Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/4zGh0MUBekk_HwtHmTkO_YAQ85M.roa
File: 4zGh0MUBekk_HwtHmTkO_YAQ85M.roa (raw, json)
Hash identifier: icZiFcOIbyfJDrtWOCLjWTmQXRjfFoXv0NM7bdtAKsM=
Subject key identifier: E3:31:A1:D0:C5:01:7A:49:3F:1F:0B:47:99:39:0E:FD:80:10:F3:93
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019F295378D148A09B626B805D9770E2F60D
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/4zGh0MUBekk_HwtHmTkO_YAQ85M.roa
Signing time: Fri 03 Jul 2026 18:52:43 +0000
ROA not before: Fri 03 Jul 2026 18:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210503
IP address blocks: 85.8.230.0/24 maxlen: 24
2a14:ec80::/29 maxlen: 29
2a14:ec80::/48 maxlen: 48
2a14:ec80:1::/48 maxlen: 48
2a14:ec80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:53:78:d1:48:a0:9b:62:6b:80:5d:97:70:e2:f6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Jul 3 18:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e331a1d0c5017a493f1f0b4799390efd8010f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:d3:41:50:85:43:f4:df:bf:70:48:a2:ec:
45:3a:72:fb:99:0d:52:57:55:db:d6:af:5e:64:c7:
c2:6a:4c:ca:66:ee:00:cb:0d:83:2f:2e:f3:d3:c0:
00:0c:0a:bc:2c:c2:37:34:3c:4a:ac:b8:ad:a6:25:
06:44:0d:fc:40:e7:31:ea:7c:2c:a1:bd:e3:0c:6b:
a1:62:07:9a:12:49:04:21:a2:42:ae:64:ce:e2:ee:
bc:59:37:2b:29:1e:b9:74:90:39:78:88:00:e3:96:
70:d4:b2:cd:80:2f:04:a0:f4:fd:3e:40:3c:10:16:
73:a0:1e:24:cd:32:c3:56:76:4a:43:5c:a1:79:1b:
c6:3f:dd:49:5a:2f:8b:c5:06:e1:5f:ce:2c:a6:97:
ac:ae:a2:98:60:9a:e8:2f:29:dc:25:42:5c:20:8b:
16:ab:20:e9:64:20:0c:bd:05:19:e2:a0:de:9e:be:
05:a1:33:d6:bb:66:96:51:01:db:61:b5:0b:c5:1e:
9c:88:0f:6d:b5:69:c3:de:b6:b3:51:b5:d8:b3:67:
c1:f8:da:fe:90:ca:14:0f:46:f2:8b:89:11:a1:34:
33:87:46:43:2e:a5:a7:7a:80:b3:62:08:39:53:5e:
69:ff:4f:c3:6d:46:99:46:f7:8c:da:4c:a4:dd:7a:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:31:A1:D0:C5:01:7A:49:3F:1F:0B:47:99:39:0E:FD:80:10:F3:93
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/4zGh0MUBekk_HwtHmTkO_YAQ85M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.230.0/24
IPv6:
2a14:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:a1:b0:0b:d3:8b:04:66:b6:6d:6d:e4:f4:72:84:7f:cb:dd:
86:6c:88:06:a9:70:db:7a:21:51:13:76:59:32:75:d4:0b:a7:
da:b1:10:b6:1e:63:77:7b:5d:3a:02:33:15:4d:03:e9:28:1c:
5a:79:d9:64:db:c3:c9:f7:3e:16:06:ae:bb:fa:f2:b9:30:c3:
09:72:cb:aa:00:ce:a7:8c:45:4b:79:4c:1b:79:2b:b6:d3:1d:
06:99:67:f7:3d:2e:18:ef:2d:7e:db:c2:bf:26:c3:9e:4b:29:
62:95:f3:41:36:9c:fd:cc:ca:a8:1c:c6:ac:33:a2:d7:7d:ce:
5d:13:d5:30:64:11:03:d7:5b:e0:9d:35:e8:f1:47:bb:36:e2:
f2:57:25:b5:04:ec:48:18:cf:f7:10:e1:95:dd:1d:c1:a9:d0:
b5:62:b1:5f:36:eb:19:07:d0:80:e1:96:b5:4c:d7:d7:b2:58:
b6:da:46:94:c3:43:fa:70:19:05:14:a4:34:f3:bd:4e:1e:f7:
6c:4d:b7:18:3c:04:22:72:e4:de:bc:63:95:4d:c7:79:55:99:
e4:aa:24:88:d9:c1:e3:25:85:85:f0:6f:14:5f:81:75:80:5f:
a7:d3:d7:1b:b5:a7:00:6f:21:ed:92:2b:fb:02:82:47:58:6c:
41:57:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:24 2026 by rpki-client