Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/P4cDGWr4IUzLM9lVW7E5k2o6h84.roa
File: P4cDGWr4IUzLM9lVW7E5k2o6h84.roa (raw, json)
Hash identifier: vGdbqg/8XvG5GvERHecgi5UEllssjDGD9X9pB1AdTEw=
Subject key identifier: 3F:87:03:19:6A:F8:21:4C:CB:33:D9:55:5B:B1:39:93:6A:3A:87:CE
Certificate issuer: /CN=09a7744ba9c4f101a4893e4796769c491351067b
Certificate serial: 019E1B92F6CF8B7AA1435DEAA7977AA76099
Authority key identifier: 09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/P4cDGWr4IUzLM9lVW7E5k2o6h84.roa
Signing time: Tue 12 May 2026 09:44:36 +0000
ROA not before: Tue 12 May 2026 09:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213653
IP address blocks: 46.21.21.0/24 maxlen: 24
164.40.235.0/24 maxlen: 24
2a14:fa00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:92:f6:cf:8b:7a:a1:43:5d:ea:a7:97:7a:a7:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a7744ba9c4f101a4893e4796769c491351067b
Validity
Not Before: May 12 09:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f8703196af8214ccb33d9555bb139936a3a87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:21:2a:56:b8:38:80:e1:4a:a3:ce:2c:f0:
61:21:07:f4:6b:aa:c2:10:55:ee:ba:e6:ca:5e:dc:
af:02:69:fe:1d:80:33:52:23:85:cf:2a:cd:de:03:
03:ac:7f:90:06:e2:91:73:28:dd:48:3f:94:ba:48:
6d:36:fb:76:5f:db:2d:1e:89:92:c1:17:08:d0:41:
6c:75:1f:e4:4b:5e:b6:2a:0d:b0:b5:30:c0:fe:8b:
4c:bf:29:af:fa:cc:c6:84:d8:6d:32:2f:08:43:98:
79:d7:81:34:85:69:e1:59:de:24:bc:77:b5:4b:f0:
5f:57:40:eb:8e:4d:19:e9:76:69:1d:79:85:77:af:
58:2c:71:16:a0:db:85:d8:2c:e7:1e:a1:5e:55:20:
51:79:62:d2:07:94:e1:29:e6:60:e0:98:32:72:98:
20:c0:84:e6:12:bb:d5:c6:04:7c:7c:c1:da:88:ab:
87:67:a0:1a:37:d9:6e:13:c2:d4:15:2d:3f:09:d9:
49:4f:a5:b5:c6:10:e8:bd:9f:e6:5f:8e:d3:71:9a:
78:f3:d3:e8:6e:21:df:0f:69:79:42:30:9b:10:90:
34:d7:71:40:64:0a:83:e8:95:ba:18:7e:e8:c6:6e:
4f:01:7d:c6:23:2f:04:d1:53:8a:75:4e:16:61:d0:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:03:19:6A:F8:21:4C:CB:33:D9:55:5B:B1:39:93:6A:3A:87:CE
X509v3 Authority Key Identifier:
keyid:09:A7:74:4B:A9:C4:F1:01:A4:89:3E:47:96:76:9C:49:13:51:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cad0S6nE8QGkiT5HlnacSRNRBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/P4cDGWr4IUzLM9lVW7E5k2o6h84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/85a190-02aa-43bf-8e06-97278341a61f/1/Cad0S6nE8QGkiT5HlnacSRNRBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.21.0/24
164.40.235.0/24
IPv6:
