Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/4blS8i-IvJFmYcw1UMVYU50adH4.roa
File: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (raw, json)
Hash identifier: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=
Subject key identifier: E1:B9:52:F2:2F:88:BC:91:66:61:CC:35:50:C5:58:53:9D:1A:74:7E
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019F3170CCBF977013510270B4BE2EC5C794
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/4blS8i-IvJFmYcw1UMVYU50adH4.roa
Signing time: Sun 05 Jul 2026 08:41:43 +0000
ROA not before: Sun 05 Jul 2026 08:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57822
IP address blocks: 94.247.106.0/24 maxlen: 24
185.54.246.0/24 maxlen: 24
2a02:47a0:3::/48 maxlen: 48
2a02:47a0:4::/48 maxlen: 48
2a02:47a0:201::/48 maxlen: 48
2a02:47a0:202::/48 maxlen: 48
2a02:47a0:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:70:cc:bf:97:70:13:51:02:70:b4:be:2e:c5:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jul 5 08:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1b952f22f88bc916661cc3550c558539d1a747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:66:c7:87:a5:dd:52:5d:41:da:dc:04:5e:
88:d1:cc:a2:4a:f0:67:c2:22:90:44:5c:16:fd:8e:
74:24:20:e6:ea:6b:e9:a1:87:62:f4:a2:88:17:c3:
df:74:4e:0a:b9:f1:9c:a9:54:25:5b:10:76:4e:7b:
06:15:14:b8:00:6f:5d:62:1c:77:e8:b7:7c:0f:59:
2a:23:3a:04:95:4c:77:ab:9c:83:54:2b:b5:0d:66:
a8:38:84:e0:d8:ce:fe:25:74:ce:ec:0f:8b:ff:9c:
f7:f5:54:33:cc:70:dd:0b:a1:d6:d6:da:d1:26:5c:
c7:7c:df:fa:09:99:e8:cb:ac:fe:ba:22:63:86:34:
5a:57:8f:11:4a:a9:77:8b:a1:21:01:eb:97:4b:98:
40:5f:7f:fe:8d:2c:ab:80:78:45:18:f2:c8:e0:d1:
33:3f:5a:a6:94:d2:fe:c9:e2:35:01:9c:c2:98:7d:
cd:a8:68:a7:5a:12:bb:16:2c:9e:20:3e:d4:d5:9a:
79:e3:53:e4:86:5c:4e:31:d4:69:f4:1d:5d:78:61:
c4:3b:90:98:e3:91:11:d8:c8:29:48:21:a0:1d:48:
02:cc:6e:f9:a9:c5:b0:63:e1:81:ee:cc:98:a1:7f:
42:a2:d0:49:17:1a:19:f9:b6:f0:4f:48:39:4a:5e:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:52:F2:2F:88:BC:91:66:61:CC:35:50:C5:58:53:9D:1A:74:7E
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/4blS8i-IvJFmYcw1UMVYU50adH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.106.0/24
185.54.246.0/24
IPv6:
2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff
2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:44:f7:dd:6e:b8:60:e7:e2:f1:6f:28:55:51:2e:e9:48:c0:
19:19:70:35:f1:58:43:53:a4:1d:25:ef:47:44:05:a4:9d:ad:
0c:a5:7b:8a:31:d2:3a:4a:7f:5b:f0:c1:ee:9a:9c:af:0e:cd:
ed:e5:59:84:c3:1d:06:be:b7:8e:a4:ec:2a:39:6c:47:c3:8f:
e6:12:50:3f:e6:c6:46:90:07:95:88:d8:77:68:4a:b9:0c:d2:
7d:f5:e9:b8:58:0c:fb:9e:eb:c8:41:a6:74:80:98:16:01:16:
c8:92:a7:3e:2c:7f:1a:01:09:c2:e4:c9:27:3c:f4:b1:27:c1:
ce:09:e8:ec:2f:02:2b:75:57:8b:a6:9f:3b:f6:bc:a7:3b:95:
f6:b5:eb:1e:68:80:e6:82:b4:11:1a:4a:5d:24:c2:33:b5:9a:
89:34:d7:79:18:5f:6d:7c:12:72:e9:f0:3a:9e:d8:d5:49:f4:
f7:f5:b8:c8:0e:03:e5:6a:2a:61:12:85:16:0f:46:b1:81:28:
27:b6:6c:0d:f4:25:29:74:a5:39:15:3d:1a:fe:15:18:42:c8:
16:b5:88:ed:60:40:d8:e4:02:59:71:66:18:98:a8:a3:fa:2d:
47:d0:dd:92:b1:79:d3:fa:39:f0:4a:31:0a:8c:63:3b:ad:43:
de:c2:9c:72
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZ8xcMy/l3ATUQJwtL4uxceUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjYwNzA1MDg0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWI5NTJmMjJmODhiYzkxNjY2MWNjMzU1MGM1NTg1MzlkMWE3NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuZmx4el3VJdQdrcBF6I0cyiSvBn
wiKQRFwW/Y50JCDm6mvpoYdi9KKIF8PfdE4KufGcqVQlWxB2TnsGFRS4AG9dYhx3
6Ld8D1kqIzoElUx3q5yDVCu1DWaoOITg2M7+JXTO7A+L/5z39VQzzHDdC6HW1trR
JlzHfN/6CZnoy6z+uiJjhjRaV48RSql3i6EhAeuXS5hAX3/+jSyrgHhFGPLI4NEz
P1qmlNL+yeI1AZzCmH3NqGinWhK7FiyeID7U1Zp541PkhlxOMdRp9B1deGHEO5CY
45ER2MgpSCGgHUgCzG75qcWwY+GB7syYoX9CotBJFxoZ+bbwT0g5Sl5KewIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFOG5UvIviLyRZmHMNVDFWFOdGnR+MB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvNGJsUzhpLUl2SkZtWWN3MVVNVllVNTBhZEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDASBAIAATAMAwQAXvdqAwQA
uTb2MC4EAgACMCgwEgMHACoCR6AAAwMHACoCR6AABDASAwcAKgJHoAIBAwcCKgJH
oAIAMA0GCSqGSIb3DQEBCwUAA4IBAQCRRPfdbrhg5+LxbyhVUS7pSMAZGXA18VhD
U6QdJe9HRAWkna0MpXuKMdI6Sn9b8MHumpyvDs3t5VmEwx0GvreOpOwqOWxHw4/m
ElA/5sZGkAeViNh3aEq5DNJ99em4WAz7nuvIQaZ0gJgWARbIkqc+LH8aAQnC5Mkn
PPSxJ8HOCejsLwIrdVeLpp879rynO5X2teseaIDmgrQRGkpdJMIztZqJNNd5GF9t
fBJy6fA6ntjVSfT39bjIDgPlaiphEoUWD0axgSgntmwN9CUpdKU5FT0a/hUYQsgW
tYjtYEDY5AJZcWYYmKij+i1H0N2SsXnT+jnwSjEKjGM7rUPewpxy
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:47 2026 by rpki-client