Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/4inhnc0WsBAw97-SeDoXHxYvgdc.roa
File: 4inhnc0WsBAw97-SeDoXHxYvgdc.roa (raw, json)
Hash identifier: /iM51VLg7HJ8ztk87Lm4bDvMywJ+LPB7Mld35hoQjWE=
Subject key identifier: E2:29:E1:9D:CD:16:B0:10:30:F7:BF:92:78:3A:17:1F:16:2F:81:D7
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019DFDAB6A08B320704BB4A5DF24921CA584
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/4inhnc0WsBAw97-SeDoXHxYvgdc.roa
Signing time: Wed 06 May 2026 14:22:42 +0000
ROA not before: Wed 06 May 2026 14:22:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 141.0.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:ab:6a:08:b3:20:70:4b:b4:a5:df:24:92:1c:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 6 14:22:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e229e19dcd16b01030f7bf92783a171f162f81d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:78:a9:ff:54:b4:d1:a8:c0:1c:8a:6f:34:
21:89:e6:1c:08:5b:03:6b:24:e3:dc:10:07:d3:a9:
43:3c:eb:cb:81:1e:b5:48:76:f0:61:70:d7:b5:c8:
18:4d:9a:ff:aa:ef:d4:27:8b:5c:8e:76:7b:2f:b1:
ba:cc:5e:10:2f:9a:40:f3:ed:5c:19:88:08:5f:f9:
06:5f:1e:17:56:71:30:58:3d:be:7c:f6:9e:fd:4e:
ba:41:3d:0f:6f:ee:1e:1f:7c:04:6a:d2:9d:62:54:
d9:ad:e3:49:9e:bb:a5:bf:9f:70:75:44:e5:fb:d1:
eb:32:af:0b:5f:21:f2:32:c8:98:64:59:bb:8c:fe:
03:ba:7d:ac:9a:70:da:0b:9c:a5:8a:8f:7a:db:40:
a8:ce:3d:2e:e5:9c:37:28:39:77:16:75:33:51:38:
f3:6b:25:25:92:2d:53:71:3c:4c:fb:3d:8e:29:8f:
2d:5f:9f:a7:00:14:e8:ff:4f:51:8a:ba:3d:79:ae:
47:50:c2:77:41:53:ba:7f:f6:d5:f4:5c:e1:c2:91:
56:56:93:3c:98:21:6f:c6:a4:86:ca:90:f5:8b:61:
e0:e5:b1:35:2e:6b:20:7b:4f:0a:c4:4d:fd:f9:f6:
4e:40:ed:6d:5d:00:3c:1c:49:3f:b0:2c:d0:93:2c:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:E1:9D:CD:16:B0:10:30:F7:BF:92:78:3A:17:1F:16:2F:81:D7
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/4inhnc0WsBAw97-SeDoXHxYvgdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b2:44:3c:36:1c:11:ac:f7:53:11:c6:2e:b8:2a:f0:e8:66:
dd:d7:4c:51:71:03:e2:31:96:ad:db:3f:97:dc:01:cb:33:58:
62:32:f1:50:77:67:83:bb:66:64:e7:c4:16:69:5b:c0:d7:b5:
b3:ed:e7:4c:8d:4f:09:9c:ed:eb:4d:8b:e8:f4:8a:12:01:5a:
ce:fd:65:ed:a7:ef:53:e0:76:96:b3:d9:7f:9f:c0:a4:74:22:
35:02:40:53:c0:66:5c:62:8e:e6:e2:d4:c1:ed:c6:d6:0c:8d:
a1:78:67:38:f4:43:62:c8:84:3f:02:4a:a2:19:e2:1c:8f:72:
12:00:c0:32:a5:0b:45:62:fc:a5:c6:4d:eb:de:86:99:3d:d2:
6d:f2:23:d6:42:d9:30:26:de:be:b6:8e:83:22:65:b6:43:4b:
f5:ae:63:e7:6f:87:d8:60:b0:ae:f9:99:8e:76:77:d8:f1:8a:
cf:c1:9b:f7:46:8b:60:cf:bb:c7:fb:d2:b8:2e:d6:7a:ab:d3:
e5:9c:1a:e9:49:73:7b:43:f4:f7:a9:7c:38:93:e4:6e:62:3e:
39:25:1c:55:68:b8:2e:1d:9e:27:d6:f6:cd:73:0a:06:c6:ca:
67:aa:4b:27:be:58:43:d0:4b:4f:66:d2:d9:63:4c:b2:07:b5:
5c:35:e8:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ39q2oIsyBwS7Sl3ySSHKWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5
NTQwM2UwHhcNMjYwNTA2MTQyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjI5ZTE5ZGNkMTZiMDEwMzBmN2JmOTI3ODNhMTcxZjE2MmY4MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08d4qf9UtNGowByKbzQhieYcCFsD
ayTj3BAH06lDPOvLgR61SHbwYXDXtcgYTZr/qu/UJ4tcjnZ7L7G6zF4QL5pA8+1c
GYgIX/kGXx4XVnEwWD2+fPae/U66QT0Pb+4eH3wEatKdYlTZreNJnrulv59wdUTl
+9HrMq8LXyHyMsiYZFm7jP4Dun2smnDaC5ylio9620Cozj0u5Zw3KDl3FnUzUTjz
ayUlki1TcTxM+z2OKY8tX5+nABTo/09Riro9ea5HUMJ3QVO6f/bV9FzhwpFWVpM8
mCFvxqSGypD1i2Hg5bE1Lmsge08KxE39+fZOQO1tXQA8HEk/sCzQkywAswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIp4Z3NFrAQMPe/kng6Fx8WL4HXMB8GA1UdIwQY
MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt
MzhlMDY4NTM2ZTZiLzEvNGluaG5jMFdzQkF3OTctU2VEb1hIeFl2Z2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi
LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjQC8MA0G
CSqGSIb3DQEBCwUAA4IBAQALskQ8NhwRrPdTEcYuuCrw6Gbd10xRcQPiMZat2z+X
3AHLM1hiMvFQd2eDu2Zk58QWaVvA17Wz7edMjU8JnO3rTYvo9IoSAVrO/WXtp+9T
4HaWs9l/n8CkdCI1AkBTwGZcYo7m4tTB7cbWDI2heGc49ENiyIQ/AkqiGeIcj3IS
AMAypQtFYvylxk3r3oaZPdJt8iPWQtkwJt6+to6DImW2Q0v1rmPnb4fYYLCu+ZmO
dnfY8YrPwZv3Rotgz7vH+9K4LtZ6q9PlnBrpSXN7Q/T3qXw4k+RuYj45JRxVaLgu
HZ4n1vbNcwoGxspnqksnvlhD0EtPZtLZY0yyB7VcNehD
-----END CERTIFICATE-----
Generated at Tue May 12 22:33:01 2026 by rpki-client