Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4Fi_uUvzVLqSnxAXHW--tsyk6dE.roa
File: 4Fi_uUvzVLqSnxAXHW--tsyk6dE.roa (raw, json)
Hash identifier: 1Xe/dXNvUpbn21zRQgFC13S75YhncbTEPGLtM6Ne5jM=
Subject key identifier: E0:58:BF:B9:4B:F3:54:BA:92:9F:10:17:1D:6F:BE:B6:CC:A4:E9:D1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A182F5A82949CE795E17A62044E1867E0C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4Fi_uUvzVLqSnxAXHW--tsyk6dE.roa
Signing time: Wed 28 Oct 2026 14:41:39 +0000
ROA not before: Wed 28 Oct 2026 14:41:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41798
IP address blocks: 80.71.150.0/24 maxlen: 24
91.212.166.0/24 maxlen: 24
176.100.42.0/24 maxlen: 24
186.243.229.0/24 maxlen: 24
186.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:f5:a8:29:49:ce:79:5e:17:a6:20:44:e1:86:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 28 14:41:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e058bfb94bf354ba929f10171d6fbeb6cca4e9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:c8:8d:43:6c:49:6e:fc:7b:11:08:7d:d3:
90:db:91:fa:bd:3f:9c:13:69:ab:e0:b5:49:3e:d7:
ba:e8:ea:ae:6a:e9:ce:7e:82:77:af:3a:df:f2:69:
4c:bb:0a:42:3e:1f:5f:c6:84:e0:7e:14:dd:41:b6:
9d:df:6a:21:21:e0:22:ae:43:9e:64:d3:aa:0b:54:
52:fe:97:39:9a:45:b4:4e:d4:c6:a6:19:a4:0f:08:
10:6b:6b:53:07:04:9b:54:5d:ef:bb:20:70:0c:01:
c6:3c:42:fc:ad:68:b2:1b:4b:79:4f:66:31:70:8a:
16:dd:4e:91:0c:1a:ea:ea:1d:8c:b0:54:99:c5:4d:
e4:75:3e:10:56:28:a3:d5:64:d7:9d:6e:4b:76:c1:
44:d2:da:d9:2a:02:f5:c8:8b:df:e0:61:b9:27:c8:
35:46:ef:36:55:9b:29:e0:f1:ae:a3:1b:ef:94:aa:
69:52:fb:4d:6a:f3:e5:03:20:61:30:2b:7c:d2:fc:
d0:71:bb:16:72:32:93:bc:c4:ab:c6:89:61:66:71:
88:08:5b:2b:93:c5:82:30:cd:3c:86:0f:40:ab:55:
93:92:33:b1:63:2f:87:1e:22:2c:a3:4a:61:9a:53:
42:32:c7:21:1f:f6:25:a3:b5:be:0b:48:77:e8:82:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:58:BF:B9:4B:F3:54:BA:92:9F:10:17:1D:6F:BE:B6:CC:A4:E9:D1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/4Fi_uUvzVLqSnxAXHW--tsyk6dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.150.0/24
91.212.166.0/24
176.100.42.0/24
186.243.229.0/24
186.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
61:98:85:ac:ac:30:48:9c:5a:69:90:fc:72:0a:4c:0b:76:19:
05:ec:10:d7:02:68:49:58:f8:07:0b:02:6c:fa:38:92:1c:f1:
fa:69:4b:34:2e:ff:36:62:9f:a6:cd:88:88:34:7e:80:a4:7a:
0a:72:4d:e3:e9:77:67:ed:45:ca:4e:8a:2f:93:cc:58:4d:55:
7f:20:2c:13:e8:e6:5b:19:cb:18:de:81:c5:ec:b4:5d:9b:b0:
16:c9:fb:1b:b6:f5:55:f5:7f:a9:b3:57:4d:db:3a:6f:b8:4b:
f4:99:a4:15:61:bd:09:cd:a5:42:28:c8:98:5f:5f:66:67:58:
f7:02:76:70:eb:98:25:ed:62:53:9e:a8:d7:7a:40:07:28:11:
7c:fc:00:ec:94:ee:4e:38:0f:c5:83:32:99:55:32:81:70:c8:
b7:c7:bf:85:ca:b5:6e:0d:86:07:ee:b3:8b:22:b3:1f:d8:fc:
a8:3c:27:97:18:bf:bc:f0:f4:52:2e:ef:65:82:5c:c8:fb:ed:
8a:29:0a:83:45:e4:e2:c3:27:80:d4:e5:9e:91:aa:d5:20:5d:
6b:2c:ae:a2:03:1f:cd:bb:16:e3:8e:29:cc:58:ec:aa:1f:e4:
fe:e4:53:37:af:a1:d0:73:b0:80:41:61:af:aa:48:a3:ea:fc:
79:b9:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:37:54 2026 by rpki-client