Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa
File: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (raw, json)
Hash identifier: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=
Subject key identifier: E2:44:82:F3:D0:F5:00:E8:0F:8E:8F:D5:0B:6A:7F:D7:00:1D:C8:9E
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019D00DD807DD20A42A038E2F4B46626362E
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa
Signing time: Wed 18 Mar 2026 12:13:29 +0000
ROA not before: Wed 18 Mar 2026 12:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 91.132.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:dd:80:7d:d2:0a:42:a0:38:e2:f4:b4:66:26:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Mar 18 12:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e24482f3d0f500e80f8e8fd50b6a7fd7001dc89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:a6:b2:fb:fc:2c:a8:b2:70:58:b2:12:42:
7d:90:fc:69:f7:09:97:e4:85:5b:d8:3d:c8:56:2d:
87:05:c4:56:4d:9b:69:d4:b0:3a:e2:f2:22:5a:ac:
a5:08:41:2a:d0:11:ea:69:0e:b0:27:6e:d1:f1:c7:
c0:44:4c:ee:a4:b2:7b:6d:30:9b:7b:e1:51:be:9f:
44:21:8d:8d:9f:12:38:19:4f:5e:ae:f8:b0:e0:5c:
8f:0d:76:b5:5e:92:1e:d8:a5:52:d8:ee:2d:5a:af:
d1:88:a9:7e:09:fa:46:35:ba:6b:34:9c:e4:22:23:
af:77:69:34:ee:37:3e:bd:eb:37:6a:46:13:be:f5:
0e:a8:e8:64:11:c3:06:8c:73:20:da:c7:a0:f4:6b:
96:dc:5f:d5:e7:6f:2d:12:fa:b0:dd:2d:b9:18:ff:
bf:51:79:e6:fe:97:c8:57:3f:7a:60:72:5b:fc:69:
e1:fb:a9:e7:11:91:f5:0e:a9:80:91:68:19:81:e2:
92:2d:2b:a2:eb:38:30:0d:5a:6e:af:35:92:95:fd:
dc:82:23:81:5d:d0:3b:98:61:7a:81:de:26:0b:37:
18:86:32:6e:1a:d5:a3:eb:4c:24:58:20:af:85:4b:
fa:a6:e6:16:a2:a6:32:58:c7:12:af:71:be:39:64:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:82:F3:D0:F5:00:E8:0F:8E:8F:D5:0B:6A:7F:D7:00:1D:C8:9E
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.244.0/24
Signature Algorithm: sha256WithRSAEncryption
07:81:35:5a:4d:48:3a:d5:47:4a:84:bb:f7:1a:6d:6b:0d:0f:
4b:59:ff:f1:2e:6f:26:fa:7a:a7:2a:ef:5f:8a:b0:6d:ee:6a:
c9:d7:62:e8:e8:9a:15:36:08:3f:76:83:c4:e0:b1:10:9b:8d:
c6:e1:44:e4:99:59:1c:6a:ca:af:0b:92:e6:f5:06:34:f3:4a:
20:f4:27:cb:47:ae:29:af:a9:d4:3d:5b:d6:e0:3a:28:a0:fb:
c5:16:1d:77:c4:0a:25:e3:45:49:8d:d8:3e:bb:3e:47:c7:15:
76:40:74:7b:21:2f:4b:e1:9b:bd:01:1c:a3:12:ee:be:e4:d9:
f6:47:68:7c:72:10:c0:c1:7b:1a:1e:a5:96:61:1d:a9:76:49:
78:e2:c5:a4:56:fd:aa:fc:5f:90:be:23:6e:22:0b:b7:70:5d:
40:94:ff:1e:6e:f7:b9:5e:cc:dc:c9:8f:38:ea:e7:05:98:8f:
71:ea:13:62:ce:f8:e1:66:51:86:93:34:45:6a:af:7f:98:93:
d6:99:17:28:ef:35:de:db:10:d9:96:0e:5b:f3:4e:91:4a:1f:
5d:92:82:18:ce:cc:03:8e:09:72:4c:4f:80:ee:12:00:ca:06:
85:09:c6:ad:9c:6c:6b:b0:5b:95:89:b2:53:d6:ed:92:a5:55:
8a:20:62:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0A3YB90gpCoDji9LRmJjYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwMzE4MTIxMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ0ODJmM2QwZjUwMGU4MGY4ZThmZDUwYjZhN2ZkNzAwMWRjODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUqmsvv8LKiycFiyEkJ9kPxp9wmX
5IVb2D3IVi2HBcRWTZtp1LA64vIiWqylCEEq0BHqaQ6wJ27R8cfAREzupLJ7bTCb
e+FRvp9EIY2NnxI4GU9erviw4FyPDXa1XpIe2KVS2O4tWq/RiKl+CfpGNbprNJzk
IiOvd2k07jc+ves3akYTvvUOqOhkEcMGjHMg2seg9GuW3F/V528tEvqw3S25GP+/
UXnm/pfIVz96YHJb/Gnh+6nnEZH1DqmAkWgZgeKSLSui6zgwDVpurzWSlf3cgiOB
XdA7mGF6gd4mCzcYhjJuGtWj60wkWCCvhUv6puYWoqYyWMcSr3G+OWQ7OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJEgvPQ9QDoD46P1Qtqf9cAHcieMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvNGtTQzg5RDFBT2dQam9fVkMycF8xd0FkeUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4T0MA0G
CSqGSIb3DQEBCwUAA4IBAQAHgTVaTUg61UdKhLv3Gm1rDQ9LWf/xLm8m+nqnKu9f
irBt7mrJ12Lo6JoVNgg/doPE4LEQm43G4UTkmVkcasqvC5Lm9QY080og9CfLR64p
r6nUPVvW4DoooPvFFh13xAol40VJjdg+uz5HxxV2QHR7IS9L4Zu9ARyjEu6+5Nn2
R2h8chDAwXsaHqWWYR2pdkl44sWkVv2q/F+QviNuIgu3cF1AlP8ebve5XszcyY84
6ucFmI9x6hNizvjhZlGGkzRFaq9/mJPWmRco7zXe2xDZlg5b806RSh9dkoIYzswD
jglyTE+A7hIAygaFCcatnGxrsFuVibJT1u2SpVWKIGJY
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:46 2026 by rpki-client