Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/4K_3xmebXaIWZntxmO5UHmSiOZ4.roa
File: 4K_3xmebXaIWZntxmO5UHmSiOZ4.roa (raw, json)
Hash identifier: 72+l83pi892CUObU5HxruL4klcaqhwa7zeHELCzl2wY=
Subject key identifier: E0:AF:F7:C6:67:9B:5D:A2:16:66:7B:71:98:EE:54:1E:64:A2:39:9E
Certificate issuer: /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial: 019CE68C26FD0E1AAD7B166B92ACB5FFD0A9
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/4K_3xmebXaIWZntxmO5UHmSiOZ4.roa
Signing time: Fri 13 Mar 2026 09:34:30 +0000
ROA not before: Fri 13 Mar 2026 09:34:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198050
IP address blocks: 5.253.230.0/24 maxlen: 24
64.46.124.0/24 maxlen: 24
64.190.43.0/24 maxlen: 24
91.231.70.0/23 maxlen: 23
91.231.80.0/22 maxlen: 22
176.97.24.0/21 maxlen: 21
194.169.138.0/24 maxlen: 24
209.162.203.0/24 maxlen: 24
212.47.33.0/24 maxlen: 24
2a0f:1700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:8c:26:fd:0e:1a:ad:7b:16:6b:92:ac:b5:ff:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Validity
Not Before: Mar 13 09:34:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0aff7c6679b5da216667b7198ee541e64a2399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:68:8a:e6:8c:6d:7c:3f:1f:12:e4:85:ae:
01:2d:e5:97:a6:34:13:3f:fa:f7:78:80:09:70:a5:
8d:86:b4:ca:80:3c:ef:ff:e1:b0:98:bf:23:c4:87:
fe:cd:9d:b2:d6:ff:60:1f:81:39:15:59:70:76:ed:
4b:bf:e9:d3:f2:30:3c:c0:14:c9:7a:e3:3a:1c:a9:
39:d7:de:dc:a2:af:7a:20:ce:4e:1c:f3:f4:ab:11:
b0:78:38:d2:bb:9f:d1:22:b0:9a:a2:2f:26:6c:95:
12:99:c1:61:97:91:b8:87:92:f7:c6:a5:dd:8c:50:
f0:b9:ce:8f:79:72:9c:f6:7a:d4:b1:ab:73:6d:a2:
2e:78:10:d9:cd:e4:0b:c3:3f:b9:de:cf:a8:dd:fa:
bc:29:36:21:8a:bf:1c:d5:3b:47:12:f6:45:2e:6a:
ba:b7:36:51:81:f6:ed:79:81:df:51:10:64:96:2a:
ad:94:22:7c:52:0f:c5:d6:95:b7:91:71:f8:14:67:
67:4b:db:c0:19:84:f2:d4:1f:a6:74:49:3f:51:42:
97:7b:1b:14:39:aa:e9:23:3c:7a:29:77:01:28:85:
73:7a:c7:d4:aa:b6:b8:07:ea:8c:62:1c:e2:5b:04:
3e:b1:f0:53:63:29:49:69:5d:05:eb:a1:46:92:0d:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:F7:C6:67:9B:5D:A2:16:66:7B:71:98:EE:54:1E:64:A2:39:9E
X509v3 Authority Key Identifier:
keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/4K_3xmebXaIWZntxmO5UHmSiOZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.230.0/24
64.46.124.0/24
64.190.43.0/24
91.231.70.0/23
91.231.80.0/22
176.97.24.0/21
194.169.138.0/24
209.162.203.0/24
212.47.33.0/24
IPv6:
2a0f:1700::/29
Signature Algorithm: sha256WithRSAEncryption
c7:d0:b2:90:cf:bc:9d:7d:9c:1c:3c:58:6d:2f:2c:85:16:8e:
48:a9:4d:0d:3c:98:56:41:4f:cd:86:b9:33:75:60:a0:07:b2:
84:f8:4b:2e:41:fb:36:e7:59:8f:15:18:7e:bb:b2:9c:37:81:
e4:39:9e:62:74:6a:12:9d:b8:f7:6d:57:3d:aa:13:27:a2:7a:
11:ba:69:0b:d2:e9:52:f2:31:d2:4d:39:4b:cc:55:6b:18:ac:
e4:67:08:05:8e:9a:7e:d7:4f:80:ad:86:db:da:13:9d:e4:e8:
5d:ae:7b:da:fb:b9:fb:49:ef:b7:72:26:0b:ac:ef:8f:86:56:
7a:4e:4d:22:ab:a8:67:20:96:78:dc:c3:f5:9a:cd:c9:a8:e9:
03:cd:27:f1:02:d9:44:6a:d9:c3:fc:9e:82:47:b5:03:62:29:
0a:78:63:b7:67:04:58:14:f5:d2:f3:55:22:c7:77:8e:fd:53:
f7:3e:2c:a7:c4:54:8b:fa:81:65:8e:2f:22:85:14:52:65:39:
ed:24:67:05:05:7d:6c:f4:54:7a:50:2e:93:ee:25:27:e5:77:
23:40:e8:b3:2f:70:62:30:05:0a:7b:92:77:ef:3d:29:d9:1f:
7e:bd:9f:f6:28:11:f8:1d:a7:6e:cb:6d:51:42:56:b3:7a:7d:
c1:c0:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:55 2026 by rpki-client