Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4kUZnu0AUWHmHqWCavDDg6_6yRw.roa
File: 4kUZnu0AUWHmHqWCavDDg6_6yRw.roa (raw, json)
Hash identifier: /kAiIM36wCH1CRwulmT2+MtstzLfZSJF9czK56FbnxM=
Subject key identifier: E2:45:19:9E:ED:00:51:61:E6:1E:A5:82:6A:F0:C3:83:AF:FA:C9:1C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0C9E0CB28681DA0B3C4C4F9620D5BAC26
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4kUZnu0AUWHmHqWCavDDg6_6yRw.roa
Signing time: Tue 22 Sep 2026 16:09:07 +0000
ROA not before: Tue 22 Sep 2026 16:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213877
IP address blocks: 157.228.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:e0:cb:28:68:1d:a0:b3:c4:c4:f9:62:0d:5b:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 22 16:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e245199eed005161e61ea5826af0c383affac91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:48:c2:94:c2:32:a4:7b:ed:c9:54:17:ee:
46:10:12:9e:4c:03:a4:4c:1a:c1:42:24:be:fb:ae:
d2:bf:ce:77:86:cc:ee:02:4d:34:ba:9b:49:21:ce:
69:c3:82:25:1d:5c:da:05:41:9e:f3:66:53:8f:7d:
e3:29:60:50:61:ff:4b:47:ff:45:c6:c6:7a:70:5c:
08:75:c0:e2:04:83:9d:e3:d2:fd:6c:14:5f:90:eb:
eb:7a:23:48:74:ad:48:bb:d0:d0:ed:5c:7e:4d:f1:
4a:c3:0e:d6:ee:fa:90:8e:2d:ff:b3:54:50:5e:53:
f7:2b:e7:79:c6:9e:72:44:1a:db:da:60:71:68:93:
4c:14:03:b0:fb:bf:bc:61:8b:84:b7:28:f0:8d:01:
37:8c:c8:5b:6a:12:56:1a:88:0d:fa:7b:01:f6:3a:
8a:78:d5:4d:ff:cf:9c:b0:bf:d5:e7:9b:3c:5a:b1:
9f:e2:97:a3:64:4e:54:fa:34:e5:14:ea:8d:a7:59:
c0:f5:88:7d:d7:30:c5:ee:e7:74:67:8e:0b:ac:be:
39:a4:aa:37:7c:65:44:aa:db:b2:1a:34:f8:5a:f4:
09:1c:f7:f4:5b:bc:3a:a6:a9:04:9a:59:35:42:d5:
58:58:f8:dd:4f:e1:4d:a2:46:6a:be:81:d9:ae:61:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:19:9E:ED:00:51:61:E6:1E:A5:82:6A:F0:C3:83:AF:FA:C9:1C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4kUZnu0AUWHmHqWCavDDg6_6yRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.228.172.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ef:ab:a5:bd:62:c7:bc:63:8b:10:c7:fd:91:70:28:87:fc:
d6:6c:6a:d7:31:a8:09:22:49:c0:5c:28:6d:b1:58:15:48:f9:
b3:95:74:04:41:ef:dd:ce:34:5c:0c:cd:a1:43:00:1c:66:19:
ea:33:c0:9e:b1:f6:97:3b:e8:8d:62:22:ae:ca:aa:d6:72:33:
13:d4:2b:00:0e:c3:fd:ab:91:15:92:34:8e:b6:2b:d1:8c:b2:
23:17:ed:ea:2b:05:55:5d:82:c3:81:54:a9:59:0c:d6:95:0a:
c1:f6:a1:8d:3f:d5:39:23:74:e0:e0:a1:ba:3c:06:c3:e3:85:
53:79:aa:22:53:1e:29:a0:ef:24:ae:19:49:64:7b:d7:ff:12:
d7:4f:7f:72:65:a4:ee:32:d5:45:11:8a:95:24:65:ed:ce:a0:
d5:99:f0:6b:4d:24:6c:95:3d:3e:d5:38:b9:e4:4d:5f:0d:bb:
94:d1:54:98:1e:90:14:f6:24:a0:94:f3:d1:3c:31:ca:68:78:
3e:ea:fc:ed:e7:e4:5c:40:d2:88:bc:32:17:05:a0:c9:bc:f7:
e1:ad:34:d9:49:1c:39:8a:4e:17:89:0c:62:76:1e:43:5b:73:
c1:b3:c9:34:dc:a5:48:45:55:0a:e7:33:7e:50:09:fb:95:53:
da:71:90:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDJ4MsoaB2gs8TE+WINW6wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwOTIyMTYwOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ1MTk5ZWVkMDA1MTYxZTYxZWE1ODI2YWYwYzM4M2FmZmFjOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFIwpTCMqR77clUF+5GEBKeTAOk
TBrBQiS++67Sv853hszuAk00uptJIc5pw4IlHVzaBUGe82ZTj33jKWBQYf9LR/9F
xsZ6cFwIdcDiBIOd49L9bBRfkOvreiNIdK1Iu9DQ7Vx+TfFKww7W7vqQji3/s1RQ
XlP3K+d5xp5yRBrb2mBxaJNMFAOw+7+8YYuEtyjwjQE3jMhbahJWGogN+nsB9jqK
eNVN/8+csL/V55s8WrGf4pejZE5U+jTlFOqNp1nA9Yh91zDF7ud0Z44LrL45pKo3
fGVEqtuyGjT4WvQJHPf0W7w6pqkEmlk1QtVYWPjdT+FNokZqvoHZrmEu5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJFGZ7tAFFh5h6lgmrww4Ov+skcMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvNGtVWm51MEFVV0htSHFXQ2F2RERnNl82eVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCneSsMA0G
CSqGSIb3DQEBCwUAA4IBAQCZ76ulvWLHvGOLEMf9kXAoh/zWbGrXMagJIknAXCht
sVgVSPmzlXQEQe/dzjRcDM2hQwAcZhnqM8CesfaXO+iNYiKuyqrWcjMT1CsADsP9
q5EVkjSOtivRjLIjF+3qKwVVXYLDgVSpWQzWlQrB9qGNP9U5I3Tg4KG6PAbD44VT
eaoiUx4poO8krhlJZHvX/xLXT39yZaTuMtVFEYqVJGXtzqDVmfBrTSRslT0+1Ti5
5E1fDbuU0VSYHpAU9iSglPPRPDHKaHg+6vzt5+RcQNKIvDIXBaDJvPfhrTTZSRw5
ik4XiQxidh5DW3PBs8k03KVIRVUK5zN+UAn7lVPacZCd
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:19 2026 by rpki-client