Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa
File: j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa (raw, json)
Hash identifier: F+UQE401zF1jsBTDqKt2hLCSf3ZWTZdmAcKzmrDSjF0=
Subject key identifier: 8F:81:73:1C:63:4C:FB:1F:09:0A:F2:74:E9:EE:89:02:96:B4:32:3E
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019D1F49200B5D89A3DEA1F08B480FCCAF95
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa
Signing time: Tue 24 Mar 2026 09:59:39 +0000
ROA not before: Tue 24 Mar 2026 09:59:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200689
IP address blocks: 45.74.192.0/21 maxlen: 24
45.74.193.0/24 maxlen: 24
45.74.194.0/24 maxlen: 24
45.74.195.0/24 maxlen: 24
45.74.196.0/22 maxlen: 24
45.74.197.0/24 maxlen: 24
45.74.198.0/24 maxlen: 24
45.74.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:49:20:0b:5d:89:a3:de:a1:f0:8b:48:0f:cc:af:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Mar 24 09:59:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f81731c634cfb1f090af274e9ee890296b4323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:a9:6c:68:e3:34:55:28:86:ae:b5:da:7f:
4f:6a:b1:cd:08:f6:8b:86:ed:3e:a3:50:dc:d4:83:
27:d6:d2:3c:14:91:06:aa:ff:fc:62:6e:1f:3b:6e:
6d:39:98:13:f7:05:ba:2d:e0:68:c7:c2:3c:3b:58:
1c:03:7b:b1:90:7f:6c:9b:f6:21:96:07:90:3d:c3:
7b:9b:d9:5b:ef:a7:20:79:6a:81:19:fc:34:80:86:
6d:44:cf:ce:4f:b1:4b:a4:a8:58:84:2e:00:b7:3d:
4b:9a:90:bf:84:a7:8e:ec:5c:ae:43:7e:88:7f:a0:
9d:1d:99:69:76:f4:9a:37:a3:49:8d:3c:28:11:e7:
e3:38:85:c7:90:06:52:4c:3d:a7:9d:26:4e:a0:68:
46:fe:bd:b2:c6:13:33:d9:69:1e:51:16:a0:07:95:
3b:00:31:4b:6d:0e:e3:f0:4d:77:fa:63:24:61:68:
28:2a:5d:83:41:bf:6f:a2:de:97:d5:f6:4b:47:ba:
19:19:9e:2b:1e:d4:f4:ed:61:f6:9e:d3:b2:be:62:
0a:a3:18:4d:c3:e0:1a:14:ec:90:c0:59:b2:86:e9:
98:1b:26:90:4f:e6:e1:1e:8c:a9:6c:19:d3:8d:24:
f0:ef:33:27:c2:e4:16:a7:eb:f2:9a:4d:bf:c8:94:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:73:1C:63:4C:FB:1F:09:0A:F2:74:E9:EE:89:02:96:B4:32:3E
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:00:9d:66:db:6d:69:43:12:dc:63:22:4d:6f:e7:27:88:fe:
92:32:19:4c:9d:4f:f5:0b:26:a4:cc:36:13:f4:09:4e:8d:e6:
ea:49:a2:bb:45:89:cd:e5:80:1e:ae:30:0a:53:25:ef:c2:65:
e8:51:ac:78:0d:55:b3:e9:71:68:65:a7:6f:67:46:67:01:6c:
b2:c4:2a:a5:b1:f9:ba:55:3f:fa:e9:c8:a9:3b:8d:be:a3:f3:
c6:e2:08:22:4e:4e:b9:21:ff:74:6b:02:77:a3:fe:d2:c6:29:
97:dd:49:1d:24:e2:cb:23:51:ed:ee:28:fe:d3:97:01:4b:ea:
a0:3a:77:ba:9d:6a:b7:20:a4:5c:30:1b:d4:a6:b0:c0:aa:a7:
46:c4:9c:c7:d6:f6:9c:f8:dc:18:3c:fa:ea:8f:3d:64:ad:ed:
04:84:6f:43:36:23:f2:f4:46:ec:bd:e5:ea:da:91:f4:7a:9e:
34:52:2c:6c:73:8d:b9:11:f4:d1:1e:85:00:2b:2a:e1:7c:d6:
c5:5c:5a:42:77:aa:23:db:99:82:7b:23:a6:0f:22:c9:73:1c:
96:63:7b:a6:15:d1:e5:21:2e:c7:63:76:f8:a0:0e:79:8c:f1:
a7:8b:a4:32:24:79:9c:9a:57:a8:e7:1d:84:2b:1e:75:bd:67:
e9:c0:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:12:54 2026 by rpki-client