Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4vExkwo6xAXOHDRhjjo8GtoiCm8.roa
File: 4vExkwo6xAXOHDRhjjo8GtoiCm8.roa (raw, json)
Hash identifier: 7vUMfVNTTe/llaeuT7CJWL/97W8HIzCixjCI5JnthDs=
Subject key identifier: E2:F1:31:93:0A:3A:C4:05:CE:1C:34:61:8E:3A:3C:1A:DA:22:0A:6F
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0C8BAE80F1ABA2A30DE233DEA1D749691
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4vExkwo6xAXOHDRhjjo8GtoiCm8.roa
Signing time: Tue 22 Sep 2026 10:48:07 +0000
ROA not before: Tue 22 Sep 2026 10:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 194.143.203.0/24 maxlen: 24
213.220.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ba:e8:0f:1a:ba:2a:30:de:23:3d:ea:1d:74:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 22 10:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2f131930a3ac405ce1c34618e3a3c1ada220a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:e1:45:14:86:95:b8:28:35:95:48:ec:3f:
a0:68:2e:b7:66:ff:be:c0:46:86:23:c4:ba:98:da:
f1:8d:48:f2:fa:bd:09:75:b9:27:b7:35:36:32:cc:
d1:52:ec:c0:01:6b:a2:28:64:96:96:75:55:00:56:
70:46:dd:07:9d:fc:10:aa:5e:c0:6a:2d:a5:36:81:
37:57:4f:9f:8c:e8:1f:d2:a8:41:7b:ce:f0:c2:1b:
d7:56:ef:e5:23:78:9c:a6:38:48:0f:b5:c7:5c:64:
26:0f:21:fb:7f:e4:cb:cb:8a:db:e7:56:b4:be:3a:
10:7e:61:4c:59:e4:61:0a:75:90:4c:a4:8f:88:f5:
cf:7e:fa:75:ff:6f:ce:bb:cb:d3:b4:f6:51:fe:10:
c0:de:23:9a:92:a1:f7:0f:d9:c9:0a:12:d7:96:25:
14:33:df:1c:cc:bb:9f:b8:db:e5:17:75:db:f3:89:
13:58:c8:05:6f:05:45:1b:85:a1:a1:25:0e:b8:41:
0d:5c:a9:f8:a1:0c:9e:ea:b3:c5:22:f6:5a:05:f1:
ac:c6:56:32:21:92:8d:8e:c2:28:a1:6b:ff:ce:1b:
6c:46:72:e1:0d:cc:3a:a8:4a:6c:fa:61:bb:6a:e8:
9f:3f:1b:e1:50:96:bf:7a:df:76:77:9c:1a:93:82:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:31:93:0A:3A:C4:05:CE:1C:34:61:8E:3A:3C:1A:DA:22:0A:6F
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4vExkwo6xAXOHDRhjjo8GtoiCm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.203.0/24
213.220.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fa:9a:88:ba:54:7f:a2:05:7a:38:b1:6e:ca:ff:3d:d2:f7:
99:a0:78:a4:45:db:3c:fa:43:7e:57:eb:10:92:1b:33:f6:d4:
c2:7e:2c:04:01:6f:7e:9c:7f:cd:ae:93:c9:41:74:16:c3:11:
2d:ec:6d:0c:0a:29:51:5e:d8:28:6a:f3:75:24:d2:0f:8f:04:
b8:6b:d9:08:16:32:dd:3c:f0:5e:5a:27:9e:6f:ed:58:1b:5c:
e2:d5:a7:2a:a2:e8:6b:0f:3c:53:b7:6f:6b:0b:69:a8:bb:3e:
9a:62:c2:28:37:3f:d2:67:fb:1b:d0:4e:6b:f9:d4:82:96:3d:
c6:c0:25:64:90:fa:ba:42:0c:58:ac:47:1c:ca:b1:b3:6f:b0:
a3:76:39:26:5f:76:dc:a4:5b:8f:37:70:b0:1a:44:33:37:ec:
1b:6a:0b:57:45:8e:b8:09:22:a8:4f:e3:00:b8:42:4b:cf:2f:
a9:26:db:9c:aa:c6:5a:6a:d2:d8:f6:a5:7c:f8:ba:a6:99:0c:
a0:ac:45:34:83:1f:95:47:b2:2f:02:97:df:fd:a8:e9:fe:79:
01:90:8d:8c:30:08:57:41:21:74:7d:ef:aa:98:72:a4:04:01:
6c:4e:89:c1:bd:db:96:4c:f5:cd:d5:17:72:bb:af:dd:54:c6:
1f:2b:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:19 2026 by rpki-client