Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/4g2sjyOA2S88ULGM_X6L9fja_a4.roa
File: 4g2sjyOA2S88ULGM_X6L9fja_a4.roa (raw, json)
Hash identifier: T/G8ygcKFjJNJsjuU7faDGLDHIo+LXS8+f+JHgj88Xc=
Subject key identifier: E2:0D:AC:8F:23:80:D9:2F:3C:50:B1:8C:FD:7E:8B:F5:F8:DA:FD:AE
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019CF2637403874811FB2F9A183F7E49557D
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/4g2sjyOA2S88ULGM_X6L9fja_a4.roa
Signing time: Sun 15 Mar 2026 16:45:29 +0000
ROA not before: Sun 15 Mar 2026 16:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49304
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:63:74:03:87:48:11:fb:2f:9a:18:3f:7e:49:55:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Mar 15 16:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e20dac8f2380d92f3c50b18cfd7e8bf5f8dafdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:c4:a5:a4:3e:c5:16:52:7c:b6:ff:ce:d5:
34:46:97:67:f1:f1:be:e0:0f:c0:ae:f4:b0:d5:b9:
5a:93:27:30:ed:19:5f:d2:4a:b7:e8:31:cb:0f:33:
2d:fe:3a:db:1d:bb:ae:82:30:9f:df:a3:32:a7:5c:
b4:10:6c:80:fc:af:df:f3:32:96:4e:95:6a:2d:97:
23:c4:e1:39:59:41:44:2d:44:a3:06:ab:6d:c7:c6:
52:f7:5c:78:f0:ca:d4:2c:9c:67:39:e1:0c:43:92:
c3:7e:13:9d:5a:e1:d9:61:ea:aa:d0:95:1a:ec:83:
3e:ea:1a:f8:98:ab:b3:38:86:c4:d6:c6:4a:5a:40:
c8:5d:9c:d4:05:ad:6a:1b:8b:9e:2c:21:c2:87:e1:
08:9b:19:9f:5a:32:e2:5f:c9:21:e5:8c:eb:cb:48:
8e:de:b9:11:70:c2:8b:23:1b:82:df:a0:d5:bf:01:
52:a1:a4:cf:16:a3:d9:f9:8c:b4:76:93:83:28:f6:
c1:5f:02:f0:8a:c9:82:71:94:95:66:7b:40:26:91:
67:eb:b2:12:cf:88:ae:08:e0:a3:c1:ba:ea:4f:44:
bf:3d:6e:b4:1d:89:c7:e7:de:63:08:ab:b1:88:f8:
73:3c:51:4d:46:1a:f1:83:01:2b:c0:e7:d3:bd:ec:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:AC:8F:23:80:D9:2F:3C:50:B1:8C:FD:7E:8B:F5:F8:DA:FD:AE
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/4g2sjyOA2S88ULGM_X6L9fja_a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
03:76:cb:0f:ea:c8:eb:70:69:be:5f:76:e9:9b:95:92:4e:47:
f2:8f:fc:0e:ed:02:1d:c8:08:37:05:b9:c6:0a:29:11:d9:9d:
a0:e2:1f:a0:ca:d9:14:d2:b6:b1:5a:97:97:c1:d7:25:d5:40:
79:7d:46:84:b2:1a:a7:92:b8:e8:72:fb:78:3e:f7:a4:3b:12:
10:98:53:d7:cb:97:ed:e0:77:66:c7:bb:a2:58:a3:77:e7:c9:
16:50:2c:63:7a:b8:71:9a:5d:c4:5a:4a:90:c3:02:5a:d5:37:
21:59:c4:18:e1:16:7f:3c:c4:01:67:54:e7:aa:0a:84:6e:42:
52:32:b6:e0:b4:44:d8:a7:8c:b9:7a:43:96:3d:56:25:ff:b5:
32:a5:f5:cb:ef:62:20:b1:0f:27:c8:6a:4a:eb:ac:8d:c6:cb:
c2:23:dc:4c:40:ac:ab:9d:9d:ac:43:28:7b:71:65:c5:99:0a:
ef:2e:c1:85:ad:1d:63:36:7a:37:93:f4:bd:4a:a1:57:40:ce:
e9:6d:83:ef:e9:65:f1:4a:cd:bc:53:44:0d:22:63:59:7d:e5:
b5:ec:a6:10:2b:de:02:1b:ce:bf:6a:51:e5:92:6d:a5:ad:6e:
5f:1f:fb:66:fa:49:d7:ec:7c:91:ec:b2:e3:a0:ba:ff:ea:26:
86:e4:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:13 2026 by rpki-client