Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa
File: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (raw, json)
Hash identifier: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=
Subject key identifier: E1:64:7F:32:3E:A7:C7:53:83:90:B8:57:D6:D6:3F:5C:D0:18:42:38
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A0877995A9D5D2E5D1276617F9A99510C2
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa
Signing time: Wed 09 Sep 2026 18:41:27 +0000
ROA not before: Wed 09 Sep 2026 18:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213871
IP address blocks: 88.218.41.0/24 maxlen: 24
88.218.43.0/24 maxlen: 24
103.76.130.0/24 maxlen: 24
193.16.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:79:95:a9:d5:d2:e5:d1:27:66:17:f9:a9:95:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 9 18:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1647f323ea7c7538390b857d6d63f5cd0184238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:1f:bd:23:2a:65:ec:7e:73:18:1b:f1:79:
68:71:72:bf:f4:52:ed:8f:dd:03:f2:ad:cc:49:62:
38:8a:07:9c:95:6e:34:37:29:84:6e:f6:3a:21:6c:
f0:8a:8a:af:c0:5c:d2:de:1e:6b:37:e2:d6:31:0d:
d0:ea:e3:32:4d:bd:70:cb:f6:f6:59:9a:0b:37:68:
c9:96:a6:82:21:42:62:f8:79:e9:82:55:c8:8e:19:
43:12:74:99:06:fd:2b:ca:58:d5:24:fc:66:78:a0:
e7:6c:28:3e:45:11:82:4e:f3:af:47:05:95:4f:a5:
e2:54:f1:5b:20:bb:71:c3:2d:4d:ca:e1:43:b9:f0:
fe:d6:ce:96:d3:50:44:1d:6f:0a:bf:fe:b0:db:6e:
f0:0e:16:2e:f3:c5:0a:e3:98:62:42:8b:26:3a:0b:
64:65:46:aa:4b:d5:63:5c:10:ae:b7:d8:13:84:a2:
06:38:bc:0a:4c:4f:16:3b:7a:e3:37:14:06:95:dc:
65:ca:20:9e:b0:f3:93:77:87:02:1e:c9:18:de:51:
9d:ca:a9:d9:8d:a6:de:2d:00:cf:de:5c:72:7f:57:
39:f1:c8:5b:01:5f:08:7e:43:bf:91:67:5b:b5:e3:
c3:9b:0e:2b:f6:bc:9d:df:a7:b4:c2:81:42:1e:7a:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:7F:32:3E:A7:C7:53:83:90:B8:57:D6:D6:3F:5C:D0:18:42:38
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.41.0/24
88.218.43.0/24
103.76.130.0/24
193.16.145.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:0f:02:26:e0:95:22:6f:83:9d:b3:3d:2b:af:1f:4d:94:14:
31:57:de:46:64:4f:b5:df:98:a7:ff:22:e5:15:00:62:7c:5e:
e3:40:54:7d:aa:bc:e5:7c:ce:04:42:50:b4:bb:ec:d7:d8:1d:
42:0e:d3:c3:a7:0f:35:2f:78:0a:f2:b2:85:52:ac:0a:2e:21:
8a:24:ef:62:9a:6d:25:06:df:c1:51:16:9c:6f:a9:ad:6c:9a:
4d:2e:f8:03:7b:a5:a6:92:96:20:d4:4a:6d:29:da:8b:b8:04:
17:27:1b:39:93:9b:91:28:ad:e0:23:76:a2:e4:ff:a6:0c:2e:
53:63:32:1a:ae:04:71:9e:2f:af:f3:b0:18:90:5f:24:d2:24:
f7:8a:e6:b2:88:09:8b:91:58:bf:52:7a:d5:1b:37:8d:fd:3b:
1a:a8:e8:ee:9e:d3:97:d9:bf:f7:55:22:49:60:90:6c:8a:d0:
2a:86:91:3e:63:76:93:c1:e5:97:e5:20:10:5a:dc:19:f8:5d:
cd:15:4c:17:e1:e9:a3:a1:15:89:6c:16:7e:7d:7d:bd:38:ff:
c3:b6:53:5b:e7:7a:c6:26:9f:76:a9:74:b4:aa:04:b5:23:66:
42:3d:d9:2f:74:52:d4:62:c9:ac:52:99:4a:ec:0f:4d:03:de:
cb:1b:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:57 2026 by rpki-client