Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/4FzfPtC413CWfTNxMb3RNAtuy_w.roa
File: 4FzfPtC413CWfTNxMb3RNAtuy_w.roa (raw, json)
Hash identifier: uKk+yua2Mg4e/lr2ng0P7ndxn7QXKfCHtnvqsT7kTSE=
Subject key identifier: E0:5C:DF:3E:D0:B8:D7:70:96:7D:33:71:31:BD:D1:34:0B:6E:CB:FC
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019E1B6C841ABED7B730A4AB785B32111264
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/4FzfPtC413CWfTNxMb3RNAtuy_w.roa
Signing time: Tue 12 May 2026 09:02:36 +0000
ROA not before: Tue 12 May 2026 09:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43833
IP address blocks: 80.254.224.0/22 maxlen: 22
89.29.192.0/21 maxlen: 21
89.29.203.0/24 maxlen: 24
89.29.255.0/24 maxlen: 24
193.177.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:6c:84:1a:be:d7:b7:30:a4:ab:78:5b:32:11:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: May 12 09:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e05cdf3ed0b8d770967d337131bdd1340b6ecbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:bf:7f:50:f3:ab:0b:52:c1:f8:6e:43:c1:
4f:23:6f:2e:f7:a2:91:43:c6:0a:44:ee:1a:66:60:
53:2a:20:81:fc:ff:d6:86:2c:e0:a7:67:e7:60:6d:
64:eb:07:cf:5e:98:f3:64:6f:81:99:5a:e1:03:43:
0a:b4:5c:92:02:25:df:fe:a1:98:cd:0b:70:e0:82:
0a:8b:3b:34:67:77:bf:8c:46:fa:2d:7e:82:8f:d3:
cd:ff:6f:f9:47:83:72:11:33:e1:12:b0:c6:2a:0f:
35:77:04:13:16:1e:44:d0:79:14:5a:5a:85:ca:d5:
29:61:e2:c3:6e:67:3e:5e:93:63:cb:2b:76:f8:15:
51:32:0c:4e:b0:b3:f6:7b:fd:05:d4:d5:7d:04:ad:
8c:d2:02:64:02:77:73:a0:d1:45:0c:77:bf:85:e5:
cd:3f:e3:65:1a:f4:b9:f8:e7:9d:62:7a:15:1c:e0:
e5:e8:e7:58:a6:33:a0:72:e6:65:fa:60:fc:4d:2d:
33:69:c9:b7:7e:42:ad:a3:d8:b5:a1:9b:69:26:f8:
ac:d5:91:b1:86:85:ee:54:d2:73:6a:f1:2b:f8:71:
83:f0:49:4c:1f:7c:0c:4c:81:27:ab:4f:0e:eb:a9:
46:63:9d:d6:dc:07:46:39:6c:b8:36:37:3c:05:7d:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:DF:3E:D0:B8:D7:70:96:7D:33:71:31:BD:D1:34:0B:6E:CB:FC
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/4FzfPtC413CWfTNxMb3RNAtuy_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
89.29.192.0/21
89.29.203.0/24
89.29.255.0/24
193.177.212.0/22
Signature Algorithm: sha256WithRSAEncryption
74:44:0b:44:ff:de:8b:2f:44:5f:1d:3b:0f:80:4e:54:78:1d:
6b:0d:c5:3a:aa:6d:ab:31:a3:0b:43:8f:23:7b:c2:da:86:11:
82:f6:cb:15:7f:db:f3:96:47:6a:6a:6d:00:2b:bf:60:4b:69:
a2:11:43:e5:8c:a1:aa:ff:72:a0:28:14:ce:00:7f:1b:70:b2:
6a:c1:0c:e2:29:dc:14:63:53:de:c4:5c:c3:0c:9b:38:62:df:
74:54:c4:de:b6:a0:f9:1f:e5:d3:d7:f2:12:30:b1:bb:7d:21:
49:f5:ec:90:67:45:f4:df:8a:0b:bd:a4:18:3d:6a:10:b5:46:
9a:38:19:60:91:a7:45:ce:02:b6:69:e2:0c:d0:99:e6:46:09:
65:ec:dd:8b:1f:84:0f:d0:d0:b3:85:43:d9:c8:63:e3:d6:e0:
b5:ad:65:17:c0:52:ad:71:d1:8e:cc:c3:bc:a2:21:77:10:1c:
fe:7a:ff:ce:86:0e:10:c3:a9:a5:1c:56:87:8e:18:ba:99:2d:
cd:a3:bc:4a:b8:e4:c6:8e:69:ba:67:f8:ff:cb:ec:fa:a6:f2:
d8:d1:10:2a:20:b7:ea:66:63:0f:aa:57:8b:a2:0d:d2:52:42:
6e:a4:de:c3:fb:ac:9b:8f:45:52:6b:fb:5a:99:7c:00:33:fc:
d4:6a:3c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:35 2026 by rpki-client