Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/4eTqXPsY2k0nfIKnegQTKL9VsZc.roa
File: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (raw, json)
Hash identifier: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=
Subject key identifier: E1:E4:EA:5C:FB:18:DA:4D:27:7C:82:A7:7A:04:13:28:BF:55:B1:97
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 019F8A3A25121368F48AE56343C3698D3935
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/4eTqXPsY2k0nfIKnegQTKL9VsZc.roa
Signing time: Wed 22 Jul 2026 14:28:14 +0000
ROA not before: Wed 22 Jul 2026 14:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200043
IP address blocks: 91.206.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:3a:25:12:13:68:f4:8a:e5:63:43:c3:69:8d:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Jul 22 14:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1e4ea5cfb18da4d277c82a77a041328bf55b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:11:b9:bb:e4:d2:a3:83:2f:3f:97:09:d7:
45:f0:fe:d8:06:a4:23:78:29:d6:ff:26:72:98:26:
ee:a8:b0:c7:9f:60:d9:63:d7:89:24:93:c5:39:6e:
03:32:7b:28:db:bf:d0:48:1f:8f:8d:93:6f:7c:2a:
0a:8d:ba:92:97:d2:c4:bd:fd:b9:e5:1c:a8:e8:95:
06:e2:20:3c:d9:ec:13:6d:ce:12:15:59:5b:72:bd:
a5:72:59:9d:9e:e1:94:13:27:24:86:cf:d4:93:63:
7d:4b:fd:6c:9b:2b:d2:3f:9b:b3:2d:c9:60:44:33:
40:74:32:4b:1a:b6:fb:b0:ca:ff:35:a4:27:75:87:
f3:ae:34:72:79:67:31:9c:4d:c8:f4:63:3c:14:c7:
60:f7:de:aa:b5:04:18:6f:fb:6a:f1:cc:89:16:4d:
3b:97:32:67:2a:c3:63:1a:ae:5c:07:3c:23:bd:3e:
70:8d:66:6f:c7:38:42:63:be:75:ac:88:58:c8:b3:
4d:5d:0d:4c:4c:76:08:3d:e2:2f:b9:19:1f:40:7f:
a5:bf:26:bf:30:bf:53:17:b2:d4:b7:de:a8:05:e0:
d3:0a:e8:65:48:68:8b:9f:38:db:ca:7c:18:aa:7e:
ff:81:aa:b9:45:da:2a:b8:aa:a3:d1:93:32:11:8a:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:EA:5C:FB:18:DA:4D:27:7C:82:A7:7A:04:13:28:BF:55:B1:97
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/4eTqXPsY2k0nfIKnegQTKL9VsZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8a:73:86:02:0c:02:e7:f3:13:a5:44:07:87:e2:88:4d:1b:
74:ad:e5:8f:dc:d5:98:2f:fd:09:cd:39:db:8b:67:83:5e:ec:
45:f3:d9:fa:07:9a:2a:42:ec:d3:b7:a1:82:c8:5d:19:72:58:
45:89:e7:50:48:6d:5b:f7:ff:e8:94:8d:a0:3f:3e:6c:f5:b5:
f9:e9:22:76:f5:29:93:27:7b:bb:ec:25:44:85:d4:0b:62:0b:
b7:c9:19:3d:a7:41:a6:ab:f1:c9:1c:a3:ce:c7:ce:53:bc:13:
af:55:e7:64:0e:0e:f5:93:f7:ca:8b:25:49:9e:97:83:c6:42:
5a:7f:6e:bb:04:4e:e4:a8:8d:bf:0f:87:ba:83:6e:32:fd:94:
bc:f0:58:6d:b3:b3:d1:69:b2:15:70:0a:6b:52:14:0e:85:67:
26:68:70:2d:0e:59:35:c8:8c:5c:0e:0d:6e:22:d5:33:4c:69:
f6:45:c4:11:25:33:a7:11:05:dc:82:87:12:d3:84:cd:83:72:
d1:39:3d:74:73:5a:57:e8:ed:b1:d1:1f:51:3d:11:3c:c8:f7:
e1:0b:5d:03:52:ac:8a:8d:87:f5:e9:7a:9d:ac:eb:f7:ad:a3:
52:08:77:1d:bb:d1:77:f1:e3:54:42:ec:83:c6:e8:de:45:71:
72:bb:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:06 2026 by rpki-client