Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/J7ML0tmTR-IBOewX8YYHs4nBV_4.roa
File: J7ML0tmTR-IBOewX8YYHs4nBV_4.roa (raw, json)
Hash identifier: kpDR+GHWgBfokp5uTGzbc36LisYfrVXSCREvmPNgnHE=
Subject key identifier: 27:B3:0B:D2:D9:93:47:E2:01:39:EC:17:F1:86:07:B3:89:C1:57:FE
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D007E49C0CB91D657F30F8F30DB0BD6F8
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/J7ML0tmTR-IBOewX8YYHs4nBV_4.roa
Signing time: Wed 18 Mar 2026 10:29:29 +0000
ROA not before: Wed 18 Mar 2026 10:29:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 158.173.49.0/24 maxlen: 24
158.173.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:7e:49:c0:cb:91:d6:57:f3:0f:8f:30:db:0b:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Mar 18 10:29:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27b30bd2d99347e20139ec17f18607b389c157fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:55:05:a3:e0:61:7b:ed:fc:97:46:2b:0e:
4d:0b:9e:d8:79:c7:45:3d:31:16:d0:90:be:12:4a:
2c:b1:0c:90:9d:ba:ee:e7:cd:77:ff:b4:9f:32:59:
97:e3:f8:48:1a:33:ba:3f:6e:e4:90:6b:4a:36:80:
e9:ec:e1:88:2e:69:47:cd:e1:e4:d4:ca:45:89:77:
ec:dc:c7:bd:7e:6c:16:65:ef:d8:e9:60:67:54:52:
80:10:12:2a:c2:90:15:86:80:77:3d:21:95:53:ee:
79:ec:d1:ae:19:2b:6d:d8:15:8a:3d:49:02:2f:d2:
d5:5f:49:bc:19:4e:ac:eb:2a:5b:0b:c9:68:24:ef:
62:61:2b:c8:97:21:89:33:c4:7a:6b:d8:3f:ca:13:
9c:90:f6:29:43:e0:9e:83:14:60:5b:a1:3a:9a:98:
67:54:ce:cf:a9:6e:be:98:33:c9:65:46:4f:8c:2d:
0f:2c:dd:ff:33:3b:4c:32:af:6d:ed:3f:d9:b2:2e:
42:28:1c:bf:5e:9e:29:1f:b2:3d:54:a9:75:df:3a:
63:c0:c2:c9:59:be:5f:60:7a:eb:72:58:24:52:33:
69:77:9f:23:4e:ca:cd:25:0e:9b:bb:db:7d:38:a0:
db:5e:da:3c:c3:fc:f8:f3:92:fa:5f:23:ee:99:e0:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:0B:D2:D9:93:47:E2:01:39:EC:17:F1:86:07:B3:89:C1:57:FE
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/J7ML0tmTR-IBOewX8YYHs4nBV_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.49.0/24
158.173.74.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5e:ee:09:7d:b6:63:25:63:cf:2f:30:23:07:bc:b6:d7:71:
c3:25:6a:4e:4b:62:12:64:c0:d2:bc:e7:1c:78:f8:68:96:ef:
52:8e:b0:d3:d4:b6:0a:8c:7d:46:b0:6e:82:0c:00:d4:78:8c:
8b:21:cd:b0:bc:6f:23:0b:2a:88:cc:1c:0f:5b:d1:7f:b5:eb:
8b:3a:84:3a:63:ba:87:db:a4:0e:ca:4b:aa:ac:72:2d:f7:1e:
3d:3f:d5:ab:1f:91:e6:bb:e8:22:0a:27:00:85:38:d7:cf:69:
af:67:18:fa:21:74:41:d2:fa:9a:11:ea:24:98:e4:10:64:0a:
8d:95:35:a3:da:45:eb:82:09:08:67:d3:be:3c:85:cc:4c:b4:
88:a8:ac:1e:b7:c3:40:a4:d7:8e:91:64:0b:dd:ff:f3:c5:2a:
99:74:18:29:3c:db:2e:27:1f:e1:1d:c0:98:79:bd:5a:23:4e:
21:cc:2c:bf:1c:69:b1:2c:61:01:ff:78:51:e8:0c:ec:23:e3:
d5:79:f7:a0:50:e9:5c:97:76:70:8d:f9:cf:14:3f:4f:97:54:
18:d5:d2:ac:49:01:6c:7b:65:57:b3:32:ba:dc:1b:e7:5e:71:
cb:cc:e4:ef:79:44:fa:e6:d5:03:3f:f3:94:bf:0c:61:47:ea:
48:db:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:00:48 2026 by rpki-client