Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/4F4qBS1aUOeI4r2IYjZ440HEYYc.roa
File: 4F4qBS1aUOeI4r2IYjZ440HEYYc.roa (raw, json)
Hash identifier: 8Hh9bMFx7Obxr6Uz1wbDd5w4WNADW1KEkIRWrr5hPME=
Subject key identifier: E0:5E:2A:05:2D:5A:50:E7:88:E2:BD:88:62:36:78:E3:41:C4:61:87
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F236885F2B3AA80BCE6622CA2F5BC0706
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/4F4qBS1aUOeI4r2IYjZ440HEYYc.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51338
IP address blocks: 82.193.81.0/24 maxlen: 32
82.193.81.0/25 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:f2:b3:aa:80:bc:e6:62:2c:a2:f5:bc:07:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e05e2a052d5a50e788e2bd88623678e341c46187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:ef:a4:eb:83:06:96:a4:86:e2:aa:89:5b:
ea:0d:20:85:62:f0:a3:ae:e7:f0:de:68:a7:79:6b:
e5:fa:56:ef:34:06:d3:0c:b2:93:70:f5:82:ac:8d:
0c:01:fb:5c:7a:61:d3:c6:dc:04:03:f0:b6:8b:5f:
6b:bc:1d:d3:3c:05:59:71:86:03:0a:3e:d1:b3:2b:
95:3e:20:26:00:62:40:79:fb:21:c3:dc:b6:56:cf:
c4:70:73:d4:68:c8:16:fe:84:8a:af:d8:10:6b:bf:
0f:e3:82:2a:64:19:0f:a2:c2:6c:ae:4f:10:3f:1b:
68:70:4c:2e:98:88:17:d6:29:4f:aa:ca:df:a4:b3:
eb:3d:42:14:30:16:a3:3a:a9:15:e0:a0:69:11:d1:
94:66:c4:82:fd:03:d6:c0:ad:f7:19:16:fc:8d:5b:
72:21:5e:80:56:ad:a7:b0:28:20:31:79:06:c8:e3:
45:6f:20:f4:f1:e5:04:fb:f3:8f:38:ba:00:b6:6f:
fa:d6:4d:1c:76:9e:85:a0:84:0e:37:7b:98:c1:02:
ec:ef:80:05:9f:e7:fa:53:03:a0:7d:d7:59:18:10:
c9:87:a1:c5:3f:13:01:4c:d8:f9:6d:09:6f:98:6d:
f4:93:f1:47:7b:7b:e0:71:12:aa:2e:18:81:8b:58:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:2A:05:2D:5A:50:E7:88:E2:BD:88:62:36:78:E3:41:C4:61:87
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/4F4qBS1aUOeI4r2IYjZ440HEYYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2e:93:e8:3f:c6:95:aa:2a:9b:cd:df:2c:56:18:11:5f:53:
23:1a:3e:66:35:62:8c:0d:8f:30:48:b5:13:33:29:d1:61:31:
3b:4b:03:27:3e:7e:39:21:09:3a:77:9d:43:5c:4e:ca:29:bd:
76:cd:f0:80:81:f8:6f:7e:be:d4:69:47:7a:f2:e3:4b:fd:bd:
3f:50:bf:58:a9:a5:4a:57:4e:ba:74:af:7f:e4:02:e4:fb:25:
ba:ad:ac:16:69:d7:f9:f8:16:d1:22:9a:26:c4:41:37:dd:8a:
e7:90:70:20:0f:3c:57:83:cd:c1:ec:8c:20:d2:a6:1f:37:a0:
ce:02:5d:b3:ff:cf:dd:e8:4d:b9:6b:fc:54:00:bb:f7:9a:c8:
5d:eb:85:66:79:b8:c3:ba:36:9c:3b:9d:2d:bf:52:f9:60:38:
44:67:6c:d8:df:79:e4:fd:54:49:45:ca:30:14:01:77:27:eb:
3b:27:05:68:dd:be:85:d3:68:e3:4e:d8:83:f2:77:80:c4:f7:
61:cd:d0:81:7e:7a:25:6d:79:72:14:01:b0:37:c9:76:ed:b0:
16:97:81:09:b2:e6:87:12:61:53:91:25:d1:99:86:07:93:60:
5d:93:f6:07:39:9b:2c:47:f9:76:b4:e4:cd:35:73:fc:39:80:
67:df:e6:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIXys6qAvOZiLKL1vAcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzBmZjA4OTA3YTk4NGI4ZTc3NjNlN2FhOGE5ZmM4YWY1
MWVkYTYwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVlMmEwNTJkNWE1MGU3ODhlMmJkODg2MjM2NzhlMzQxYzQ2MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS/vpOuDBpakhuKqiVvqDSCFYvCj
rufw3mineWvl+lbvNAbTDLKTcPWCrI0MAftcemHTxtwEA/C2i19rvB3TPAVZcYYD
Cj7RsyuVPiAmAGJAefshw9y2Vs/EcHPUaMgW/oSKr9gQa78P44IqZBkPosJsrk8Q
PxtocEwumIgX1ilPqsrfpLPrPUIUMBajOqkV4KBpEdGUZsSC/QPWwK33GRb8jVty
IV6AVq2nsCggMXkGyONFbyD08eUE+/OPOLoAtm/61k0cdp6FoIQON3uYwQLs74AF
n+f6UwOgfddZGBDJh6HFPxMBTNj5bQlvmG30k/FHe3vgcRKqLhiBi1i6xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOBeKgUtWlDniOK9iGI2eONBxGGHMB8GA1UdIwQY
MBaAFFbA/wiQephLjndj56qKn8ivUe2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvNEY0cUJTMWFVT2VJNHIySVlqWjQ0MEhFWVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsFRMA0G
CSqGSIb3DQEBCwUAA4IBAQAVLpPoP8aVqiqbzd8sVhgRX1MjGj5mNWKMDY8wSLUT
MynRYTE7SwMnPn45IQk6d51DXE7KKb12zfCAgfhvfr7UaUd68uNL/b0/UL9YqaVK
V066dK9/5ALk+yW6rawWadf5+BbRIpomxEE33YrnkHAgDzxXg83B7Iwg0qYfN6DO
Al2z/8/d6E25a/xUALv3mshd64VmebjDujacO50tv1L5YDhEZ2zY33nk/VRJRcow
FAF3J+s7JwVo3b6F02jjTtiD8neAxPdhzdCBfnolbXlyFAGwN8l27bAWl4EJsuaH
EmFTkSXRmYYHk2Bdk/YHOZssR/l2tOTNNXP8OYBn3+ZY
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:59 2026 by rpki-client