Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4YZpEFUeoDRYP1bzx_2d2Anmo8E.roa
File: 4YZpEFUeoDRYP1bzx_2d2Anmo8E.roa (raw, json)
Hash identifier: G+qNTCkOeVDqmWz8ppqH4R3u6xjW3i07E2k7e5pXfLo=
Subject key identifier: E1:86:69:10:55:1E:A0:34:58:3F:56:F3:C7:FD:9D:D8:09:E6:A3:C1
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FA7D4E37AE55951ED761BC253A27EED88
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4YZpEFUeoDRYP1bzx_2d2Anmo8E.roa
Signing time: Tue 28 Jul 2026 08:26:14 +0000
ROA not before: Tue 28 Jul 2026 08:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 2a0d:d940:60::/44 maxlen: 48
2a0d:d940:2003::/48 maxlen: 48
2a0d:d940:2013::/48 maxlen: 48
2a0d:d940:3e00::/40 maxlen: 48
2a0d:d940:9014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:d4:e3:7a:e5:59:51:ed:76:1b:c2:53:a2:7e:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 28 08:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1866910551ea034583f56f3c7fd9dd809e6a3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:b0:4f:05:06:36:8f:dd:b6:1b:c1:93:b8:
a5:df:7a:6d:1e:08:6a:65:e4:4a:45:66:d3:07:b1:
ab:4d:d4:3d:10:d6:f6:06:21:74:e9:24:df:0c:fc:
bf:c0:77:a7:cf:27:55:80:94:40:08:32:de:9b:91:
94:e1:f0:28:f1:d9:c3:0b:5a:7a:3f:b2:81:6d:61:
4c:4c:15:97:50:66:88:4b:03:b8:6f:55:3c:98:71:
4c:30:b2:92:82:36:55:5c:54:17:b0:2e:c9:2f:f3:
fb:dd:ca:64:be:bb:da:ae:35:a9:6e:94:78:a7:0a:
7b:05:79:fd:a8:50:41:c0:06:a2:ea:02:9c:f2:b6:
96:64:f9:86:7a:7a:4d:dd:fd:13:0a:46:dc:b3:45:
bd:4c:95:26:ae:16:e3:e5:01:aa:6b:1a:8d:34:0d:
53:5f:22:53:85:fa:33:be:0e:ae:4f:ac:c2:e0:1e:
39:27:a5:fd:30:22:b6:59:b9:03:e6:45:68:f4:02:
48:38:14:04:6c:1f:c9:ef:c8:9e:6d:8e:9e:cc:97:
e6:da:3b:0f:51:7c:0a:50:90:1c:53:70:55:4f:89:
92:8e:ec:f1:f8:bf:ca:b3:86:dd:fd:02:47:4d:18:
f0:57:eb:00:ef:11:82:40:c9:e6:db:40:7a:30:c8:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:69:10:55:1E:A0:34:58:3F:56:F3:C7:FD:9D:D8:09:E6:A3:C1
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4YZpEFUeoDRYP1bzx_2d2Anmo8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:60::/44
2a0d:d940:2003::/48
2a0d:d940:2013::/48
2a0d:d940:3e00::/40
2a0d:d940:9014::/48
Signature Algorithm: sha256WithRSAEncryption
ca:e3:a5:d7:29:98:f3:58:6d:26:f3:54:27:68:13:ce:d5:95:
14:38:c3:ff:eb:df:05:89:75:40:29:c8:b2:06:29:18:47:54:
4f:01:e2:1a:1b:5b:eb:0b:8c:0e:f7:fd:38:c5:ef:b2:6c:80:
b0:e9:b1:07:72:28:06:8e:d6:5c:3c:b2:93:b5:7c:41:04:5b:
db:a9:37:38:3f:cc:df:b3:ea:19:27:24:78:96:6c:6d:ec:96:
be:96:39:49:a0:54:f1:24:2b:d5:06:d0:03:95:85:59:ba:37:
b3:52:3e:2c:b5:b6:1b:5b:60:52:e9:fd:e4:0b:7c:7b:86:12:
50:29:39:a9:2f:84:1d:09:f2:6d:b6:80:42:c8:5e:63:b5:bd:
62:32:f5:15:70:a6:01:1b:ae:f8:f8:31:24:ce:95:40:9a:97:
29:6b:c1:41:96:8d:7c:b8:e5:ee:15:f4:3e:2f:cb:15:b4:e1:
7f:cf:37:1b:29:3b:32:f9:ee:cb:76:52:12:f6:4d:f2:56:e9:
09:5f:a5:2e:d5:70:76:87:ab:0b:fa:52:cb:fc:bc:2c:10:1e:
9d:73:a4:de:f1:c4:38:35:87:6e:df:f8:b4:89:b9:b2:68:31:
6b:ce:a7:8b:f7:38:4b:c9:f4:c1:e5:58:00:68:5b:31:24:37:
3e:7a:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:43 2026 by rpki-client