Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa
File: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (raw, json)
Hash identifier: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=
Subject key identifier: E2:37:19:B7:CC:2B:FC:4B:39:A1:BA:CB:EA:7C:99:FA:16:4D:89:5A
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F23685072AA72159C29AC21D6871321E3
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56595
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:50:72:aa:72:15:9c:29:ac:21:d6:87:13:21:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e23719b7cc2bfc4b39a1bacbea7c99fa164d895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:d2:47:3b:69:e4:69:0e:1b:b5:c3:e7:ad:
08:5e:08:b2:1e:bf:de:ed:5c:c0:ed:00:01:d4:f7:
c3:c4:ef:68:02:9d:db:d1:27:e4:fe:c0:91:0e:57:
f1:0d:76:09:fe:c6:66:77:33:ee:c6:3c:01:3a:78:
00:b4:dd:39:65:55:da:f8:76:f8:9f:20:ed:9f:3e:
0d:b6:29:8d:bc:41:06:8b:be:78:1c:31:3a:7a:0d:
64:31:93:9b:a3:2c:60:8c:4b:ac:e0:88:38:0c:bb:
30:cd:1a:cd:e9:91:57:56:fc:13:46:3c:ff:a9:23:
05:ba:86:be:ac:f5:5f:78:2f:c7:66:6a:81:50:58:
a4:6f:b5:2d:6f:87:27:d9:05:de:87:8b:1f:8d:18:
c7:f4:e4:71:13:20:01:0e:50:80:85:d6:65:9f:47:
6d:12:d4:73:d7:9a:7b:4a:b6:47:ec:33:d6:13:30:
e9:eb:e9:b8:96:b6:fd:19:f1:38:16:80:81:2e:21:
e7:21:ae:0b:99:56:fd:91:f5:9f:2e:62:fa:14:6b:
a7:d3:e9:d5:87:1d:df:45:37:a3:be:a3:49:04:db:
af:4a:54:9e:cf:2d:cd:d6:92:e8:01:93:b6:24:ca:
07:5d:3f:22:1f:ee:8f:a9:9d:e9:c8:ca:b9:5a:2a:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:19:B7:CC:2B:FC:4B:39:A1:BA:CB:EA:7C:99:FA:16:4D:89:5A
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0d:21:d5:fe:0f:5e:2a:79:d4:a9:cc:71:86:43:7c:80:bf:
03:9d:1c:d5:5a:a6:c8:f3:0d:71:7c:c0:34:e4:4a:3e:6d:01:
f7:6b:1c:7c:9c:60:05:dd:e7:d8:44:42:85:8d:52:8f:95:c7:
54:93:ff:53:75:7d:e0:6d:5d:ec:ab:c6:9a:97:a9:b4:f5:23:
c4:4b:f7:db:7c:d4:b4:61:5b:a0:32:a0:eb:0c:92:06:f3:d1:
71:25:73:17:0c:ce:39:8c:db:39:73:38:cb:e0:92:71:50:9a:
72:8c:fd:e6:5b:65:f1:ac:b1:41:96:3d:c7:d5:9c:df:6d:f9:
3d:17:05:07:80:9f:3e:34:8c:ce:9f:23:0f:30:f0:f9:1e:84:
31:b4:a6:b6:59:18:66:d7:2f:08:78:e0:8f:52:f7:12:f9:b1:
55:45:6c:32:54:e5:e5:68:0a:39:a5:54:80:49:ce:85:47:89:
d2:11:ca:25:65:12:55:fc:e0:93:ff:87:14:52:59:f3:cf:21:
c2:d1:c8:fa:8b:a8:1d:4c:b6:91:2c:14:fb:c3:ab:58:51:30:
26:9d:9c:af:c5:95:d0:4f:76:e1:2b:8e:c2:e6:2a:29:2b:06:
fe:40:ce:a7:08:4e:63:7e:31:cc:8e:25:03:06:e5:6f:05:c9:
a4:57:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:41 2026 by rpki-client