Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4pZFPWHKmFJYCvZawc1HYHniPTE.roa
File: 4pZFPWHKmFJYCvZawc1HYHniPTE.roa (raw, json)
Hash identifier: aPdk1UtXj4ED6+OiTSUEm89hD0okvtTLd1iND4tLHWo=
Subject key identifier: E2:96:45:3D:61:CA:98:52:58:0A:F6:5A:C1:CD:47:60:79:E2:3D:31
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019F73AA1654A6C55AC61F4B54BBE6154568
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4pZFPWHKmFJYCvZawc1HYHniPTE.roa
Signing time: Sat 18 Jul 2026 05:19:14 +0000
ROA not before: Sat 18 Jul 2026 05:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211525
IP address blocks: 194.26.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:aa:16:54:a6:c5:5a:c6:1f:4b:54:bb:e6:15:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Jul 18 05:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e296453d61ca9852580af65ac1cd476079e23d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:42:37:e6:4d:de:20:bb:82:75:c1:e5:6c:
ea:44:1f:54:21:b3:df:13:6e:bc:ec:d5:6a:54:7a:
05:80:e4:d1:32:6a:76:d6:ac:1b:1e:59:e9:48:83:
6f:42:ad:48:e0:88:80:ba:ef:50:c6:f6:b6:55:26:
1d:4c:55:a9:b3:a3:a4:9a:77:81:a5:fa:68:1b:0c:
ad:31:ae:68:86:2b:03:21:1d:30:00:62:c1:1e:de:
01:08:3e:a5:82:48:bf:3d:4c:0c:9b:ec:ed:2b:18:
24:e1:e4:39:e2:15:13:f7:6a:b5:67:eb:53:3f:75:
39:6f:e6:f9:67:63:1f:b0:be:b6:16:7a:76:c8:bc:
ec:c5:c5:1c:cf:ab:da:2e:48:f0:a4:06:d7:94:dd:
f1:ad:79:f9:70:f8:d4:b1:69:9c:b8:53:34:e0:c3:
03:26:2b:93:53:ce:5e:03:45:8b:7a:eb:a0:64:a0:
6b:11:9b:ff:0c:c7:16:e2:83:0d:57:4d:db:2c:76:
72:eb:45:2f:0a:e7:0d:af:ad:31:75:9e:6f:e3:a6:
15:5f:28:ef:52:83:5b:e3:6b:c5:f6:ba:3c:a5:e8:
b1:6d:55:3d:0a:15:73:82:2f:58:1c:e1:50:0e:b8:
50:7f:d5:dc:27:4b:63:a5:32:34:01:7e:be:f0:7e:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:45:3D:61:CA:98:52:58:0A:F6:5A:C1:CD:47:60:79:E2:3D:31
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/4pZFPWHKmFJYCvZawc1HYHniPTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ed:13:46:5b:ef:3b:ab:6f:7b:56:8f:06:07:f5:56:91:4d:
25:40:03:ca:5c:24:e3:ae:13:d1:28:0f:49:fc:e7:65:33:ec:
bf:36:49:88:d6:3f:76:64:d9:d8:1a:b1:aa:9e:33:40:29:aa:
44:aa:ad:f0:23:d9:ed:ca:76:89:c8:3f:62:46:e3:17:1f:46:
bd:d1:e4:df:b2:22:79:19:37:96:98:7f:94:7e:b3:4a:93:59:
9c:e1:89:32:84:bc:20:db:0a:09:cb:51:1e:87:5d:22:1e:92:
64:4b:42:5a:68:64:de:f3:9a:f9:61:00:e9:c8:3a:19:f0:97:
bf:64:fb:92:a5:f8:f1:ae:97:14:4a:02:6b:1c:7e:bb:8b:45:
82:43:11:c2:a7:ea:ad:0d:93:cd:c8:e7:e2:25:a2:85:18:2d:
a0:dc:a4:5f:f7:44:ee:70:04:ad:dc:6e:bd:82:89:45:2d:67:
9f:49:27:e8:bb:0b:60:75:d0:bc:70:8b:80:6b:f0:1e:24:ae:
28:ac:ac:8d:05:37:48:17:f6:32:76:23:47:04:88:44:5f:29:
94:c8:f5:71:ca:36:ec:a8:91:0f:eb:bf:a9:e4:2a:8b:59:90:
23:53:29:6d:ae:f4:84:c5:81:25:da:f2:ed:53:05:6d:86:b8:
bc:f1:33:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:38 2026 by rpki-client