Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/e4tkO_f-8sLW4IOzod1hYlDJWR8.roa
File: e4tkO_f-8sLW4IOzod1hYlDJWR8.roa (raw, json)
Hash identifier: vByudprL6j+tmTk8XzAiLNnsGuB+rpeqOZ6CgLdWdD8=
Subject key identifier: 7B:8B:64:3B:F7:FE:F2:C2:D6:E0:83:B3:A1:DD:61:62:50:C9:59:1F
Certificate issuer: /CN=c36600ac7ad092b2f4c71aa81907040111c63075
Certificate serial: 019C65FB9F17CC013F9C49B9C5AA28C893FB
Authority key identifier: C3:66:00:AC:7A:D0:92:B2:F4:C7:1A:A8:19:07:04:01:11:C6:30:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/e4tkO_f-8sLW4IOzod1hYlDJWR8.roa
Signing time: Mon 16 Feb 2026 10:25:14 +0000
ROA not before: Mon 16 Feb 2026 10:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206872
IP address blocks: 195.216.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:fb:9f:17:cc:01:3f:9c:49:b9:c5:aa:28:c8:93:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36600ac7ad092b2f4c71aa81907040111c63075
Validity
Not Before: Feb 16 10:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b8b643bf7fef2c2d6e083b3a1dd616250c9591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:1e:31:87:75:ba:7d:55:ab:2b:82:c9:c6:
b7:28:22:61:16:53:bf:f2:94:09:70:ee:ad:f9:cf:
c3:0a:93:c4:1f:43:4c:c1:0c:99:82:8c:7b:ae:ac:
01:1c:61:49:b2:bc:3e:61:89:c8:cd:4c:66:b4:52:
d5:8a:60:ab:ee:0e:49:96:cc:35:ea:59:30:18:7d:
43:73:c9:6e:62:3b:44:c3:30:1d:65:20:c7:89:4f:
6b:5a:0a:f6:1f:cb:9c:99:2d:b4:ce:43:83:07:51:
cd:b5:60:25:94:de:ed:fb:9e:4f:25:6f:fd:f0:50:
ed:27:b0:2c:d1:aa:25:20:e0:a8:a7:0a:57:62:ec:
79:49:31:14:98:0f:8f:90:7d:8b:17:4f:38:c8:93:
29:c4:58:c0:2d:f7:d8:01:e7:2b:2a:a5:51:68:ae:
8a:03:5f:25:b3:72:65:8b:0d:83:5d:2a:39:ad:4a:
ca:5b:3f:b5:8a:f9:36:df:16:a3:fe:d9:e0:56:c9:
69:9d:0f:ef:ff:9c:53:3e:e7:4b:b1:f2:6a:3b:11:
71:ed:73:be:7f:34:99:49:42:ea:3d:33:a3:b2:a0:
7e:b9:6a:ff:78:67:67:93:2d:3c:9d:59:4a:57:69:
e4:76:10:ef:df:d4:8d:d5:95:72:21:a6:7a:13:31:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:64:3B:F7:FE:F2:C2:D6:E0:83:B3:A1:DD:61:62:50:C9:59:1F
X509v3 Authority Key Identifier:
keyid:C3:66:00:AC:7A:D0:92:B2:F4:C7:1A:A8:19:07:04:01:11:C6:30:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2YArHrQkrL0xxqoGQcEARHGMHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/e4tkO_f-8sLW4IOzod1hYlDJWR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ead9d-dd58-44ba-aa57-6842799f11ab/1/w2YArHrQkrL0xxqoGQcEARHGMHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.235.0/24
Signature Algorithm: sha256WithRSAEncryption
70:99:76:e2:8e:c4:13:3c:f5:55:fb:ac:f4:40:47:da:46:ec:
5c:c8:50:a3:38:2c:f3:5a:56:c2:92:9b:7f:0b:f6:4c:4b:34:
28:c7:5e:8c:f0:57:05:c4:7f:53:ef:e4:51:41:b1:71:cb:e2:
db:ce:1a:c5:ee:6c:87:92:c7:6d:3c:9d:30:e2:0a:c7:59:48:
b4:0f:3a:69:bd:29:c2:68:2a:5c:85:67:03:e6:92:f1:71:76:
a2:9b:8d:d6:46:46:9d:b1:06:51:f6:73:40:9d:42:f9:2e:e1:
74:bb:27:30:6e:81:07:9d:45:8a:56:5a:ac:d3:54:43:a6:ec:
37:e7:94:0d:2d:fa:00:48:37:c8:ec:87:9b:96:65:6e:ab:bb:
be:d6:91:f1:ae:92:e2:56:4a:aa:91:49:9a:8d:6e:fc:5a:95:
3d:37:3a:b4:6e:82:79:6b:af:0f:89:1f:00:e5:cc:b0:2e:87:
a7:40:88:51:48:f6:2b:e7:3d:c2:89:07:ac:9a:6d:45:2f:a1:
ed:87:ee:31:ef:3a:e0:a5:8b:0b:d9:4c:94:5f:c9:65:23:ad:
c9:6b:92:c1:f4:6b:c2:3d:28:f4:00:ac:bd:d0:3b:f6:6d:04:
26:c5:06:21:1f:35:9f:b1:42:14:07:d2:fb:57:41:03:fb:78:
b6:45:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:06 2026 by rpki-client