Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/4dzv8ZUCzL8D043G29d4Vay_L1A.roa
File: 4dzv8ZUCzL8D043G29d4Vay_L1A.roa (raw, json)
Hash identifier: 1/yelAOHz555q/lBgGrJ6Dvvgooi9UHUahxGzfdOfoE=
Subject key identifier: E1:DC:EF:F1:95:02:CC:BF:03:D3:8D:C6:DB:D7:78:55:AC:BF:2F:50
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019D492F55ED742E07AE580ABC34BC41DBAA
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/4dzv8ZUCzL8D043G29d4Vay_L1A.roa
Signing time: Wed 01 Apr 2026 13:15:32 +0000
ROA not before: Wed 01 Apr 2026 13:15:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.156.0/24 maxlen: 32
109.104.158.0/24 maxlen: 32
109.104.159.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:2f:55:ed:74:2e:07:ae:58:0a:bc:34:bc:41:db:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Apr 1 13:15:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1dceff19502ccbf03d38dc6dbd77855acbf2f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:4d:71:08:f4:67:72:2e:a9:e0:5c:9b:1b:
fa:1a:ea:97:c2:85:a8:35:cb:5a:95:de:02:a5:14:
e4:dd:2b:5d:89:72:4c:c3:6d:49:56:a9:e5:89:01:
42:3e:ea:c5:e2:9a:d2:ff:de:10:dc:d5:15:0b:0c:
3b:5c:47:0a:10:14:d0:8a:df:8c:68:5a:2d:e3:66:
29:ce:c7:aa:dd:c7:41:43:b7:d1:09:b4:cf:32:62:
b7:87:08:98:78:c0:23:2e:39:ab:3a:16:4f:00:d0:
43:3a:fb:54:2a:aa:42:32:6e:b2:a5:2f:d1:3c:bb:
4b:6d:30:a0:da:74:81:b2:52:17:9a:ad:29:da:e2:
42:da:8b:9f:a7:40:61:6a:2e:e3:14:58:cc:d3:2c:
f4:e9:b9:5b:71:b0:d3:03:04:f8:51:50:dc:0e:46:
24:c0:2c:bb:e0:6c:77:27:ce:0e:f2:06:fe:ff:a1:
8b:60:87:1b:9b:eb:02:4d:fd:a8:ba:a2:8a:12:5f:
0a:ce:9e:51:ae:8a:f5:52:f2:8e:82:15:ae:d4:1a:
47:d1:1a:88:6f:4f:83:33:a5:ff:50:38:65:9e:69:
93:ae:bc:41:e2:cf:dd:a6:1f:7e:c7:5d:30:32:a9:
a0:88:8d:27:1d:15:74:b0:4a:35:cf:f1:6a:7f:9f:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:EF:F1:95:02:CC:BF:03:D3:8D:C6:DB:D7:78:55:AC:BF:2F:50
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/4dzv8ZUCzL8D043G29d4Vay_L1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/23
45.142.27.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0/23
109.104.156.0/24
109.104.158.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
194.113.94.0/23
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
90:7e:11:6c:6c:56:de:bc:a2:ab:26:ff:c9:3f:13:e8:c2:35:
68:4a:f0:35:e7:cb:86:f4:c0:d6:58:78:c9:dd:7b:d9:4e:58:
4c:4d:d8:23:08:bb:7c:74:55:ad:1e:f1:8f:91:a9:14:9c:aa:
47:c0:ba:db:5c:48:a3:3e:11:f8:4f:6f:e6:f6:87:e5:c3:99:
7b:57:49:df:8e:4b:8e:75:04:f9:22:d8:70:7c:1e:05:0e:32:
68:5d:b3:1d:1f:a4:2b:3d:4f:ec:26:43:70:7e:cd:db:5d:58:
b3:d6:11:9f:7a:83:09:7c:12:7b:00:62:ea:bc:d8:e4:11:21:
9f:7f:2f:be:2e:8a:63:89:af:ea:4b:d0:ea:40:51:d8:28:f1:
0a:8f:6d:7f:5b:6f:4f:de:ac:87:30:f0:81:a7:14:30:5a:23:
96:57:a0:52:5e:21:04:a9:36:85:f9:90:0b:ef:6a:59:f3:e9:
87:ec:b6:96:71:71:41:3f:0a:45:bc:fd:e8:53:40:28:0a:b7:
62:d5:85:64:de:e0:9b:9e:55:7b:88:ea:f0:56:34:7a:31:c3:
11:31:bc:8f:11:31:19:70:30:cd:b0:e1:69:de:1d:5c:79:46:
d9:c3:8f:a5:85:83:8e:8f:e0:e1:29:ac:00:a7:b1:ee:48:ac:
35:15:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:36 2026 by rpki-client