Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/4M3uPZpCb2lVRqxTc92AvFWW_fI.roa
File: 4M3uPZpCb2lVRqxTc92AvFWW_fI.roa (raw, json)
Hash identifier: 4ESs/eZU99YDEDkrCtDsyLfNUsB2CSDDLwG2CV+Efqc=
Subject key identifier: E0:CD:EE:3D:9A:42:6F:69:55:46:AC:53:73:DD:80:BC:55:96:FD:F2
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 019F841BADBDCD2C63FE0C886894C3A95C5D
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/4M3uPZpCb2lVRqxTc92AvFWW_fI.roa
Signing time: Tue 21 Jul 2026 09:57:14 +0000
ROA not before: Tue 21 Jul 2026 09:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16347
IP address blocks: 193.57.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1b:ad:bd:cd:2c:63:fe:0c:88:68:94:c3:a9:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jul 21 09:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0cdee3d9a426f695546ac5373dd80bc5596fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:11:b1:1d:88:24:b9:c9:33:5b:23:a3:07:
f1:bb:4a:45:c1:a5:43:14:ca:1e:1f:82:b5:b3:79:
04:ca:b1:e8:61:00:c8:62:f4:c2:e4:69:59:e4:c1:
f8:97:24:d1:dd:ce:6e:64:37:a1:e6:36:98:d8:0c:
e6:4c:29:b8:4f:18:ff:18:29:9e:d6:26:bc:8f:e2:
2a:ee:c7:8d:27:95:18:87:ec:da:d6:a4:ae:5c:87:
01:d4:c8:e1:32:9e:b2:50:55:31:ed:da:2c:52:c8:
44:25:4b:a6:f5:04:2b:b5:b7:28:54:74:0b:aa:ff:
0c:24:93:98:33:f8:93:0d:39:69:d7:c4:69:10:fd:
f1:59:73:ef:6b:6d:48:1a:7f:d4:ce:5c:f6:94:b7:
44:40:1e:2d:61:66:17:9c:6b:af:55:29:20:5e:af:
49:36:00:d1:97:a6:53:d5:3a:ce:55:c5:ac:1a:43:
97:73:80:f8:42:99:b1:4e:16:6e:3c:a5:00:44:b4:
f8:a2:b7:f5:30:14:47:73:14:5d:54:5f:87:6d:01:
1e:6c:f2:e4:1c:75:11:96:96:f5:50:c3:08:cb:3d:
59:4a:ce:bc:fa:6e:42:b8:26:1f:af:dc:c1:96:14:
60:2f:4c:05:bd:ea:bd:2f:87:e9:14:86:aa:44:94:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:EE:3D:9A:42:6F:69:55:46:AC:53:73:DD:80:BC:55:96:FD:F2
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/4M3uPZpCb2lVRqxTc92AvFWW_fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.205.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4c:51:ca:3f:e7:bb:9b:ed:f0:e0:a0:93:d1:c8:9a:55:9b:
d6:c8:c7:35:80:96:12:b2:10:33:15:31:0a:e4:ab:d9:cf:e6:
1b:6d:40:f6:d1:20:4b:c2:33:00:e7:72:6a:9f:89:0c:21:a9:
df:df:dd:00:68:15:9c:b9:1c:3e:8c:f7:dd:b1:e9:52:fa:05:
65:11:c7:48:dd:a8:f2:bf:57:06:13:b7:3c:5b:73:ce:8c:d1:
1e:25:73:fc:8d:42:11:87:a4:2a:5d:37:89:d5:47:c9:2f:3b:
2f:49:4e:d0:a8:0a:25:ce:13:57:05:a7:91:16:fe:25:18:6a:
e1:36:99:f9:fe:8c:b7:97:9f:a2:6b:38:03:bd:67:88:05:ae:
02:ed:6f:9b:7e:7d:dc:f9:fc:ed:d2:9d:f7:ab:1a:6d:eb:91:
1c:63:77:55:2f:8d:24:3c:72:9a:75:8e:0a:93:cf:e7:94:6d:
47:61:03:9c:d5:2d:7c:44:b4:5b:00:29:9c:41:f8:63:16:3a:
15:8d:61:ae:f0:2b:d9:19:f7:01:49:51:f7:e4:c5:4b:10:ad:
75:0c:b2:c1:cc:5d:45:3e:eb:c0:b1:61:8d:d6:53:6d:ab:27:
b8:83:d9:fc:50:7e:cd:75:a3:f7:50:2f:4d:0e:e1:f8:99:a2:
7d:fc:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:49 2026 by rpki-client