Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa
File: 4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa (raw, json)
Hash identifier: nlgBOMwc0Z5SXyM7I/XYMmfHNrGRHRzrTdBqF8G4e24=
Subject key identifier: E2:11:98:57:51:E4:41:7E:EE:FA:C2:BA:35:4D:CD:2A:25:20:32:68
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 01A0C47B8AC3B0D72971634B0F0A5F708E58
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa
Signing time: Mon 21 Sep 2026 15:00:25 +0000
ROA not before: Mon 21 Sep 2026 15:00:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12874
IP address blocks: 45.82.228.0/22 maxlen: 22
45.82.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:8a:c3:b0:d7:29:71:63:4b:0f:0a:5f:70:8e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Sep 21 15:00:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e211985751e4417eeefac2ba354dcd2a25203268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:45:7c:bf:e7:86:12:6b:29:b7:17:c0:38:
9c:cc:cb:12:7e:81:39:d4:bb:27:19:76:e3:8e:40:
a2:6a:73:0b:5e:a1:ee:a2:b5:50:db:d6:f4:0f:5e:
83:e7:5a:c2:1c:46:87:4d:99:04:42:7b:38:ed:62:
cd:05:7b:80:bc:92:54:ff:df:9a:15:66:be:87:76:
e1:1e:01:54:c8:58:01:d4:89:f4:ac:30:34:5d:e1:
c8:9c:1a:cb:a5:b3:ca:ec:33:70:10:9c:d9:f0:6a:
82:27:00:e9:6b:cd:05:66:18:70:14:86:2e:e1:4e:
ea:fa:39:4c:e5:4f:1d:f6:80:0f:4f:d4:4c:9f:af:
8c:11:63:8a:1b:15:0c:28:dd:68:78:69:b7:7b:b1:
ee:de:b2:0c:5e:9a:a4:7f:0b:cb:e6:3c:a0:95:1b:
e5:f5:b5:be:7d:d7:5c:72:af:4e:62:58:0d:91:59:
f6:ea:47:c5:91:62:55:7c:1a:cb:8e:a1:6f:94:9d:
1f:cd:b9:30:d2:e4:41:05:76:07:34:14:0b:be:97:
aa:36:1b:ff:0d:df:cf:e4:0b:47:cc:92:f8:d0:ac:
b5:2e:79:e1:60:08:f6:89:1e:84:19:d8:d9:3f:4c:
b9:69:75:40:55:38:6f:13:f6:92:ef:9e:7f:fe:91:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:98:57:51:E4:41:7E:EE:FA:C2:BA:35:4D:CD:2A:25:20:32:68
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/4hGYV1HkQX7u-sK6NU3NKiUgMmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a0:be:04:7b:26:69:a7:90:56:5b:72:65:2e:8c:65:2f:3f:
05:22:62:e1:15:bb:5c:93:f9:2c:23:2a:0b:da:8e:35:f7:af:
8c:7a:c3:43:36:c6:85:32:21:32:52:0c:6b:40:a6:d6:fd:8e:
33:7a:72:de:45:f5:23:18:3a:1f:d9:3c:1a:9d:ad:e3:68:88:
15:33:b7:18:4f:28:09:be:7d:95:91:d2:c5:c6:3e:94:41:fa:
3c:21:21:a5:de:2b:b6:83:0f:91:6b:12:25:3e:de:af:6e:64:
79:73:d5:f2:ef:ee:f2:66:d5:ec:26:52:eb:cb:07:dc:69:f6:
dc:61:2d:55:24:36:01:22:ff:06:fc:27:da:bb:86:dd:6b:a1:
14:5a:7f:ca:f2:36:95:0c:4d:58:ef:58:17:5e:4f:07:5c:2f:
ab:2a:2f:16:ba:d9:c2:bf:47:86:f7:bb:9e:00:23:82:b0:0a:
fb:05:45:06:ae:e3:7d:94:51:65:c8:c0:4c:52:77:18:39:c4:
26:f5:60:0a:6f:35:19:8a:90:0a:25:7b:01:7b:f5:b7:ea:3b:
d8:19:f6:7a:4a:a9:0e:3b:0b:87:8e:2a:75:1e:0f:e5:ce:e3:
95:29:48:69:08:d7:a0:bc:19:e1:d3:36:62:13:94:8f:52:c9:
d7:36:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:46 2026 by rpki-client