Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/adpBP4jM1W4t4AVnML6vQBZ_yh4.roa
File: adpBP4jM1W4t4AVnML6vQBZ_yh4.roa (raw, json)
Hash identifier: LvDq1gWnjhUnCFVJ+3Mcx5kpSzUPOxKKyLQHkkuIht4=
Subject key identifier: 69:DA:41:3F:88:CC:D5:6E:2D:E0:05:67:30:BE:AF:40:16:7F:CA:1E
Certificate issuer: /CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Certificate serial: 019D9120D0DD3F7CC31E1EBA8AC89810D634
Authority key identifier: 04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/adpBP4jM1W4t4AVnML6vQBZ_yh4.roa
Signing time: Wed 15 Apr 2026 12:32:20 +0000
ROA not before: Wed 15 Apr 2026 12:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207219
IP address blocks: 185.161.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:20:d0:dd:3f:7c:c3:1e:1e:ba:8a:c8:98:10:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Validity
Not Before: Apr 15 12:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69da413f88ccd56e2de0056730beaf40167fca1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:45:eb:77:ed:2c:88:81:32:a7:c0:67:58:
75:33:35:0e:e1:87:94:c1:e0:8e:81:be:d5:5e:54:
9f:c6:ab:1f:cd:6f:b0:55:0a:3f:cc:87:91:a7:93:
bf:6e:f4:c8:f7:f5:50:2d:f4:4c:19:4e:6c:9f:e3:
8e:63:4a:5d:98:ed:e5:4b:4d:ae:b3:0b:74:e3:c0:
86:23:a3:e8:94:36:9e:1d:91:5d:10:61:85:ed:78:
63:02:e0:85:50:e5:1e:6b:f5:0d:fd:22:11:41:95:
cd:b1:3d:8f:bb:91:a1:7a:9f:59:4d:a1:6d:9a:e9:
df:93:2b:9a:d4:a9:f9:d8:ef:7e:b0:23:ef:5a:5e:
4a:cf:49:5c:cf:64:0c:0e:b6:10:5e:5f:a6:6c:19:
ae:f1:c1:68:d9:70:2a:ee:9c:26:44:0e:5b:b3:48:
fa:22:31:01:a3:5b:73:9b:aa:20:e8:fc:7a:0b:cd:
56:14:28:8b:86:00:9c:cc:e6:54:d3:82:24:18:2f:
98:85:bb:d2:5f:bf:47:3d:ad:03:9f:33:12:07:e3:
4f:7d:a2:d1:a0:8e:2b:5e:e7:0a:94:c0:62:22:06:
00:6d:90:3a:96:99:43:33:3c:dc:7b:98:bc:cf:9d:
da:07:81:59:8f:7e:a9:01:ef:95:69:91:cc:78:7f:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DA:41:3F:88:CC:D5:6E:2D:E0:05:67:30:BE:AF:40:16:7F:CA:1E
X509v3 Authority Key Identifier:
keyid:04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/adpBP4jM1W4t4AVnML6vQBZ_yh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.244.0/22
Signature Algorithm: sha256WithRSAEncryption
af:69:c8:f2:c9:43:ab:c6:3b:c0:38:7c:d2:81:bf:97:1e:ed:
c1:a5:d3:a3:6f:20:aa:9c:17:3d:e2:1c:ff:17:5c:d1:0e:d9:
e0:bc:d9:b8:74:e3:69:50:c8:d3:ba:27:c1:2d:23:55:b5:f6:
5a:c7:96:01:e8:fc:dd:cb:fb:43:f9:ca:da:ae:bf:8d:f2:e3:
b6:5f:8e:7b:c3:b8:34:e5:5f:d3:24:88:0e:fd:4b:5b:88:41:
0b:86:2b:5a:e6:d5:03:05:0f:7c:77:f0:67:72:ee:a0:e7:42:
1e:0c:b0:0f:c4:f6:d9:7c:b7:c2:c4:3a:78:7e:d7:a0:cb:ba:
1c:ea:07:b5:3d:2e:a9:d7:d4:59:57:e4:9a:63:b0:d2:8a:72:
c3:7b:03:35:51:8e:2b:85:14:11:5b:1d:49:83:91:97:5d:bf:
4a:28:69:0e:8c:0a:c0:02:11:28:3f:f8:62:02:be:ee:e2:63:
97:68:d3:20:bd:c8:17:9d:97:dd:1c:99:a8:66:91:80:7c:6a:
52:37:b5:08:f9:b2:b6:b2:6b:19:7d:91:fc:c0:dd:a0:4a:e6:
e2:b4:c9:a0:4f:e2:b7:df:df:45:61:3d:8c:9d:a1:92:13:de:
9f:87:60:8b:78:f5:39:67:11:33:3c:67:b8:90:a7:74:c6:1b:
4c:9a:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:24 2026 by rpki-client