Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa
File: n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa (raw, json)
Hash identifier: 1E/T9nLd+QL/eysx3WY4PkqyPLvT4d8WYewTXo8g6eo=
Subject key identifier: 9F:83:D9:A8:4A:B8:7A:3F:43:77:96:DD:06:44:69:DD:A3:98:A8:D1
Certificate issuer: /CN=7b62588ef894f15fb5df6bfee2968e3222905009
Certificate serial: 019F236882B5D8C52896D573902A490D347C
Authority key identifier: 7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18701
IP address blocks: 138.32.24.0/22 maxlen: 22
138.32.24.0/24 maxlen: 24
138.32.25.0/24 maxlen: 24
138.32.26.0/24 maxlen: 24
138.32.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:82:b5:d8:c5:28:96:d5:73:90:2a:49:0d:34:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b62588ef894f15fb5df6bfee2968e3222905009
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f83d9a84ab87a3f437796dd064469dda398a8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:25:40:0c:74:2f:30:af:c4:79:eb:4f:49:
74:6f:60:41:2b:13:8c:37:f9:b2:4a:c5:08:63:a3:
97:17:0c:8c:ff:95:05:8e:80:67:c8:c7:43:64:7a:
b6:e4:87:72:e4:18:d9:52:08:a1:88:15:1c:e7:44:
d7:2d:d5:54:c8:82:04:96:40:89:1a:c8:2c:d5:05:
bd:9c:02:ff:70:55:89:91:e0:3e:7d:d5:cd:93:e1:
98:6b:8b:43:ad:a6:20:60:79:db:a3:bf:41:1c:30:
68:05:2f:2c:a1:d0:1b:ea:8f:c5:9a:6e:78:b0:93:
18:e0:31:50:41:4c:51:e0:46:52:a7:98:b8:df:3d:
0a:b1:38:72:95:5f:5a:6f:7b:ef:07:33:2d:c6:0c:
21:64:2d:91:87:a0:ed:be:d2:47:67:05:a4:c3:43:
c4:85:98:78:d2:57:37:d7:7b:7a:a6:b4:9c:a3:cf:
ce:97:86:a7:f4:2d:b1:38:89:ba:bc:07:2c:a1:f3:
a9:d5:ff:31:25:47:b2:f2:cb:68:d5:61:a3:a8:c9:
d0:62:23:4c:3c:90:08:8f:be:b4:ed:ff:12:41:02:
67:13:b2:35:68:c3:d9:d0:8a:ab:29:1c:68:a3:46:
36:8e:8b:ce:ba:ab:b6:a6:53:57:68:2d:23:d5:9b:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:D9:A8:4A:B8:7A:3F:43:77:96:DD:06:44:69:DD:A3:98:A8:D1
X509v3 Authority Key Identifier:
keyid:7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.32.24.0/22
138.32.168.0/22
Signature Algorithm: sha256WithRSAEncryption
03:80:49:69:a4:81:da:56:5b:e9:f8:b4:20:28:94:52:8e:67:
3a:d1:80:87:9f:66:e8:88:5d:79:82:98:89:5a:cb:f9:06:b4:
d5:86:e5:44:c6:24:34:3c:4d:aa:07:c0:45:90:39:fa:ce:a3:
0a:f8:a3:a7:db:00:9d:95:dd:d2:19:21:3f:a0:e6:1a:eb:13:
ab:86:ac:62:9f:8d:97:b5:ab:fe:6b:23:ac:be:cc:d9:f4:ca:
7a:28:83:2a:36:cd:9d:1d:60:82:dd:c5:35:37:97:41:c8:c6:
04:2a:b5:be:f5:9b:5c:e3:24:68:2c:62:38:7d:49:28:37:c4:
b8:2e:56:b2:c0:b9:53:e7:51:00:a4:80:5a:ce:34:b1:ac:5c:
30:19:d9:1e:58:fc:dd:24:8d:56:34:b9:8f:96:2e:77:00:cb:
18:55:c6:95:3a:01:ea:1f:4f:36:04:aa:7a:73:5d:93:7b:b6:
d5:2c:54:a6:81:da:4a:d7:ce:b2:10:7e:22:e5:50:24:dd:6f:
99:2b:9a:62:1a:f5:92:0c:5d:a4:b7:07:f0:4d:1d:18:f2:e0:
8b:1d:c8:28:df:56:90:50:56:b0:7a:67:c8:67:7b:de:ce:7b:
ac:0e:1b:12:80:cc:5c:9c:54:b9:8b:97:df:49:55:7c:1a:62:
04:c7:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:02 2026 by rpki-client