Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/4tHXUju7_s3qjkQe4-NIpaYhAJE.roa
File: 4tHXUju7_s3qjkQe4-NIpaYhAJE.roa (raw, json)
Hash identifier: vN0diyZ4e6V+TpP4bUpaYl39s216dCxvp13J59q3eqM=
Subject key identifier: E2:D1:D7:52:3B:BB:FE:CD:EA:8E:44:1E:E3:E3:48:A5:A6:21:00:91
Certificate issuer: /CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Certificate serial: 019CE80BBE570EF1952626961A5EB248009C
Authority key identifier: CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/4tHXUju7_s3qjkQe4-NIpaYhAJE.roa
Signing time: Fri 13 Mar 2026 16:33:29 +0000
ROA not before: Fri 13 Mar 2026 16:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207132
IP address blocks: 185.190.136.0/22 maxlen: 24
2a05:7a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:0b:be:57:0e:f1:95:26:26:96:1a:5e:b2:48:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Validity
Not Before: Mar 13 16:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2d1d7523bbbfecdea8e441ee3e348a5a6210091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:c0:ec:ab:79:5a:c6:f4:ad:89:b6:63:19:86:
40:ef:dc:5e:f6:52:6b:66:c8:7a:5b:68:47:1e:06:
38:4f:5b:1e:fc:99:96:9b:d7:c2:3e:98:cd:34:83:
49:0a:6f:4f:3a:0a:bd:25:eb:b4:76:58:de:7e:e2:
13:fa:a9:76:51:56:15:67:2b:e0:eb:87:56:7f:99:
ac:ba:28:bf:7a:ec:14:31:23:d7:a6:3c:87:9c:43:
0b:2a:1e:81:40:fb:3d:14:76:e8:56:ec:4d:cf:d5:
ce:a6:2c:14:4c:31:7b:12:36:1e:b8:a1:a2:00:9a:
5b:94:2c:db:f8:d1:d3:c2:e6:f1:bc:7f:82:a4:42:
94:1c:9e:0b:40:94:82:02:6f:b5:0a:11:38:61:e7:
4d:ee:ad:a8:5c:ab:e8:0b:eb:9e:a7:fd:ed:36:cb:
8a:c7:fe:df:78:47:85:29:2a:1d:e2:74:0c:d4:b8:
f0:20:73:7b:e3:e0:30:3c:29:fd:e1:b1:fa:a5:5e:
70:5a:92:b6:93:f4:32:20:7a:44:87:bd:03:bb:50:
68:6d:a3:52:e9:cc:28:76:2d:16:40:50:bc:95:35:
12:cf:d1:09:01:89:c2:7b:0b:46:3e:37:c7:5b:97:
83:99:d4:12:11:c7:1a:81:79:eb:27:07:f1:55:17:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:D7:52:3B:BB:FE:CD:EA:8E:44:1E:E3:E3:48:A5:A6:21:00:91
X509v3 Authority Key Identifier:
keyid:CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/4tHXUju7_s3qjkQe4-NIpaYhAJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.136.0/22
IPv6:
2a05:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
70:b1:e3:07:b2:26:95:20:8d:04:c4:55:0b:75:34:48:b8:77:
2e:81:43:d4:ca:9d:2d:02:a0:9f:fa:21:cf:9d:b2:40:ef:99:
94:fb:6b:24:5d:54:af:37:af:00:a8:1f:b7:40:60:c6:59:9a:
4e:db:dc:4d:4a:79:0a:13:31:08:9a:1f:91:b7:3a:ab:14:7b:
92:4f:c8:bd:aa:d6:58:9d:8e:dc:a6:13:b8:5f:0f:a9:34:51:
c2:7b:a7:5d:6f:db:be:f1:fd:98:e3:a7:5f:3d:e8:f8:24:cb:
d3:35:b6:e0:07:65:45:4b:cc:b2:71:8d:5f:17:7c:85:a0:e9:
b2:7f:e9:fd:bf:e2:60:62:48:d6:de:f1:ad:36:20:a1:d0:0d:
b1:df:61:84:cd:6e:10:1c:e6:08:20:06:31:6d:cb:c1:b2:a1:
86:94:b7:06:0b:eb:9c:d8:46:f1:d3:46:d0:7d:37:d1:3c:73:
d5:cb:23:f2:98:3e:94:ce:16:8f:74:80:c8:0c:7b:95:98:d5:
ef:80:08:18:81:a0:b0:ad:79:60:6c:e4:a0:ef:0b:91:93:b7:
b1:2d:8b:cf:fe:0f:a6:39:bd:16:fb:2a:45:36:d2:ef:74:97:
70:36:eb:07:32:25:5c:09:d4:cf:38:9a:c1:b3:15:f2:ea:9d:
73:0f:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:46 2026 by rpki-client