Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/4FkVPC5vNrtpSNqa5G2ag64hn2c.roa
File: 4FkVPC5vNrtpSNqa5G2ag64hn2c.roa (raw, json)
Hash identifier: eJNipDPmSjNdjnVGlbWB4N9kyxVoJyek2lU7Qg0nNCk=
Subject key identifier: E0:59:15:3C:2E:6F:36:BB:69:48:DA:9A:E4:6D:9A:83:AE:21:9F:67
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F6AAB1CCAF186BE4488606A5E39B4333A
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/4FkVPC5vNrtpSNqa5G2ag64hn2c.roa
Signing time: Thu 16 Jul 2026 11:23:46 +0000
ROA not before: Thu 16 Jul 2026 11:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43758
IP address blocks: 91.198.146.0/24 maxlen: 24
91.213.206.0/24 maxlen: 24
91.224.38.0/23 maxlen: 24
91.225.28.0/22 maxlen: 24
2001:67c:2e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:ab:1c:ca:f1:86:be:44:88:60:6a:5e:39:b4:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 16 11:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e059153c2e6f36bb6948da9ae46d9a83ae219f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:27:4b:8f:c8:38:43:36:c6:34:63:6a:f8:
99:89:51:64:52:ff:35:20:06:3a:38:4b:24:19:b8:
b8:13:bc:bb:1b:b8:2f:ae:77:03:95:c9:59:24:c8:
aa:4d:5e:6b:f2:c5:0d:20:c7:27:c6:dd:50:1a:bb:
d2:29:18:0f:c1:9f:97:22:b5:dd:97:06:21:53:38:
0c:61:69:fc:cc:02:01:a0:97:0d:84:2c:10:e4:fa:
2b:02:af:5e:9f:9b:f0:da:4f:a1:7c:01:af:01:3b:
f0:86:04:82:dd:57:87:a0:b7:f2:aa:92:5b:ec:5a:
96:2d:e5:df:c1:85:21:a6:4a:4f:e5:9f:5e:15:9d:
c0:01:b7:07:18:2f:8b:3d:d7:45:5b:61:40:40:2f:
30:2b:15:a7:ad:1b:4f:a2:60:4c:fa:77:3a:4f:e0:
24:19:a7:e7:8a:57:da:e1:f2:4c:a4:93:56:f4:e4:
32:35:e3:f5:ff:34:5f:5f:e3:bf:b3:3b:60:18:4c:
c0:b6:70:d9:0e:b5:b5:53:49:d1:43:c9:40:6c:dc:
c5:4f:f0:37:fe:e7:80:42:fd:02:88:ff:e0:15:6f:
7a:dd:7c:90:e4:e6:7f:bf:95:aa:f6:b9:ca:4e:72:
d6:d2:7f:ab:af:a4:df:9d:2b:f7:b2:61:56:53:6a:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:15:3C:2E:6F:36:BB:69:48:DA:9A:E4:6D:9A:83:AE:21:9F:67
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/4FkVPC5vNrtpSNqa5G2ag64hn2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
IPv6:
2001:67c:2e0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:49:0f:72:33:28:80:40:ae:f0:76:db:b4:3a:7d:fb:b3:75:
88:8b:63:87:18:d5:b6:c7:1a:fd:4f:c0:23:28:ba:c6:c0:b4:
54:10:3f:23:b5:a8:e4:49:36:cf:d0:17:ba:bb:35:d8:43:e6:
9d:13:69:ac:57:91:18:b6:cd:03:7f:18:5f:34:a3:4e:73:b4:
11:ab:d1:c1:5f:d9:da:14:57:3e:57:6a:51:2c:f8:e2:3d:2a:
24:59:e2:0b:6c:16:a3:9e:c7:56:9f:63:81:a3:76:58:d1:60:
b9:15:e0:04:50:22:0f:91:77:14:02:56:c1:aa:0a:0e:7f:09:
9c:ef:d1:8d:6a:99:e3:c2:14:67:74:0c:a7:3a:48:e3:df:f5:
9d:14:0f:7a:ae:62:53:9b:d3:65:81:45:d3:03:84:2d:57:d6:
08:be:3d:eb:13:6e:b9:37:0e:d9:2b:5c:f6:db:8e:26:48:c4:
d1:b0:13:0c:76:a2:a6:3e:77:ec:a7:66:5f:9f:63:a4:d2:26:
72:42:15:5a:f5:ee:ee:8f:09:73:76:6e:47:71:23:17:3f:29:
20:b5:3d:5a:cb:6a:13:b9:0a:36:b5:82:8f:87:fa:2e:8c:eb:
db:68:0f:fd:b8:e6:9c:74:48:7e:83:3d:2d:3e:0b:ee:15:2c:
1c:b4:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:45 2026 by rpki-client