEL5mybNFcp4TGejljVObQ+Ax
9Pf6eEa5oiO26QkWXaNEQky0yvIKI0PXCUNPgMVKA8ECLaPAhzgOEcMBVangVar4
Hd5rwKrF2XKvEjB6/nYRyBQ41GxCYfg+vXAw0/YZLUvpMelLii1jX8yEgq+dONfl
buyywl/ggiase2EPrYzWzNrpv748DAmTVfG4yiZISC+zeB7YEb6Fu7IrLEt8zAjQ
C2brMARTshOCOraYMe55f6iEd+01lSIlgqnyKz3w0UiCBQ21z5dXQzFRQjF7NIlU
pXMjTH8tNYxcHl8YZ8LfT7D2Qzs3ioqIOzQ3SmcOVWesl1+Y08r+zNNsZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOMXdlR4yqaCvHb9vAW14Dj5DErhMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvNHhkMlZIaktwb0s4ZHYyOEJiWGdPUGtNU3VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX7WZAwQA
X7WrAwQCuQx8MA0GCSqGSIb3DQEBCwUAA4IBAQBjZN7P2g54iQ3YkuR89rFGi9f4
aYTyj/EAiCgPPnWLASvi+3O8sZJqIjBiix8S4hYlFP455iz6ImcpM8zB1FspBM8+
5NR/7cEgxx3NLyR8yOmATrXHlqXE7lOVesJmCwPCU1E9+1FOHQ/U8ZvYHiyMU75f
3aD4yXK9r7RXBOmOXzc0P3QbxLMBkrp6teZOkN0zbXfEzE0zcw5359Nve6a184ov
W8gby3zknYgbxyum7shnvkOpUCADHK3NUQtPdgMjCfwuujyMCYfXwCQbrSZln3l/
Cipte+jLgUE+a92X/LI50N/JHxdbojTVxCxwHsXALKqFCYf2H5WGuszKxSR+
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:37 2026 by rpki-client