Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4Gi280zVvXja-h863FPoTJqCAi0.roa
File: 4Gi280zVvXja-h863FPoTJqCAi0.roa (raw, json)
Hash identifier: 1jSYXDAECFTtcNHhoT2qTSIJHWYgIgIHzXhTWCzBZFs=
Subject key identifier: E0:68:B6:F3:4C:D5:BD:78:DA:FA:1F:3A:DC:53:E8:4C:9A:82:02:2D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019F1A7A344A39FA8EB7FC64CB9A994D3FA7
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4Gi280zVvXja-h863FPoTJqCAi0.roa
Signing time: Tue 30 Jun 2026 21:40:44 +0000
ROA not before: Tue 30 Jun 2026 21:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 37.32.43.0/24 maxlen: 24
185.212.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:7a:34:4a:39:fa:8e:b7:fc:64:cb:9a:99:4d:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 30 21:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e068b6f34cd5bd78dafa1f3adc53e84c9a82022d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:3e:04:13:c1:45:4f:c0:3d:86:59:51:98:
1b:7e:b8:1c:8c:7b:a0:c4:25:d3:56:fe:af:91:a9:
87:44:ce:c5:f0:48:d8:0c:57:8f:76:50:14:a1:97:
cb:1a:cb:0f:5a:c5:fb:6e:c8:ad:ff:bb:eb:31:ae:
05:20:69:29:e6:1a:34:21:e6:5b:5f:53:e4:01:f6:
1e:a0:dc:51:e8:77:49:e8:b2:5c:5e:d2:c1:48:53:
d8:93:0b:76:22:7b:49:16:b9:11:f9:92:bb:83:c9:
a5:b8:c5:ae:e8:ba:d8:f6:72:69:2d:82:81:cb:e5:
0e:2a:a6:c1:74:ca:bc:fe:a8:e0:db:d0:52:79:68:
d4:f3:a6:c4:5f:0d:e5:40:96:05:99:65:1d:c4:67:
de:a3:d3:6e:c5:f1:70:f1:74:1c:6a:77:b2:79:5f:
5a:fc:09:e7:a4:fa:c5:17:ce:34:89:a3:d8:bc:1e:
99:35:3d:8c:5e:f9:99:6c:84:bd:e2:f6:ee:71:72:
12:aa:86:17:a1:60:79:03:ad:d8:b1:23:3c:0e:4f:
e0:3d:89:fd:d8:19:64:39:65:3a:b1:5b:55:ca:11:
8c:d8:9e:77:1d:9f:60:ff:75:96:8e:ef:11:41:3e:
ff:f7:e0:ed:2e:5f:14:30:98:76:d3:bc:28:60:c7:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:B6:F3:4C:D5:BD:78:DA:FA:1F:3A:DC:53:E8:4C:9A:82:02:2D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/4Gi280zVvXja-h863FPoTJqCAi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.43.0/24
185.212.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7a:b6:6a:f5:4d:85:7a:68:e8:6c:17:39:8e:d0:9c:cb:30:
4c:7b:ad:ed:e1:72:4d:2a:ca:e1:58:9d:ea:6a:1c:c6:3c:81:
7f:6b:50:7e:7e:4c:98:90:7a:e5:1c:4d:dd:0f:6c:74:75:c5:
fc:a3:01:8a:d6:04:e7:54:4d:59:ab:7d:e5:be:fb:0e:99:60:
8f:e1:96:76:a1:64:5e:50:2d:e5:b8:6b:67:c6:a0:26:55:9c:
33:51:94:7a:ba:3f:b8:68:e7:19:83:92:73:b0:5a:da:c5:ce:
cd:77:e8:24:a5:14:56:27:8c:7a:b7:5c:84:30:8a:3e:ec:76:
db:cd:c2:ae:b2:a6:40:56:c0:62:f2:44:8c:2b:f3:24:2d:cb:
9a:06:c5:19:53:b4:b7:6f:19:21:73:af:35:f3:db:cc:6f:65:
2d:c8:9f:ac:79:ae:df:38:c5:10:8e:cf:28:9a:1d:5c:e1:17:
67:fd:46:24:c1:f2:41:f0:ff:82:c4:6b:0f:50:95:d2:f5:7c:
e5:13:79:9b:23:95:13:8e:e9:4e:64:3a:08:53:a2:d5:64:ef:
66:b4:39:d7:08:57:74:9b:4b:22:34:25:ef:21:b7:a4:de:ed:
69:ae:ed:fb:c8:fb:68:d2:e7:35:3c:bd:a2:03:e4:d0:c8:2a:
0e:e9:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:18 2026 by rpki-client