Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4LWM9jmu5dEFIkWMj4lsis4bf5Y.roa
File: 4LWM9jmu5dEFIkWMj4lsis4bf5Y.roa (raw, json)
Hash identifier: oLteZeeC9ZgyjupmFjgPqihhDa9Wy5C3AGWlzOhe6Mk=
Subject key identifier: E0:B5:8C:F6:39:AE:E5:D1:05:22:45:8C:8F:89:6C:8A:CE:1B:7F:96
Certificate issuer: /CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Certificate serial: 019F2368E224618927267D0338E5CCDB8769
Authority key identifier: BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4LWM9jmu5dEFIkWMj4lsis4bf5Y.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28715
IP address blocks: 185.104.120.0/24 maxlen: 24
185.104.121.0/24 maxlen: 24
185.104.122.0/24 maxlen: 24
2a06:3000::/29 maxlen: 29
2a06:3000::/36 maxlen: 36
2a06:3000::/48 maxlen: 48
2a06:3000:1::/48 maxlen: 48
2a06:3000:2::/48 maxlen: 48
2a06:3000:3::/48 maxlen: 48
2a06:3000:4::/48 maxlen: 48
2a06:3000:5::/48 maxlen: 48
2a06:3000:6::/48 maxlen: 48
2a06:3000:1000::/36 maxlen: 36
2a06:3000:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e2:24:61:89:27:26:7d:03:38:e5:cc:db:87:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0b58cf639aee5d10522458c8f896c8ace1b7f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:f4:c7:ff:75:55:4c:c9:55:06:3b:f1:4e:
bf:b2:43:a1:68:98:0b:ee:28:9b:f6:e0:bc:4f:a7:
8a:7e:f3:be:8c:57:e8:f2:6c:5b:d1:ee:19:19:86:
cc:43:3c:6e:8d:90:a5:10:53:77:ca:21:53:2c:14:
7e:b6:c1:9c:91:f6:03:18:dd:6b:e0:1f:5d:79:60:
8a:2e:e4:a2:64:2c:0e:1a:68:12:74:47:e6:2b:b4:
7d:45:1e:62:1b:62:f7:fe:b3:26:a4:dd:ee:6d:35:
4b:35:3d:d0:52:8c:05:68:00:38:99:4d:27:7b:30:
00:5f:ee:27:84:f8:4e:d1:d2:69:0c:8e:44:15:86:
f0:98:22:9b:b8:06:5f:d9:e1:30:d8:35:35:f9:03:
d6:eb:39:e2:e2:ee:fd:a6:c8:47:e9:fb:85:74:9d:
2c:6b:70:da:65:67:44:ee:34:31:8a:0a:f6:9c:65:
f5:93:67:a7:64:cf:88:69:dd:89:20:83:c7:bd:62:
8f:9a:b9:76:ce:31:05:87:52:91:c3:07:4f:00:b1:
6a:f3:34:a2:04:6f:67:c4:f2:52:d6:6a:29:c9:c4:
f0:2e:39:50:e8:da:be:6c:7c:83:95:93:a7:c4:d1:
6b:68:e5:2f:92:1b:95:42:3f:ba:9d:a4:7b:63:fb:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:8C:F6:39:AE:E5:D1:05:22:45:8C:8F:89:6C:8A:CE:1B:7F:96
X509v3 Authority Key Identifier:
keyid:BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/4LWM9jmu5dEFIkWMj4lsis4bf5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.120.0-185.104.122.255
IPv6:
2a06:3000::/29
Signature Algorithm: sha256WithRSAEncryption
33:61:fe:3b:57:fc:5b:ad:95:47:cb:ee:48:c2:aa:e5:41:02:
2f:c7:89:56:35:8a:6d:0f:6f:77:57:74:6d:a7:0a:1e:6c:c5:
04:94:33:1f:9d:fd:28:76:01:e8:2f:34:1f:7b:8a:89:2b:33:
1c:d5:0f:1b:53:90:e8:f0:1b:07:8e:b6:1a:f8:6b:0e:c8:94:
ab:95:48:c4:cc:d3:75:fb:45:93:1c:fb:9f:9e:90:8f:d0:76:
2d:0c:1f:1a:44:db:36:b9:ed:af:85:ce:db:c0:6a:78:1b:5e:
45:d9:48:94:10:ba:e6:80:e0:1d:ba:94:a2:ba:57:b2:bb:19:
78:cc:b7:21:c0:22:e6:84:a9:67:eb:10:f7:71:77:1e:75:e6:
a3:33:2b:f4:ac:ad:8a:9e:21:b8:c3:a8:00:90:fa:08:8d:15:
84:93:0e:89:44:4b:52:29:05:59:2c:5b:e5:a3:d6:a0:f6:dc:
6c:80:41:0b:90:cd:83:78:bc:c2:5a:63:ef:94:1f:36:3f:4a:
e3:f3:f5:6d:ea:2b:5d:d4:c7:42:49:b3:c3:ec:b5:54:28:58:
7d:0f:af:f9:5f:1a:b5:ff:08:5b:59:67:5b:7f:22:ba:26:02:
64:eb:b2:bb:94:10:af:ea:9c:3c:70:86:be:bf:39:34:b9:84:
38:6a:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:51 2026 by rpki-client