Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa
File: 4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa (raw, json)
Hash identifier: bX+Qa++BgGAVTurdoW+HtFnLZYYAEuUvxiVv/7oFu2g=
Subject key identifier: E2:74:94:23:0B:47:D4:F5:95:B6:36:41:B1:BE:EE:F1:A1:88:1D:D8
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 019F13E0052C66B82C58B5683424A043040D
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa
Signing time: Mon 29 Jun 2026 14:54:36 +0000
ROA not before: Mon 29 Jun 2026 14:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211881
IP address blocks: 91.246.45.0/24 maxlen: 24
2a14:a980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e0:05:2c:66:b8:2c:58:b5:68:34:24:a0:43:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Jun 29 14:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e27494230b47d4f595b63641b1beeef1a1881dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:02:bb:16:36:44:62:70:42:5b:16:37:6d:
f7:c4:50:01:10:48:fe:b7:be:07:11:78:40:fc:29:
b5:52:02:b1:a7:e7:b5:05:5a:e8:39:a0:b3:f1:a8:
2f:0a:13:e1:d1:8f:1c:5d:3b:85:dd:da:e6:4f:d6:
6f:ee:97:37:7e:1a:d6:81:e8:f2:ae:31:83:d4:1d:
5a:b4:d0:23:e5:5c:bd:c4:78:85:06:a8:f9:95:24:
47:dc:6d:f7:53:59:63:93:29:62:88:e7:f6:fa:6c:
8a:87:ec:99:99:75:d5:95:56:1b:93:4b:56:55:6b:
2b:50:67:11:b3:64:43:d9:72:99:67:4c:a6:88:a4:
dc:85:00:dc:85:e4:f1:bd:6f:3d:2a:e3:11:51:d0:
e5:1e:c6:e6:53:bd:f8:d2:51:ad:48:48:01:f7:eb:
4c:33:2e:0d:07:56:5d:10:30:13:b0:27:12:28:40:
f2:36:90:16:94:aa:4f:39:5b:bb:f2:56:0a:f4:5d:
99:1b:3b:00:1c:ea:87:34:c8:e6:9d:e3:2b:2b:35:
56:92:8b:3f:fe:f4:88:1c:42:10:8e:f6:f0:29:fb:
7b:a7:44:a8:ed:43:3a:b6:18:5d:b2:89:a5:c2:21:
36:08:3a:92:73:97:ac:ef:2e:54:78:3e:27:0f:cf:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:94:23:0B:47:D4:F5:95:B6:36:41:B1:BE:EE:F1:A1:88:1D:D8
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.45.0/24
IPv6:
2a14:a980::/48
Signature Algorithm: sha256WithRSAEncryption
54:8f:c4:a4:3d:b9:b9:1b:64:d2:27:cf:33:44:34:98:c0:62:
c4:11:d8:04:55:0c:b1:6d:e7:2e:2a:dd:ba:84:56:29:43:1d:
f0:53:91:fa:38:6c:78:8a:96:53:a4:93:e3:94:59:ec:bb:43:
53:5c:3a:9d:28:23:c2:56:e8:ab:61:18:44:e8:2e:31:0d:5e:
85:b4:58:41:06:13:b1:05:7c:88:1a:40:d6:7e:f0:2c:21:5f:
e4:e1:a5:fc:4c:24:fc:a1:da:b3:c6:1e:b7:60:1d:32:58:ca:
ba:80:cf:19:af:a9:1f:5a:15:e7:31:8e:1b:34:45:cd:9e:58:
bd:a9:9f:fe:8d:84:57:df:9d:fb:62:46:ca:71:68:72:f7:e0:
ae:bd:ad:ad:c6:60:c5:1b:50:e9:dc:99:0e:cf:cf:b2:c8:f7:
02:a3:1a:6a:cc:8e:27:16:ee:cc:71:6d:1a:af:29:93:7e:fc:
03:a4:d7:7b:2e:7b:68:e0:86:87:a9:33:68:2c:22:48:f8:0a:
4c:8a:8e:34:97:aa:ea:ab:e7:96:8a:44:6d:b5:74:42:31:b7:
3c:b4:53:c3:2d:90:5a:70:d4:f1:39:9f:54:7b:b5:ee:48:53:
3a:1a:7d:33:ee:e4:ee:3c:d2:fc:56:c5:f1:00:cf:5e:87:4a:
54:9f:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:02 2026 by rpki-client