Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa
File: 4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa (raw, json)
Hash identifier: oeWIAAnSZ4lhgU2K6FkPq7+EIWrrH2aLb/TTgduHWn0=
Subject key identifier: E0:1B:78:6B:04:37:6B:FF:51:20:CE:87:1E:B8:BF:A8:22:60:49:68
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 019F23693F3064D6AEEFD76E0E65839AD22F
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60144
IP address blocks: 86.105.182.0/24 maxlen: 32
185.197.160.0/22 maxlen: 24
193.42.108.0/22 maxlen: 24
2a0f:ea80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3f:30:64:d6:ae:ef:d7:6e:0e:65:83:9a:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e01b786b04376bff5120ce871eb8bfa822604968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:cc:16:5d:24:ab:a7:26:ac:f8:cb:b2:02:
5c:4f:6f:25:8b:22:96:65:81:4c:89:46:97:53:4d:
67:6a:75:16:12:2f:d6:10:52:a7:b2:c4:07:74:10:
de:31:47:85:e2:6c:c3:48:e2:61:46:34:bd:c7:88:
2b:0a:8a:33:47:99:ab:57:bd:3a:73:1c:e9:1d:a3:
bb:24:87:ce:7f:8a:57:10:cc:06:03:88:2d:ec:df:
e0:ff:92:8f:77:09:c8:2b:dd:d9:e2:09:11:88:8d:
95:71:91:59:df:e8:bd:17:9e:55:b0:3c:84:f0:c3:
20:63:71:4c:61:4e:93:69:d9:83:40:8d:f0:b7:27:
e9:51:22:75:8d:84:1b:58:c6:56:c9:e4:85:6c:91:
e1:e1:9d:ed:20:b8:c5:17:ab:bc:a1:cb:4b:16:07:
be:a5:24:30:c5:21:5e:d4:74:36:f3:9f:81:d9:64:
fc:5d:18:29:1e:53:16:8d:ce:5d:bd:d8:30:94:8b:
aa:eb:83:5c:c4:0c:61:a9:52:4a:e2:57:ac:36:4c:
7b:57:78:c0:3a:cf:8f:62:a4:6b:3e:ec:2d:e9:12:
b5:1d:9e:c1:71:78:c8:15:3b:fc:36:f0:f1:57:1d:
e6:97:46:58:26:39:71:c1:2b:23:49:89:42:f4:d8:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:78:6B:04:37:6B:FF:51:20:CE:87:1E:B8:BF:A8:22:60:49:68
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
185.197.160.0/22
193.42.108.0/22
IPv6:
2a0f:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
7b:76:69:dc:3e:a0:35:e7:0d:21:a7:5e:04:c6:15:b6:7d:1d:
f7:bf:f3:57:f4:9e:c7:bf:e8:80:90:28:42:e2:8c:73:bc:a6:
b3:49:34:15:96:f4:8c:4f:41:5c:f9:c2:81:84:43:3b:6f:7b:
90:c4:fa:c9:c1:5f:31:71:e8:f1:6f:58:e8:f0:97:48:ce:8c:
65:b0:9a:26:5b:67:b8:58:6e:99:e9:15:d8:34:3f:ba:bf:41:
80:de:05:f0:af:a6:41:a0:a5:81:f0:c9:9a:3f:51:72:f0:c0:
e2:8d:4a:15:dd:b2:b2:40:c2:1a:d5:7b:06:9a:9e:79:05:39:
ad:2e:63:10:b3:76:c8:67:99:4c:c6:32:ec:45:1e:20:8c:b5:
a0:3f:29:0d:4c:82:e9:a4:77:22:00:1f:64:4a:a1:77:d4:ba:
1a:8e:16:56:5f:8b:1c:9e:02:f2:09:88:fa:14:78:23:d6:b1:
98:52:c2:8f:fa:c2:83:61:d3:dc:30:f7:60:2a:c5:39:1c:cb:
91:46:50:5a:8b:52:c5:84:07:69:42:ed:de:1e:4e:0b:39:21:
9e:f5:c8:50:82:99:56:6f:53:b9:b6:65:9a:89:98:45:87:c3:
fd:6e:e1:45:db:07:92:fa:91:90:c5:51:c0:3d:89:a7:19:53:
39:e9:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:21 2026 by rpki-client