Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/A4U-7phwTYkef8mR1dIeFnz9Wvk.roa
File: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (raw, json)
Hash identifier: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=
Subject key identifier: 03:85:3E:EE:98:70:4D:89:1E:7F:C9:91:D5:D2:1E:16:7C:FD:5A:F9
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685F6B426335E37D9CC65F606200BF
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/A4U-7phwTYkef8mR1dIeFnz9Wvk.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59712
IP address blocks: 185.1.0.0/24 maxlen: 24
2001:7f8:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5f:6b:42:63:35:e3:7d:9c:c6:5f:60:62:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03853eee98704d891e7fc991d5d21e167cfd5af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:bd:02:13:67:17:54:11:9f:05:f1:aa:b3:
be:94:e6:89:44:a0:c1:4a:87:1c:b7:53:e8:aa:47:
75:2e:d9:f1:84:6c:e8:8b:e6:ac:38:2f:d5:59:76:
e1:72:13:43:48:83:75:79:18:42:a8:69:24:6b:d4:
13:31:28:06:88:99:4e:12:63:28:05:3c:30:b4:df:
c4:f5:3a:da:2e:39:8e:20:6f:8b:5e:a1:5f:29:4a:
02:d6:02:75:61:8f:53:f8:f1:52:ec:01:ac:15:2d:
bb:6b:2d:bb:b2:15:d1:40:c8:1e:c9:ce:9a:55:5c:
bd:71:12:c9:b9:0c:87:d5:75:9e:ac:b8:c4:c9:4a:
af:3d:b5:5f:33:66:28:53:a2:72:90:e5:4a:71:9e:
12:9c:f5:b2:49:54:17:2a:20:6f:76:e3:6d:20:c3:
5d:1c:8b:30:7f:ef:28:21:41:c0:12:f8:ea:75:ed:
6f:02:5a:30:03:b9:02:d9:bc:e8:19:05:50:ee:ac:
a4:92:c3:52:a3:f3:cd:b4:19:2e:a7:52:f6:b6:0c:
2d:ac:21:c1:2f:09:fd:f7:00:a0:86:20:77:93:9f:
94:b6:3a:86:3a:af:9c:22:ab:2c:a1:81:bc:b3:20:
5a:4c:7a:ec:e3:17:09:b8:4d:ab:32:11:93:e3:da:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:3E:EE:98:70:4D:89:1E:7F:C9:91:D5:D2:1E:16:7C:FD:5A:F9
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/A4U-7phwTYkef8mR1dIeFnz9Wvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.0.0/24
IPv6:
2001:7f8:70::/48
Signature Algorithm: sha256WithRSAEncryption
21:81:e1:56:a1:82:80:00:9d:97:ca:d3:ea:c1:da:c6:72:7e:
7a:77:fd:24:c1:61:52:4c:ba:2a:47:13:52:48:69:6c:59:89:
01:57:96:c2:03:95:b0:56:b1:eb:9b:83:b6:9d:f2:4a:77:77:
b8:5e:8c:2c:fd:35:c6:0f:ea:40:9e:07:ed:22:2d:a7:76:ba:
a8:7b:0e:05:5d:83:b4:9c:0f:8c:31:1a:6c:a5:df:3e:36:12:
de:79:f6:94:e2:f4:19:27:c7:f3:ac:f2:ba:6e:33:4d:81:12:
4d:95:f6:6c:8d:27:4a:7f:a8:8d:85:25:4c:15:8a:24:2e:be:
5a:8b:90:0b:98:ce:66:32:b3:8b:38:0b:ec:05:1e:0f:aa:24:
ec:f5:e4:19:3f:9c:fd:73:bd:f0:29:6b:49:e3:07:9b:73:c3:
05:14:c2:0a:c1:3e:8e:d8:49:75:13:45:58:36:e0:cc:85:55:
81:84:80:30:63:32:c9:31:21:52:7c:56:c8:b8:28:08:b7:ad:
91:87:67:b2:99:11:a7:ba:28:bd:c8:5e:b4:7e:c4:a5:cb:b6:
ba:c8:ee:80:dd:7b:af:9c:3b:dd:5f:2b:77:d9:d3:5a:9f:ac:
3e:db:cd:ae:e4:a0:81:9a:6a:b5:8b:d9:35:81:83:2c:28:06:
15:ae:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:10 2026 by rpki-client