Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/c4PWOTsWtb2BHJ2drzbMurS1uj4.roa
File: c4PWOTsWtb2BHJ2drzbMurS1uj4.roa (raw, json)
Hash identifier: GfaIz/k9kQAzF2LqeZrCe55euhWttcaoPzS2hsKifpc=
Subject key identifier: 73:83:D6:39:3B:16:B5:BD:81:1C:9D:9D:AF:36:CC:BA:B4:B5:BA:3E
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 019D43DBE62F440B8C2D70927424DE281239
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/c4PWOTsWtb2BHJ2drzbMurS1uj4.roa
Signing time: Tue 31 Mar 2026 12:26:17 +0000
ROA not before: Tue 31 Mar 2026 12:26:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 194.150.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:db:e6:2f:44:0b:8c:2d:70:92:74:24:de:28:12:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Mar 31 12:26:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7383d6393b16b5bd811c9d9daf36ccbab4b5ba3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:df:28:ba:5a:94:df:7a:30:bf:2b:88:dd:
a9:ce:d9:40:f5:92:b7:13:20:4b:ae:7a:9b:ae:ef:
2f:7e:75:b1:4f:82:88:26:ef:d2:cb:eb:44:27:f4:
d7:b7:79:d3:d8:91:c2:2f:54:ed:a1:02:2c:54:ce:
af:0b:04:d7:10:f0:cd:c3:2b:5f:d8:97:b5:e5:17:
9b:92:f7:e4:f9:b0:73:79:39:8b:bb:87:52:3a:47:
ac:0d:7d:d7:97:71:33:e2:85:3b:b0:bd:e8:23:fc:
18:52:16:e8:44:b0:65:42:dd:20:05:43:de:35:51:
bf:e5:cb:24:06:1a:c8:25:90:f3:04:8d:f9:35:41:
ec:b5:4b:92:58:5a:cb:91:4e:b6:ab:4b:fa:b7:36:
df:ee:44:b4:ab:82:f9:25:0d:f0:82:c6:79:24:e0:
c5:9d:63:ef:33:52:ff:60:16:dd:1e:11:d4:b8:d9:
bb:b0:bd:da:c5:ae:08:6b:8a:3f:62:96:0d:5c:f2:
d2:35:16:72:92:06:8c:b8:24:da:26:c9:66:ba:44:
7a:90:c4:48:b0:08:f9:2c:b5:ca:05:cf:0c:94:56:
f5:42:bd:0a:cd:05:84:4c:ba:fa:52:04:8a:02:87:
85:ce:dc:f8:98:d1:bb:ce:24:e7:00:88:93:c2:33:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:D6:39:3B:16:B5:BD:81:1C:9D:9D:AF:36:CC:BA:B4:B5:BA:3E
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/c4PWOTsWtb2BHJ2drzbMurS1uj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:56:6c:a9:4a:30:49:74:13:86:02:15:bf:96:8f:18:83:a6:
76:ad:87:6b:80:2c:02:60:32:cf:76:b0:f1:da:ea:42:de:f4:
d3:d9:3c:39:4e:54:a3:f7:0e:e3:b6:17:36:94:a7:35:0f:22:
23:b6:8e:76:73:1d:bc:de:86:6e:a2:c1:ca:e4:c9:53:78:4d:
b3:e0:bf:96:d0:e7:a0:ab:6a:dc:7c:af:57:fa:20:35:88:bb:
a7:6c:1e:f9:65:89:a0:0b:16:28:a0:c7:7a:9c:4f:cf:5e:6b:
98:61:f5:d2:11:cc:e7:58:66:74:25:da:91:15:ae:b9:8c:79:
27:13:35:9f:4d:c5:76:12:53:ea:06:78:fb:7b:a0:68:56:0d:
d7:50:61:bb:7b:df:f3:e3:4d:de:03:c2:a7:78:60:b1:ba:dc:
80:bb:d6:e7:8d:c9:6d:30:35:9e:e5:a3:2e:e9:bb:57:1f:d5:
7f:d6:78:80:86:ee:f2:e7:7a:1e:fe:06:64:ab:c3:4c:ae:46:
db:7a:e1:62:76:9b:44:90:83:8a:e5:a7:65:fb:c5:3b:38:14:
55:bf:4a:17:ce:41:b7:19:fc:ce:f0:e6:fa:2f:0c:94:8d:78:
be:6c:3f:e6:8a:32:69:dd:04:f3:69:45:24:f5:5a:c8:66:da:
5b:63:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:27 2026 by rpki-client