Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/x4qFKRANAaEzFw65uXjBX8Q0YzM.roa
File: x4qFKRANAaEzFw65uXjBX8Q0YzM.roa (raw, json)
Hash identifier: udTLiFbZWbqbbeAZDxB4yt4p0RUzVY8opqITNTWH/FM=
Subject key identifier: C7:8A:85:29:10:0D:01:A1:33:17:0E:B9:B9:78:C1:5F:C4:34:63:33
Certificate issuer: /CN=951f839a413ed93ebf78f0432cbe25f4fae8e905
Certificate serial: 01A0C89CF2D0EC9CA8BB12CEB0DAD2401934
Authority key identifier: 95:1F:83:9A:41:3E:D9:3E:BF:78:F0:43:2C:BE:25:F4:FA:E8:E9:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/x4qFKRANAaEzFw65uXjBX8Q0YzM.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 139.166.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f2:d0:ec:9c:a8:bb:12:ce:b0:da:d2:40:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951f839a413ed93ebf78f0432cbe25f4fae8e905
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c78a8529100d01a133170eb9b978c15fc4346333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:1e:67:2c:86:9e:ee:44:ac:01:b2:c2:18:
32:a3:81:bb:01:e4:76:8d:a0:0c:65:78:58:2b:66:
64:c8:35:22:a2:18:4c:76:21:2d:81:b4:41:a3:8e:
a6:ad:ab:0c:c5:e2:25:db:ec:9b:c4:03:a5:42:1c:
4c:78:61:b7:86:fe:74:95:11:ec:b6:8a:cf:1c:82:
0b:ee:ef:72:ae:92:20:22:5f:5f:8c:eb:8f:1d:80:
d7:b3:de:c4:43:fe:0b:1a:a5:b6:3b:30:da:37:43:
16:5b:b0:7d:f4:d8:4e:ae:b5:b5:ed:a8:c8:2c:00:
17:92:c5:a4:55:cf:87:42:93:b9:f7:7d:8d:6a:86:
ef:98:3d:f9:0c:0a:68:13:a8:fa:2b:9c:84:84:b4:
bb:fc:5b:86:18:aa:22:31:d0:06:71:04:96:48:b9:
2d:32:57:5e:05:ca:7a:a6:8d:e3:8b:b7:66:67:17:
14:b5:ec:8d:91:8d:fd:9b:e6:b3:14:d0:33:ac:e0:
e5:4b:5a:dc:49:a0:93:f2:f4:f0:18:fb:bc:82:b7:
ab:fb:9e:9a:90:ee:a8:dd:50:95:7f:2e:5b:b8:1b:
3b:42:f1:72:7a:89:98:f9:d2:73:df:b0:26:a9:02:
34:76:04:90:b9:25:08:f8:01:fd:d3:ba:de:da:8e:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8A:85:29:10:0D:01:A1:33:17:0E:B9:B9:78:C1:5F:C4:34:63:33
X509v3 Authority Key Identifier:
keyid:95:1F:83:9A:41:3E:D9:3E:BF:78:F0:43:2C:BE:25:F4:FA:E8:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR-DmkE-2T6_ePBDLL4l9Pro6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/x4qFKRANAaEzFw65uXjBX8Q0YzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/35c5db-32dd-429c-85a5-e8ba2aaa0f8b/1/lR-DmkE-2T6_ePBDLL4l9Pro6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:75:e3:a6:29:13:f9:2a:9a:98:e4:a3:de:86:d8:0e:c1:2d:
57:0d:c7:a7:85:4d:88:6d:59:a4:88:f6:e3:5b:a9:d2:6f:d3:
06:3c:46:86:23:e2:da:f2:a4:5c:f1:d1:3d:11:e4:5b:95:3c:
f7:39:f2:f0:75:27:f5:e7:fd:21:22:57:14:ee:2f:f4:1e:0c:
87:cd:b6:d1:f6:08:dd:27:cc:c5:db:1b:96:28:c6:88:e1:60:
29:67:91:20:22:c9:e4:bf:95:ce:3d:e5:df:70:42:fa:ea:99:
e2:74:40:3e:16:b2:9f:9a:79:7f:a2:88:55:0f:4c:5d:5f:22:
49:e9:08:bc:3d:ac:c4:f5:1d:d0:5c:9b:59:0e:61:3d:b5:8d:
2c:12:0d:89:9b:65:91:f1:e0:ab:3b:ee:23:67:34:d2:e7:b1:
f9:5e:07:9c:bf:fe:b3:04:2e:69:87:57:9a:58:99:81:3d:f9:
a8:93:53:05:a5:1b:82:ce:5a:74:26:5b:06:1a:ab:57:46:7d:
e0:84:dc:da:23:03:20:74:26:0d:fd:c6:ba:3b:ce:45:df:a2:
b3:7f:56:b3:94:9a:10:9a:66:3f:8a:e4:c1:f9:84:a9:68:b5:
42:e8:41:0f:ec:2a:a7:ab:f3:af:c1:f4:9a:b8:69:14:0c:b2:
3e:dd:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:51:08 2026 by rpki-client