Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/441lsNWWkk3opsQNut7AzIBZ6Vw.roa
File: 441lsNWWkk3opsQNut7AzIBZ6Vw.roa (raw, json)
Hash identifier: oATiIhAV2CCuqPXCGfeoLqoQsm5Vn2kewH7dQxMNlfw=
Subject key identifier: E3:8D:65:B0:D5:96:92:4D:E8:A6:C4:0D:BA:DE:C0:CC:80:59:E9:5C
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019EEF7D6EDB0EBBC00A11E3C029A753FA1E
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/441lsNWWkk3opsQNut7AzIBZ6Vw.roa
Signing time: Mon 22 Jun 2026 13:20:35 +0000
ROA not before: Mon 22 Jun 2026 13:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 94.231.228.0/24 maxlen: 24
94.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:7d:6e:db:0e:bb:c0:0a:11:e3:c0:29:a7:53:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jun 22 13:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38d65b0d596924de8a6c40dbadec0cc8059e95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:a6:05:44:8a:17:65:23:60:7a:23:5b:44:
46:e5:d7:d4:58:b1:3f:7e:12:ef:3f:f0:bf:14:12:
68:f9:44:25:7d:af:c5:93:6d:03:56:fb:67:17:61:
1e:97:2b:be:9f:58:c9:8f:89:f6:cd:95:7b:35:1a:
d6:0b:38:a3:57:e1:0d:65:0b:2d:b2:7c:a8:cf:43:
35:9a:5e:e9:77:22:8a:59:bc:52:19:72:53:70:9a:
6e:dc:61:c3:a3:ac:2c:0d:45:40:a5:cb:be:45:a4:
60:a1:cf:e4:1c:6c:95:46:98:0f:a6:13:2f:4a:40:
b7:e1:87:13:d4:c4:e3:3e:22:fb:d9:79:44:7a:80:
7f:65:ae:08:09:68:17:f8:02:b6:f6:55:96:e1:60:
3f:b2:11:2c:4d:3a:f8:d2:1f:22:41:2e:fc:07:ce:
84:63:42:ae:59:49:1b:8a:4d:c0:ce:ac:48:73:b1:
be:a5:a7:49:4e:ba:2c:8b:9c:c3:8e:f1:12:8f:4c:
f3:aa:4b:04:71:2f:c0:18:3e:22:e8:37:3f:91:ac:
88:ef:68:89:58:5f:fa:87:3b:52:ec:1b:44:20:58:
57:ab:7e:a4:91:6a:48:6c:ce:a7:3c:de:91:42:31:
23:5c:a4:8f:a4:b0:20:bf:54:81:e8:22:8f:38:6a:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:65:B0:D5:96:92:4D:E8:A6:C4:0D:BA:DE:C0:CC:80:59:E9:5C
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/441lsNWWkk3opsQNut7AzIBZ6Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.228.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:b1:d4:b9:d1:07:ea:e9:10:3c:9e:52:9b:5b:14:7e:bd:0a:
da:6a:43:18:fb:49:f9:32:9e:da:b1:1a:ed:80:6b:3b:12:8b:
73:4c:4a:4f:79:33:ed:31:6e:4e:77:ac:cf:3b:56:91:9b:ca:
3a:25:7a:43:78:0b:11:11:43:72:72:03:26:55:e8:fa:9f:b4:
a8:83:51:19:9b:01:aa:0a:ef:0c:be:cf:de:5c:a4:bf:d3:e3:
28:d8:bc:84:d6:d8:d1:8d:48:d4:18:3d:ab:f1:0e:dd:7d:09:
32:aa:e9:c2:34:c4:dd:b5:e6:8c:11:ea:3d:40:81:a8:40:36:
85:72:98:4d:ee:bd:98:ca:fd:6a:64:db:f4:9b:4c:81:08:3c:
29:3e:65:7b:50:df:50:62:f2:55:fa:bb:ee:38:18:8a:6b:bc:
91:84:22:eb:45:ed:c4:a0:c4:01:a5:75:bf:e3:3d:b0:89:03:
d9:1f:65:b6:98:a4:ba:5f:67:ed:34:3a:23:cf:e3:cc:f9:3f:
5d:02:82:40:7b:d9:42:3d:ae:28:b2:26:c7:8f:0b:33:e9:f6:
0f:16:c1:c8:e3:0d:ed:33:19:ed:c1:d6:d7:f6:83:50:39:4b:
cd:58:0c:b3:ed:b7:21:5b:ca:af:34:9d:a0:9d:ee:f3:f1:2d:
26:ca:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:20 2026 by rpki-client