Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa
File: 4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa (raw, json)
Hash identifier: +BMKvF15LDUCBxzxeTxtgEpB32mqtwgEcOe7ln9nh3E=
Subject key identifier: E2:FF:AB:F2:D9:BE:3F:DC:E7:22:EF:52:A7:CB:B4:91:55:4F:70:60
Certificate issuer: /CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Certificate serial: 019C66A8A040EDBED9F87F0F9863D6731326
Authority key identifier: F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa
Signing time: Mon 16 Feb 2026 13:34:12 +0000
ROA not before: Mon 16 Feb 2026 13:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206458
IP address blocks: 185.134.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:a8:a0:40:ed:be:d9:f8:7f:0f:98:63:d6:73:13:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ebc7c1b654317622fff91123404eb6c427afa2
Validity
Not Before: Feb 16 13:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2ffabf2d9be3fdce722ef52a7cbb491554f7060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:e7:4a:30:94:66:fc:a0:ab:ec:eb:df:96:
1e:ae:e7:12:6f:3c:21:07:f7:e4:e0:ec:dc:13:f7:
3b:36:c5:0e:42:ae:b5:b2:1c:2c:2d:91:e6:49:d8:
5a:9f:62:c0:e0:38:67:ff:2b:ef:3b:fa:3e:75:f2:
6d:37:ac:c0:b2:b4:b7:94:06:d5:6f:63:d5:f6:38:
c9:7c:52:cf:e1:f8:33:32:10:4d:c0:cd:ae:8a:a3:
2b:86:a9:72:03:71:dc:f9:0f:5f:85:61:15:fe:66:
8c:c3:4e:a2:0c:5c:9d:23:2b:a9:95:e9:b6:76:2f:
ea:e2:20:c0:6e:4b:88:7a:61:0c:19:ee:4e:9c:58:
6c:cc:bc:db:d0:fd:bc:0f:3d:6f:f9:55:d8:b4:09:
27:44:4d:76:7b:13:1a:55:28:68:8e:c6:a3:22:f2:
9d:f7:c4:fb:7a:bc:8f:b5:41:c0:4b:a0:c7:fb:d7:
3e:56:0a:f8:74:81:27:42:5e:9c:ab:11:68:33:60:
27:3a:54:0e:19:1c:12:19:31:f7:26:1a:4a:03:d4:
df:cb:70:eb:ce:95:40:a6:c7:a2:f7:2e:33:c6:0d:
24:68:b2:d6:87:91:c9:68:4c:8c:0e:93:e9:36:bc:
80:5b:52:c6:33:1c:38:38:f4:80:46:8e:09:ec:22:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:AB:F2:D9:BE:3F:DC:E7:22:EF:52:A7:CB:B4:91:55:4F:70:60
X509v3 Authority Key Identifier:
keyid:F3:EB:C7:C1:B6:54:31:76:22:FF:F9:11:23:40:4E:B6:C4:27:AF:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-vHwbZUMXYi__kRI0BOtsQnr6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/4v-r8tm-P9znIu9Sp8u0kVVPcGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d7b838-dbae-4d02-a4b8-b823d8b5d9b9/1/8-vHwbZUMXYi__kRI0BOtsQnr6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:ab:ca:0d:02:31:ee:05:9b:b8:54:03:8c:64:e4:ad:a0:ef:
f4:fe:d8:02:44:ac:6a:eb:87:83:f1:f6:f8:c7:3b:0d:01:dc:
c0:85:95:08:98:bf:d9:f1:c1:1c:c7:0d:fa:df:71:ce:1e:ad:
88:ba:88:d8:3a:a1:98:66:96:92:0b:04:10:1e:b3:dc:87:72:
b9:63:d8:99:cd:31:a4:8c:e5:07:18:af:0e:77:cd:6c:ab:ba:
b7:3c:17:d8:1b:d9:78:64:2c:10:c6:b2:db:29:39:ba:ae:c4:
e4:c5:14:fc:94:38:b2:f8:db:f3:f7:54:95:cb:03:9c:bf:66:
1a:a6:66:c2:14:4f:25:34:67:b1:98:be:60:03:81:c7:ca:a1:
a0:c2:c4:fd:8e:d3:f6:01:9d:d9:3f:f5:45:0d:1b:5b:e6:52:
58:85:f9:f1:1a:15:ed:63:49:78:b2:18:3a:04:91:3b:d2:56:
f5:09:5f:2a:00:a1:0c:ec:55:81:af:78:04:d3:c0:4e:25:c1:
48:9f:aa:f2:fd:78:0a:4c:11:a8:26:cf:6d:71:52:aa:4f:88:
f4:9d:94:69:41:31:86:cc:a8:0b:05:99:61:9b:50:91:3c:a9:
86:e8:d8:f8:57:4f:72:f0:07:66:e9:f6:1f:5f:6e:61:66:7e:
aa:e9:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:12:47 2026 by rpki-client