Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa
File: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (raw, json)
Hash identifier: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=
Subject key identifier: E3:15:5D:61:ED:20:47:1C:FE:B8:4F:AE:60:EC:7D:AB:EF:CA:64:29
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019F7E3425D27A11F65839D4FB5D488ADD10
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa
Signing time: Mon 20 Jul 2026 06:26:14 +0000
ROA not before: Mon 20 Jul 2026 06:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
91.200.254.0/24 maxlen: 24
91.200.255.0/24 maxlen: 24
110.172.191.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:34:25:d2:7a:11:f6:58:39:d4:fb:5d:48:8a:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jul 20 06:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3155d61ed20471cfeb84fae60ec7dabefca6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:39:1b:6a:fd:a0:6a:4f:5e:c5:e4:3b:05:
d1:1c:bf:50:1a:7c:4c:88:24:ef:dd:91:94:f4:75:
fa:11:7d:9c:89:7e:d8:3b:0e:70:bc:96:8e:22:03:
66:63:5b:9a:a0:63:a3:1c:71:46:dc:ca:36:23:5a:
07:bd:cb:2e:be:c1:ce:b9:68:6f:42:ff:fc:64:fd:
91:c5:c7:9d:0b:b1:27:94:04:14:77:9c:6f:e0:29:
e0:55:39:09:bf:c0:61:f8:67:c1:5f:6d:7e:33:f9:
d4:ce:af:18:62:9c:ad:b0:67:04:b4:ef:6b:40:08:
c1:a7:91:82:b6:dd:84:fa:93:c6:2a:62:a8:3a:71:
ee:4f:dd:ec:1a:95:1c:09:d2:f4:0f:9e:c7:71:c5:
a6:b3:97:59:2e:d1:aa:7f:0a:55:45:9f:8d:b0:88:
58:49:e2:f6:19:7d:5b:52:23:99:55:11:1d:c2:3f:
15:e8:9e:aa:5b:26:49:f4:86:b5:19:6e:29:d6:37:
bf:f5:a2:81:44:05:bc:5f:e6:75:55:fb:b0:c4:c2:
52:6b:da:87:e2:ae:08:62:24:43:c7:23:e4:1c:62:
a3:f4:15:3a:34:51:86:3d:60:05:14:ea:30:d4:ea:
10:c5:e0:e3:2c:df:06:fc:23:19:18:90:c1:7c:cc:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:15:5D:61:ED:20:47:1C:FE:B8:4F:AE:60:EC:7D:AB:EF:CA:64:29
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.8.0/23
14.102.11.0/24
91.200.254.0/23
110.172.191.0/24
114.69.245.0/24
Signature Algorithm: sha256WithRSAEncryption
80:96:af:d3:ec:dd:8d:4a:b9:d4:36:ea:0d:6e:8f:04:c4:d4:
a0:01:36:5c:72:b6:76:66:2e:bc:9d:58:95:36:17:7d:e8:ea:
da:38:6c:81:06:3d:a6:45:c0:59:b7:8f:01:4a:af:a5:0b:99:
5c:3a:af:d2:c9:ac:49:81:46:70:ec:69:0a:d0:0a:1c:db:96:
d9:16:7d:3c:70:d3:88:c3:27:62:84:5e:e4:94:dc:51:45:4e:
3b:52:54:49:69:ef:d2:84:76:af:0b:9d:55:48:f9:07:1b:1d:
ef:33:84:12:4d:c6:e5:a9:1a:08:ef:99:50:4e:89:63:f0:ef:
09:d3:f8:72:4b:8f:37:eb:73:8f:91:73:76:11:20:c3:eb:f6:
ad:d6:fc:f1:92:ef:5f:42:25:5e:9e:24:3d:e8:e3:c9:3d:06:
0a:e2:c5:e5:d9:f2:86:fb:14:c8:28:bc:1f:73:34:ea:fe:5c:
73:97:99:d8:4b:72:1d:2e:2c:83:fb:6c:0e:e1:e5:1a:cf:91:
68:2e:1d:8a:07:41:19:0b:cb:e6:cf:56:a0:7f:09:cc:17:a8:
4f:3a:3f:8c:e5:fb:a7:03:37:a1:0c:7e:24:1b:7f:40:a7:41:
4e:a8:31:9d:05:f2:e2:c9:e9:2d:ac:53:70:ac:69:7e:da:9b:
5b:8d:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:33 2026 by rpki-client