Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/SlP4TAPGitcXt1tDTs3ila-PI-4.roa
File: SlP4TAPGitcXt1tDTs3ila-PI-4.roa (raw, json)
Hash identifier: /W//pSuTve3VQ6NC2bGLsZfag6LpxTIJ9C+Gg5PmC7w=
Subject key identifier: 4A:53:F8:4C:03:C6:8A:D7:17:B7:5B:43:4E:CD:E2:95:AF:8F:23:EE
Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial: 019E204C6048B06784F38F656C64C8AB6BFB
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/SlP4TAPGitcXt1tDTs3ila-PI-4.roa
Signing time: Wed 13 May 2026 07:45:36 +0000
ROA not before: Wed 13 May 2026 07:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29469
IP address blocks: 185.38.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:4c:60:48:b0:67:84:f3:8f:65:6c:64:c8:ab:6b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
Validity
Not Before: May 13 07:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a53f84c03c68ad717b75b434ecde295af8f23ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:25:f1:ef:80:51:bd:3f:3f:fb:5c:c9:b2:
ac:49:ff:9f:63:18:f1:74:37:a4:56:00:78:d0:cd:
dd:1a:14:1b:c5:fb:79:94:31:65:fe:41:71:15:95:
ab:93:5e:7e:9d:32:dd:65:f0:23:9d:a2:9c:0d:ae:
ec:75:9b:70:16:95:1a:b5:0e:7f:89:08:a8:5d:bc:
27:7a:b7:4d:5e:f9:1d:b0:b1:6c:35:c7:62:e1:be:
cd:6c:a4:bd:a7:6f:c2:19:ab:c5:6a:05:4d:e6:fb:
71:5a:ed:eb:4b:b4:d8:31:46:50:d6:8a:fa:6c:0d:
74:62:e7:1f:69:f7:01:47:7a:2f:c6:24:cf:4c:b0:
ff:96:2a:cc:b3:39:05:4f:f5:a3:c0:ad:bd:49:e9:
d3:20:e3:fb:70:e0:6c:43:a8:f0:bd:17:9c:6d:43:
2a:7e:eb:e0:25:6b:0e:fc:1d:81:8a:66:00:08:ed:
b5:b6:8b:ab:c4:25:0c:a3:f9:a8:fc:bd:4a:f3:93:
59:b5:e1:27:d8:76:66:c7:07:ef:ea:6c:cd:b5:fa:
ba:24:da:52:95:9e:5f:a7:1a:ac:3a:e5:a4:81:68:
51:b8:28:f0:3e:07:91:ed:d0:aa:fc:b4:58:d6:1e:
df:f7:8f:7b:35:e1:b3:f0:73:00:db:4d:4d:dc:e4:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:F8:4C:03:C6:8A:D7:17:B7:5B:43:4E:CD:E2:95:AF:8F:23:EE
X509v3 Authority Key Identifier:
keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/SlP4TAPGitcXt1tDTs3ila-PI-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.174.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d3:2f:87:ab:4e:bb:99:12:4e:76:30:68:96:14:44:65:69:
ec:c8:4a:ce:c9:dc:ba:92:07:27:6c:d5:f3:2d:7f:f1:db:6b:
76:86:b3:25:af:a1:9e:d5:b0:cd:ab:91:95:c6:b7:a3:c7:eb:
32:5a:88:59:48:5f:26:a7:96:29:ca:c0:47:e2:17:a4:7b:85:
5a:1a:48:72:34:88:a2:bb:a3:03:70:9d:30:96:a4:32:e4:69:
0d:ab:9f:25:b4:1c:f2:9a:b8:7b:ea:4d:ad:f1:24:6f:8f:3a:
54:21:64:30:d2:12:c9:21:6e:51:b5:ea:dd:2d:66:5c:d2:87:
23:98:37:e7:10:fa:23:1e:3c:a2:2c:99:04:e4:9a:ad:dc:c0:
74:57:78:6c:00:94:97:97:60:5c:06:87:46:97:c9:ea:8b:b8:
bf:36:6c:f5:47:b1:57:be:76:1a:18:6c:f9:c9:47:79:a0:d2:
50:e8:8b:19:9a:a2:c7:50:a9:df:1b:55:aa:43:f0:05:aa:37:
da:12:45:08:e9:73:d2:21:3c:ba:bd:7f:c7:d9:4c:2b:95:67:
f3:d2:c5:65:c4:c4:37:fc:d5:4c:e1:a3:94:fb:af:e4:5a:6b:
fe:ac:25:aa:e6:b7:7c:c6:7f:2f:12:20:1f:97:d6:c7:07:c7:
27:ac:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:40 2026 by rpki-client