Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/4t94Ewh86rP5LgTWja3S3CmNJgI.roa
File: 4t94Ewh86rP5LgTWja3S3CmNJgI.roa (raw, json)
Hash identifier: U5a2tjhoCzukKEhPTVnBWaLXi08xhHMBTeQZZG2Rjm4=
Subject key identifier: E2:DF:78:13:08:7C:EA:B3:F9:2E:04:D6:8D:AD:D2:DC:29:8D:26:02
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019F612B6C9ED238C503A0B1BD2D8A1E2E68
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/4t94Ewh86rP5LgTWja3S3CmNJgI.roa
Signing time: Tue 14 Jul 2026 15:07:43 +0000
ROA not before: Tue 14 Jul 2026 15:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41960
IP address blocks: 45.10.124.0/23 maxlen: 24
2a09:a3c0::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:2b:6c:9e:d2:38:c5:03:a0:b1:bd:2d:8a:1e:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Jul 14 15:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2df7813087ceab3f92e04d68dadd2dc298d2602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:33:bd:cf:64:d2:da:4e:09:7f:6d:a7:55:
37:4a:bb:72:0c:46:fe:22:cd:cb:3d:a4:93:2f:d0:
a8:38:c5:a2:9d:f9:5a:21:aa:d5:f9:a9:fd:50:90:
53:83:84:e4:62:8e:76:ca:5f:3f:32:31:d2:f1:f0:
78:89:da:a4:14:cc:da:f9:36:df:6d:54:40:18:c0:
2b:75:64:b6:01:dd:8e:98:ff:2f:d3:b7:58:a5:05:
6d:92:b8:e6:2b:b3:e8:8a:1c:10:23:d6:41:df:b5:
d5:52:77:4d:15:ae:7b:99:2a:91:9a:33:04:86:28:
3a:c6:ac:d8:ea:cf:c0:7c:ed:03:34:cd:ae:f5:91:
c1:00:59:c5:af:24:00:56:30:cd:07:e1:3f:fe:b2:
5d:3e:0d:c8:7f:66:a9:84:2b:ef:67:ab:85:2d:9c:
a3:71:0c:36:1b:ab:b8:eb:b7:3e:52:c3:1d:9c:6e:
c9:f5:45:f0:5a:2d:1a:0b:9d:95:64:2c:ba:6d:a5:
70:85:39:9e:3f:6f:ec:7b:61:c9:e8:89:03:22:2f:
bf:38:ff:22:0b:03:ac:af:e6:e4:66:2d:7a:a5:6f:
b8:ca:3c:05:48:9e:44:56:85:91:66:59:43:3a:c0:
34:f9:d6:b6:87:49:5a:ce:02:89:d7:dd:b5:3e:f8:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:78:13:08:7C:EA:B3:F9:2E:04:D6:8D:AD:D2:DC:29:8D:26:02
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/4t94Ewh86rP5LgTWja3S3CmNJgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.124.0/23
IPv6:
2a09:a3c0::/36
Signature Algorithm: sha256WithRSAEncryption
28:57:cc:1b:7e:51:3f:16:d6:69:13:ab:4d:8d:8a:cb:37:55:
3c:d8:2a:54:6d:25:9d:02:14:2e:e5:dd:4f:f1:0b:54:02:be:
b1:37:6d:48:3f:93:8a:0a:c5:14:45:98:99:9a:ca:24:ff:61:
2e:d6:ba:9d:d2:f1:21:f9:aa:95:fa:5f:ae:69:97:36:80:de:
d5:63:74:b8:46:92:51:62:79:73:7f:81:a9:64:dd:2f:26:5c:
96:f4:c4:7e:28:c7:02:e4:fb:53:f9:ca:7e:fd:09:d4:86:f5:
9b:99:91:56:37:e9:dd:93:00:ed:e3:23:2c:1f:7d:cd:83:74:
ae:7c:d3:73:19:89:76:c2:45:7e:cf:ef:c5:d5:f6:d3:a3:a5:
44:78:8d:37:1f:14:c7:1a:3e:ce:e4:6a:6f:85:41:dc:dc:e8:
c9:5c:de:35:fd:12:de:1e:1a:88:83:d5:7d:d8:2c:19:f7:1d:
33:4b:73:98:42:24:ed:2b:e7:c5:34:80:57:23:5c:6c:bb:7f:
a7:13:f4:7a:2b:f5:c3:c4:69:49:36:fa:14:c3:c5:d9:9f:33:
68:2a:09:3f:80:43:7e:58:6a:70:e0:d4:37:1e:55:9d:70:8a:
f5:0b:08:09:e3:f5:e3:cd:9f:5e:c2:7f:25:5a:74:3b:fb:d2:
0e:60:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:36 2026 by rpki-client