Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa
File: G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa (raw, json)
Hash identifier: r3jrCU9hKuBbcVfgFcmR3GrcrKrdMbHwwMc4+q5VzlE=
Subject key identifier: 1B:85:0A:A7:BF:D1:19:64:B6:79:83:47:D4:35:40:CA:3A:FC:60:13
Certificate issuer: /CN=44757c8d0af5634ae14137d521400a2fac962a2e
Certificate serial: 01A0D3B8DFFD19851D531A3FA6859E2F62A2
Authority key identifier: 44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa
Signing time: Thu 24 Sep 2026 14:01:43 +0000
ROA not before: Thu 24 Sep 2026 14:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 144.164.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:df:fd:19:85:1d:53:1a:3f:a6:85:9e:2f:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44757c8d0af5634ae14137d521400a2fac962a2e
Validity
Not Before: Sep 24 14:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b850aa7bfd11964b6798347d43540ca3afc6013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:36:33:28:59:dd:55:f7:a9:e0:e8:12:b0:
7c:9b:5d:e2:63:93:11:ef:4c:d9:03:19:6e:3a:61:
d8:b0:f8:40:51:16:f8:72:87:19:9e:8a:95:b5:30:
c4:06:36:be:48:44:81:7e:a5:8b:50:f3:06:37:77:
ee:e2:77:2d:27:9a:cc:48:3e:6f:92:5e:31:f0:fa:
44:04:f0:f8:ab:e4:cb:37:9c:09:d1:6a:35:bc:32:
7c:79:9a:40:2c:b1:95:29:a0:5c:fb:5b:8c:aa:97:
35:31:a6:d0:70:86:09:c1:47:02:d1:9c:58:d5:f7:
e6:eb:87:75:a3:ca:21:41:75:c7:30:45:14:6d:63:
20:b4:2d:bb:8c:f4:09:b8:05:29:30:40:9b:55:8a:
9b:69:4e:c4:76:6c:db:14:c8:a1:bc:2a:16:27:bb:
f4:41:d6:bf:fe:e7:78:de:0b:7a:7f:2b:16:b8:04:
64:2f:b2:41:86:41:a2:26:87:9d:d1:3d:0d:ed:32:
6a:30:d7:49:e5:1f:a3:5a:f9:92:b9:a3:d1:02:29:
3f:32:63:83:e0:41:b5:1c:d0:61:27:94:28:94:85:
1d:93:64:df:c2:47:51:d3:0d:d5:86:9c:b3:e9:61:
6a:4c:29:b1:6a:2b:d3:b1:55:63:67:c2:6d:fd:c5:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:0A:A7:BF:D1:19:64:B6:79:83:47:D4:35:40:CA:3A:FC:60:13
X509v3 Authority Key Identifier:
keyid:44:75:7C:8D:0A:F5:63:4A:E1:41:37:D5:21:40:0A:2F:AC:96:2A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/G4UKp7_RGWS2eYNH1DVAyjr8YBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ce838a-d1d5-4707-821e-29c473386a90/1/RHV8jQr1Y0rhQTfVIUAKL6yWKi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:1b:8a:23:1d:cc:57:f7:4d:f4:df:91:5b:6d:0e:65:17:8e:
4c:bc:ea:94:27:56:e5:8a:bd:d0:46:f2:67:c1:12:48:a2:54:
25:2c:44:ff:c1:9e:99:df:78:00:c4:a0:f9:8f:90:0b:29:4d:
a3:4d:12:eb:a1:e6:95:6d:0c:02:84:cf:ec:17:56:48:36:8d:
08:7a:f3:44:b7:2f:7f:9f:c6:15:8a:0a:c5:55:83:ba:e0:3d:
5b:ee:0e:20:c1:cd:7d:e8:ee:18:51:ae:87:45:92:74:0c:92:
07:de:30:6b:b9:22:59:ed:2c:aa:46:00:35:4a:10:7f:22:8a:
44:d7:3f:ec:33:08:07:51:5f:63:6c:4d:32:4a:ed:6b:f1:07:
b1:84:01:e6:99:50:06:2c:89:0f:66:67:e4:b5:8e:51:25:b1:
7e:5d:dc:7a:a1:43:f8:9c:eb:9d:08:3a:b7:34:65:52:af:50:
32:9e:d6:4d:14:6d:45:6d:3d:a1:28:89:73:d7:f7:5d:c0:7b:
3a:f8:dc:a9:49:d3:04:80:00:59:91:d0:39:0b:cc:8c:26:99:
46:d2:2b:b0:c2:4d:81:e9:2d:b2:17:ca:7a:32:e8:6e:2d:33:
35:b7:2c:58:99:82:85:78:66:73:83:a3:29:fa:f3:18:69:f6:
c9:02:aa:de
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaDTuN/9GYUdUxo/poWeL2KiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzU3YzhkMGFmNTYzNGFlMTQxMzdkNTIxNDAwYTJmYWM5
NjJhMmUwHhcNMjYwOTI0MTQwMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjg1MGFhN2JmZDExOTY0YjY3OTgzNDdkNDM1NDBjYTNhZmM2MDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44Y2MyhZ3VX3qeDoErB8m13iY5MR
70zZAxluOmHYsPhAURb4cocZnoqVtTDEBja+SESBfqWLUPMGN3fu4nctJ5rMSD5v
kl4x8PpEBPD4q+TLN5wJ0Wo1vDJ8eZpALLGVKaBc+1uMqpc1MabQcIYJwUcC0ZxY
1ffm64d1o8ohQXXHMEUUbWMgtC27jPQJuAUpMECbVYqbaU7EdmzbFMihvCoWJ7v0
Qda//ud43gt6fysWuARkL7JBhkGiJoed0T0N7TJqMNdJ5R+jWvmSuaPRAik/MmOD
4EG1HNBhJ5QolIUdk2TfwkdR0w3Vhpyz6WFqTCmxaivTsVVjZ8Jt/cVnXwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBuFCqe/0RlktnmDR9Q1QMo6/GATMB8GA1UdIwQY
MBaAFER1fI0K9WNK4UE31SFACi+sliouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhWOGpRcjFZMHJoUVRmVklVQUtMNnlXS2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZTgzOGEtZDFkNS00NzA3LTgyMWUt
MjljNDczMzg2YTkwLzEvRzRVS3A3X1JHV1MyZVlOSDFEVkF5anI4WUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jZTgzOGEtZDFkNS00NzA3LTgyMWUtMjljNDczMzg2YTkw
LzEvUkhWOGpRcjFZMHJoUVRmVklVQUtMNnlXS2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkKQwDQYJ
KoZIhvcNAQELBQADggEBADobiiMdzFf3TfTfkVttDmUXjky86pQnVuWKvdBG8mfB
EkiiVCUsRP/BnpnfeADEoPmPkAspTaNNEuuh5pVtDAKEz+wXVkg2jQh680S3L3+f
xhWKCsVVg7rgPVvuDiDBzX3o7hhRrodFknQMkgfeMGu5IlntLKpGADVKEH8iikTX
P+wzCAdRX2NsTTJK7WvxB7GEAeaZUAYsiQ9mZ+S1jlElsX5d3HqhQ/ic650IOrc0
ZVKvUDKe1k0UbUVtPaEoiXPX913Aezr43KlJ0wSAAFmR0DkLzIwmmUbSK7DCTYHp
LbIXynoy6G4tMzW3LFiZgoV4ZnODoyn68xhp9skCqt4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:28 2026 by rpki-client