Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4RELaJy8UHIkvCU7F_WCYCQtiCM.roa
File: 4RELaJy8UHIkvCU7F_WCYCQtiCM.roa (raw, json)
Hash identifier: 0O/ZZ1Nh/4ZkYFqUrZVebMGvfp8dbcYCbjFzW+GBno8=
Subject key identifier: E1:11:0B:68:9C:BC:50:72:24:BC:25:3B:17:F5:82:60:24:2D:88:23
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019DFD88F44B1F5C75C2FAA8EA3E674E4EEE
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4RELaJy8UHIkvCU7F_WCYCQtiCM.roa
Signing time: Wed 06 May 2026 13:45:04 +0000
ROA not before: Wed 06 May 2026 13:45:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35682
IP address blocks: 45.130.148.0/24 maxlen: 24
185.191.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:88:f4:4b:1f:5c:75:c2:fa:a8:ea:3e:67:4e:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 6 13:45:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1110b689cbc507224bc253b17f58260242d8823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:c7:0d:35:05:56:45:27:27:e4:1d:20:17:
ad:d1:a3:04:ff:2d:3a:b4:b5:2a:c2:95:65:ae:21:
00:36:01:52:83:b7:ff:82:80:55:ed:06:40:1c:dd:
5c:9b:96:15:30:69:f1:6b:37:f8:2a:34:7d:8d:04:
d2:29:75:88:c0:88:6a:fc:d2:c8:3a:d9:bf:5b:6a:
05:ef:ec:55:4a:db:14:46:50:2e:6b:7c:f4:d5:53:
66:d1:a7:54:da:d9:6e:a4:f3:fb:a8:93:0b:aa:84:
1f:86:78:ce:c7:aa:db:66:72:f5:ed:9b:54:2c:1e:
e6:60:40:c8:ea:4c:ad:48:58:59:9d:49:c6:66:e9:
b9:e6:55:ae:88:bb:3e:e1:3c:3b:b5:17:7d:6e:1f:
95:af:1a:10:9b:e6:05:34:ca:92:56:2f:8b:a9:88:
04:fb:41:a1:88:56:39:d2:33:08:20:d9:95:c5:c0:
8f:f7:7c:4c:e5:fb:1f:91:66:ad:9e:ec:54:30:bd:
39:b1:db:86:ab:cf:cb:0c:12:bc:88:7e:a2:65:48:
83:9f:72:c0:a0:37:03:53:59:0e:43:9c:a9:34:de:
8b:45:b6:ce:8d:6e:d8:cc:3a:06:92:e2:54:28:71:
8f:0f:0d:10:ad:e7:c3:0f:bb:29:d8:7f:97:69:d4:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:0B:68:9C:BC:50:72:24:BC:25:3B:17:F5:82:60:24:2D:88:23
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4RELaJy8UHIkvCU7F_WCYCQtiCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.148.0/24
185.191.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:0a:73:cd:82:ad:23:f2:ae:1a:4b:77:d9:a6:6e:6c:17:
a4:5e:0e:09:b5:39:9a:04:0b:38:8f:65:6a:e3:28:fc:6a:8f:
f7:78:0e:08:22:d0:7d:93:f0:a4:5c:b3:af:4e:60:bb:e6:da:
d9:ed:2a:2d:2d:c7:e1:63:1e:0c:c1:71:71:00:4d:22:2b:a5:
3a:6d:87:28:99:0b:d0:4a:27:c2:62:17:14:c7:0b:9a:15:03:
58:e4:e2:e7:3c:81:8b:62:08:75:0d:d0:7c:83:f8:e5:24:75:
c6:b3:96:04:eb:0b:67:bd:80:89:49:5d:95:60:3a:5c:f5:6a:
e7:35:f2:7e:97:12:6a:2b:d9:d6:f6:d5:12:ce:98:0a:3b:76:
1c:40:69:98:14:8c:40:52:05:8a:1a:cd:4f:b3:89:55:ba:38:
30:52:5e:a5:82:7d:a8:5a:61:db:97:2b:7a:9d:3f:68:01:ae:
c9:93:1c:eb:6d:d8:d6:ec:c8:dc:ac:47:f6:ea:4c:6c:6d:be:
59:54:02:5a:bf:70:96:37:f5:6f:e6:4e:03:99:25:1e:31:47:
6c:10:37:5f:55:db:ac:31:ef:03:85:be:ad:c2:69:5d:43:9e:
ba:1d:74:46:19:3a:68:69:c6:78:6d:41:25:f9:dc:05:03:9d:
fe:e1:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:03 2026 by rpki-client