2a14:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
93:64:e9:1b:dd:6a:05:cf:a9:33:3b:83:6c:27:7c:34:ed:1b:
72:10:2f:40:c5:e9:3d:70:88:6b:d5:43:34:a1:04:34:03:1c:
98:46:65:32:1b:77:67:ec:1c:16:90:14:ca:82:2e:78:c9:36:
9f:75:94:f4:9e:8b:1d:2d:ce:09:34:e2:49:57:11:75:90:de:
48:96:d5:80:90:01:6e:18:08:6b:8f:04:8a:3a:6c:0b:b4:31:
89:b5:a9:80:64:c4:ad:4e:dd:d1:ed:a0:3f:1f:70:c5:af:2c:
d8:f5:63:af:6d:9e:16:af:12:37:4f:48:e9:47:a4:47:8b:f3:
72:b5:0b:87:a6:6a:e6:f9:47:3f:72:c3:30:04:26:a9:25:e2:
ce:70:0e:a6:44:fe:4f:04:c4:a0:6f:3f:7d:5a:6b:68:19:e8:
0e:79:a2:d4:9a:f9:7c:c1:9f:f6:1e:d7:85:e3:f5:95:6d:d0:
c9:3d:e1:c3:6b:dd:62:86:4d:b1:9a:04:48:a0:ea:0e:82:27:
f6:1d:54:f3:1e:46:cc:53:36:a4:a9:70:e9:2c:11:c8:1c:5b:
58:86:bd:19:89:c3:d1:cc:a5:cf:b2:42:7e:fa:f3:ec:9f:6d:
98:7a:f4:6e:ab:f1:77:69:db:46:d1:78:c7:72:45:8a:0c:61:
ea:61:54:04
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ4bkvbPi3qhQ13qp5d6p2CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YTc3NDRiYTljNGYxMDFhNDg5M2U0Nzk2NzY5YzQ5MTM1
MTA2N2IwHhcNMjYwNTEyMDk0NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjg3MDMxOTZhZjgyMTRjY2IzM2Q5NTU1YmIxMzk5MzZhM2E4N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruYhKla4OIDhSqPOLPBhIQf0a6rC
EFXuuubKXtyvAmn+HYAzUiOFzyrN3gMDrH+QBuKRcyjdSD+UukhtNvt2X9stHomS
wRcI0EFsdR/kS162Kg2wtTDA/otMvymv+szGhNhtMi8IQ5h514E0hWnhWd4kvHe1
S/BfV0Drjk0Z6XZpHXmFd69YLHEWoNuF2CznHqFeVSBReWLSB5ThKeZg4Jgycpgg
wITmErvVxgR8fMHaiKuHZ6AaN9luE8LUFS0/CdlJT6W1xhDovZ/mX47TcZp489Po
biHfD2l5QjCbEJA013FAZAqD6JW6GH7oxm5PAX3GIy8E0VOKdU4WYdBNXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD+HAxlq+CFMyzPZVVuxOZNqOofOMB8GA1UdIwQY
MBaAFAmndEupxPEBpIk+R5Z2nEkTUQZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYt
OTcyNzgzNDFhNjFmLzEvUDRjREdXcjRJVXpMTTlsVlc3RTVrMm82aDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NWExOTAtMDJhYS00M2JmLThlMDYtOTcyNzgzNDFhNjFm
LzEvQ2FkMFM2bkU4UUdraVQ1SGxuYWNTUk5SQm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALhUVAwQA
pCjrMA0EAgACMAcDBQMqFPoAMA0GCSqGSIb3DQEBCwUAA4IBAQCTZOkb3WoFz6kz
O4NsJ3w07RtyEC9Axek9cIhr1UM0oQQ0AxyYRmUyG3dn7BwWkBTKgi54yTafdZT0
nosdLc4JNOJJVxF1kN5IltWAkAFuGAhrjwSKOmwLtDGJtamAZMStTt3R7aA/H3DF
ryzY9WOvbZ4WrxI3T0jpR6RHi/NytQuHpmrm+Uc/csMwBCapJeLOcA6mRP5PBMSg
bz99WmtoGegOeaLUmvl8wZ/2HteF4/WVbdDJPeHDa91ihk2xmgRIoOoOgif2HVTz
HkbMUzakqXDpLBHIHFtYhr0ZicPRzKXPskJ++vPsn22YevRuq/F3adtG0XjHckWK
DGHqYVQE
-----END CERTIFICATE-----
Generated at Wed May 13 10:16:55 2026 by rpki-client