Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/a4bf04S5dcI4kEjmwxLAJkHayoI.roa
File: a4bf04S5dcI4kEjmwxLAJkHayoI.roa (raw, json)
Hash identifier: /oCVymeIjx63ZJTfJn0LJz76bxndmpMPXujVHC7ipfQ=
Subject key identifier: 6B:86:DF:D3:84:B9:75:C2:38:90:48:E6:C3:12:C0:26:41:DA:CA:82
Certificate issuer: /CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
Certificate serial: 01A1844FB976B8CD767BC16C356D78AEEAB7
Authority key identifier: CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/a4bf04S5dcI4kEjmwxLAJkHayoI.roa
Signing time: Wed 28 Oct 2026 20:59:39 +0000
ROA not before: Wed 28 Oct 2026 20:59:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199439
IP address blocks: 64.46.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:4f:b9:76:b8:cd:76:7b:c1:6c:35:6d:78:ae:ea:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceacf3015d303f3bb20e37d66374c1c136feaf03
Validity
Not Before: Oct 28 20:59:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b86dfd384b975c2389048e6c312c02641daca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:b4:4a:9f:76:e6:01:24:16:f1:14:af:e9:
35:dc:33:0e:af:82:00:cd:74:40:52:33:0c:0c:b8:
ce:8c:4c:45:f4:da:51:e6:1e:68:08:97:82:60:54:
03:69:cf:58:82:83:c2:44:d1:51:3f:8a:43:eb:a5:
fa:f2:41:8f:8b:b9:f1:5e:2e:1e:27:19:04:3d:64:
14:2b:de:c9:e7:94:ef:59:a3:c2:a0:92:8f:26:a1:
0b:da:fe:07:08:40:69:ce:56:e7:9f:ea:42:98:15:
18:d3:73:ac:a3:9d:ef:ed:6f:3c:a4:2a:c4:28:86:
e6:d0:7c:72:73:b4:e9:44:6e:13:fb:c1:ae:3e:7e:
73:9a:c4:79:d7:b4:59:c6:df:36:c4:c4:41:e6:4d:
a3:56:1d:42:ae:9a:21:6a:68:40:cd:d8:f1:9e:a2:
1b:3d:d2:d1:ca:07:aa:4b:9b:b3:2e:dc:05:4c:11:
f6:32:9f:20:6d:23:c5:b9:4e:ab:df:96:5c:e2:9f:
2e:a0:6d:f8:22:35:0d:bb:b6:01:6e:f8:e4:45:b5:
67:89:4d:7b:8a:5c:a1:c5:8a:2e:d5:01:0c:55:2c:
68:4f:d0:46:e1:09:08:8a:36:3f:95:32:af:72:48:
d7:26:0a:1e:38:2d:96:2b:84:0f:6f:b3:cb:a3:a1:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:DF:D3:84:B9:75:C2:38:90:48:E6:C3:12:C0:26:41:DA:CA:82
X509v3 Authority Key Identifier:
keyid:CE:AC:F3:01:5D:30:3F:3B:B2:0E:37:D6:63:74:C1:C1:36:FE:AF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqzzAV0wPzuyDjfWY3TBwTb-rwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/a4bf04S5dcI4kEjmwxLAJkHayoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d690d-5864-4e0c-b8cb-cfe24aac1099/1/zqzzAV0wPzuyDjfWY3TBwTb-rwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.46.127.0/24
Signature Algorithm: sha256WithRSAEncryption
05:34:45:73:a8:19:b6:40:74:b1:83:70:a2:24:40:f1:8f:b8:
1f:ba:9d:71:ee:23:72:5a:81:1c:e7:e6:4b:6b:5c:91:f1:71:
f5:f6:62:ab:8e:c9:d2:35:54:92:8a:b1:95:08:ed:aa:8e:a9:
b1:63:c5:6c:95:08:c4:88:dd:7e:c9:4a:c9:94:f7:f1:c6:6a:
ec:b1:38:aa:d6:84:d1:91:e3:d6:78:21:6b:0d:0f:98:20:24:
d9:76:b9:91:7e:8e:0b:46:2c:a1:a2:c1:47:40:a6:71:41:f8:
41:40:b5:b1:98:20:f2:e2:61:49:86:eb:b6:bb:ac:8a:b6:a3:
0c:2c:4a:65:2f:30:a2:20:cc:98:ca:df:0d:f5:6a:ea:e0:c9:
e0:30:5e:59:db:2f:5d:2f:fb:b6:20:ec:d9:04:ef:ff:35:6b:
11:14:75:38:e6:ed:4b:0a:8b:57:e2:ea:4b:cf:87:c0:da:b7:
14:a8:b7:24:89:d3:8e:91:c2:fb:09:bc:45:60:eb:00:c4:c1:
ce:da:07:10:6e:1f:9e:86:c4:79:eb:5a:15:14:41:4d:42:43:
fb:53:12:ee:a3:ed:f4:e5:44:f0:64:e1:70:66:20:eb:1e:28:
90:3a:78:58:2f:15:3e:ad:8d:0c:bc:c5:03:2a:62:89:ef:af:
8c:c7:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:21 2026 by rpki-client