Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa
File: 4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa (raw, json)
Hash identifier: kTlgOCnXj5yewQ6mwepOm/lv0KOLYyNsXeNKGmeaC9c=
Subject key identifier: E1:CD:ED:25:34:E4:12:BA:19:B1:AD:42:E9:D8:7D:18:12:80:3E:B4
Certificate issuer: /CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Certificate serial: 019F22E0C58100B065B5BFEAFF107E18790F
Authority key identifier: DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa
Signing time: Thu 02 Jul 2026 12:49:43 +0000
ROA not before: Thu 02 Jul 2026 12:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204343
IP address blocks: 185.86.95.0/24 maxlen: 24
195.216.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:e0:c5:81:00:b0:65:b5:bf:ea:ff:10:7e:18:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Validity
Not Before: Jul 2 12:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1cded2534e412ba19b1ad42e9d87d1812803eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:91:03:7e:ed:bc:35:bb:99:34:1e:b1:1b:
37:ea:9d:18:46:8b:76:f8:d8:5d:18:b9:3f:62:46:
eb:d0:a0:06:4f:dc:89:02:09:c9:b2:31:a9:c2:1e:
81:15:5a:68:df:3c:64:1f:12:75:80:20:0b:08:34:
8f:1c:de:ba:d6:c4:a0:f3:d1:6a:11:d0:b5:da:1f:
cb:c6:03:80:3c:b9:26:df:b7:0c:89:f0:c3:33:66:
bc:dd:72:46:ab:a8:9d:fb:7a:10:8e:17:3e:bc:df:
33:e7:3e:4f:0d:40:2a:b4:60:8e:39:b7:c7:3b:f3:
2f:2c:21:f3:a1:59:c1:42:1f:13:41:c8:13:98:dc:
3d:ba:bd:b8:17:6f:27:8a:96:bb:81:f0:e1:38:56:
1d:07:08:d1:71:85:6e:14:0d:3f:aa:33:90:6c:2f:
34:b7:67:fa:8a:13:27:5c:3d:ab:61:39:b3:e3:fe:
86:37:2c:40:53:d6:52:6c:71:64:08:85:df:c1:e0:
7f:d7:66:28:01:34:0e:51:e4:a1:7e:bf:52:e7:e7:
4b:2e:8c:57:82:7a:63:2f:4d:c3:96:8b:f7:e9:85:
fb:3e:26:0f:c3:2c:42:46:fe:f3:c8:38:d0:39:f9:
8d:37:d0:dc:f9:42:a9:fb:8f:cd:b4:ec:7b:d5:d2:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:ED:25:34:E4:12:BA:19:B1:AD:42:E9:D8:7D:18:12:80:3E:B4
X509v3 Authority Key Identifier:
keyid:DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.95.0/24
195.216.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c0:90:38:1b:10:fb:bd:14:d5:51:fe:38:4e:cb:ae:c2:ef:
73:e4:1b:04:7f:c6:85:ce:97:9d:5f:4b:e5:88:63:54:64:8c:
a8:47:fe:af:67:4e:f8:9c:c2:fd:49:49:4d:4f:fc:94:7a:2f:
b1:d8:af:32:71:4f:f6:52:d5:13:40:41:02:34:37:38:55:5a:
f4:9b:ff:25:58:2d:3f:45:b8:e4:1b:06:5b:a5:2f:e1:ad:98:
1b:0b:7d:e2:de:85:85:34:11:1b:0b:f5:5b:05:86:cc:17:70:
45:fa:2c:c7:e7:d9:8d:ef:0e:9b:96:df:29:82:ea:96:8c:f8:
c1:2d:b5:28:19:bd:5b:ce:fb:91:b3:09:b3:59:f9:23:43:b8:
c2:2d:7d:31:ce:a2:c4:63:8b:e4:52:cc:b0:c5:d9:fa:54:38:
93:c1:65:b3:f2:e8:b5:43:24:c9:98:cc:53:9b:28:0e:00:99:
34:e1:95:c0:b0:fd:4f:f2:cf:98:38:ef:ba:91:1f:16:06:d6:
9e:b0:df:52:1d:04:16:d4:c5:71:5a:cf:c8:39:ad:27:04:a8:
25:a2:61:42:4c:07:2a:3a:60:ab:ed:6b:19:6f:1d:97:ff:0e:
cb:a5:bc:63:ab:f1:e8:cd:4f:f3:4a:46:de:02:96:03:66:bc:
46:63:1c:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8i4MWBALBltb/q/xB+GHkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTFjNDVkM2JjNDYzOGNhMDNkYTFkMmE0ODMzNTFhNzIx
MzIwZTUwHhcNMjYwNzAyMTI0OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWNkZWQyNTM0ZTQxMmJhMTliMWFkNDJlOWQ4N2QxODEyODAzZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon2RA37tvDW7mTQesRs36p0YRot2
+NhdGLk/Ykbr0KAGT9yJAgnJsjGpwh6BFVpo3zxkHxJ1gCALCDSPHN661sSg89Fq
EdC12h/LxgOAPLkm37cMifDDM2a83XJGq6id+3oQjhc+vN8z5z5PDUAqtGCOObfH
O/MvLCHzoVnBQh8TQcgTmNw9ur24F28nipa7gfDhOFYdBwjRcYVuFA0/qjOQbC80
t2f6ihMnXD2rYTmz4/6GNyxAU9ZSbHFkCIXfweB/12YoATQOUeShfr9S5+dLLoxX
gnpjL03Dlov36YX7PiYPwyxCRv7zyDjQOfmNN9Dc+UKp+4/NtOx71dIH2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOHN7SU05BK6GbGtQunYfRgSgD60MB8GA1UdIwQY
MBaAFNqhxF07xGOMoD2h0qSDNRpyEyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFIRVhUdkVZNHlnUGFIU3BJTTFHbklUSU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNGIwMGUtN2I5Ni00MzI3LTliOWYt
ZmU3M2ZmMzFiZWU2LzEvNGMzdEpUVGtFcm9ac2ExQzZkaDlHQktBUHJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jNGIwMGUtN2I5Ni00MzI3LTliOWYtZmU3M2ZmMzFiZWU2
LzEvMnFIRVhUdkVZNHlnUGFIU3BJTTFHbklUSU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuVZfAwQA
w9jzMA0GCSqGSIb3DQEBCwUAA4IBAQCNwJA4GxD7vRTVUf44Tsuuwu9z5BsEf8aF
zpedX0vliGNUZIyoR/6vZ074nML9SUlNT/yUei+x2K8ycU/2UtUTQEECNDc4VVr0
m/8lWC0/RbjkGwZbpS/hrZgbC33i3oWFNBEbC/VbBYbMF3BF+izH59mN7w6blt8p
guqWjPjBLbUoGb1bzvuRswmzWfkjQ7jCLX0xzqLEY4vkUsywxdn6VDiTwWWz8ui1
QyTJmMxTmygOAJk04ZXAsP1P8s+YOO+6kR8WBtaesN9SHQQW1MVxWs/IOa0nBKgl
omFCTAcqOmCr7WsZbx2X/w7Lpbxjq/HozU/zSkbeApYDZrxGYxyn
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:43 2026 by rpki-client