Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/4AgO9krvR9Pv49d_pcTiefWgZ8w.roa
File: 4AgO9krvR9Pv49d_pcTiefWgZ8w.roa (raw, json)
Hash identifier: 7RsIOzFQIt1dJNaDENtwGzoKBTvbkwxPLJd63O+X6X8=
Subject key identifier: E0:08:0E:F6:4A:EF:47:D3:EF:E3:D7:7F:A5:C4:E2:79:F5:A0:67:CC
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019D963EF17C14D0B2B469488D958FF99D8A
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/4AgO9krvR9Pv49d_pcTiefWgZ8w.roa
Signing time: Thu 16 Apr 2026 12:23:20 +0000
ROA not before: Thu 16 Apr 2026 12:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21266
IP address blocks: 80.90.64.0/23 maxlen: 23
80.90.64.0/24 maxlen: 24
80.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:3e:f1:7c:14:d0:b2:b4:69:48:8d:95:8f:f9:9d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Apr 16 12:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0080ef64aef47d3efe3d77fa5c4e279f5a067cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:cb:2f:ab:70:31:e6:0d:84:61:09:7a:3e:
28:af:f1:7d:7e:e4:74:a9:52:d0:b2:cd:37:1c:66:
90:4d:20:6f:82:1d:63:31:7f:35:6b:63:bc:32:cb:
be:61:3b:74:29:05:a9:79:d7:bd:7f:9c:c0:9a:30:
13:c7:02:39:de:54:7a:3b:22:5b:4e:c9:9f:d3:c9:
4e:02:15:49:50:5e:97:0c:8b:78:54:a1:40:b5:77:
59:68:b9:48:f7:b1:b6:cd:82:78:18:48:40:65:c4:
f6:e5:2d:21:b7:d1:d8:bf:a2:37:5f:17:41:df:8b:
fb:51:5e:28:45:02:db:80:b5:f3:cb:98:a3:d0:6e:
72:21:5a:13:3c:2b:bc:ef:e1:2e:b1:0d:f6:9c:43:
0b:81:75:8a:2a:ea:e9:18:23:7d:1f:4e:38:81:8c:
56:be:6b:1c:33:d6:56:8a:64:b3:87:65:26:1c:76:
3b:9d:4d:2e:6d:82:44:26:87:af:1c:ad:ed:ab:38:
c8:7e:3f:57:36:55:bb:82:b7:2c:e7:f3:70:f0:be:
67:6c:a5:b6:58:c3:d3:02:4d:b9:ca:fc:44:28:e8:
9a:b3:08:80:b3:af:af:13:82:95:51:11:a3:30:21:
01:52:6b:3f:61:9d:83:f2:75:6a:2f:0b:dc:87:37:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:0E:F6:4A:EF:47:D3:EF:E3:D7:7F:A5:C4:E2:79:F5:A0:67:CC
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/4AgO9krvR9Pv49d_pcTiefWgZ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.64.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:72:a6:7d:8b:b4:3e:7b:56:73:ac:f7:1d:1d:62:6b:d4:52:
07:58:cd:ce:95:81:1c:b4:b6:95:6b:00:c8:05:ed:e3:75:02:
f3:0c:da:f3:eb:21:2e:6f:35:ac:69:94:4a:b5:df:8a:8b:e1:
a7:e2:6d:d7:08:bb:5e:1d:34:c9:a5:d9:e6:fe:04:d3:7e:7a:
91:02:20:3a:51:23:35:fe:a3:e5:d3:fc:97:fe:a3:a7:72:80:
df:97:c5:2a:e5:20:7d:21:c6:f4:ab:33:fc:92:3b:9d:53:8d:
31:1f:fa:c0:42:00:0f:6d:18:8c:97:92:ba:47:e7:29:a7:02:
88:b2:9f:f5:f1:f5:4c:e5:0a:d0:30:7d:39:9e:d5:1c:d2:7a:
f3:b0:8c:54:8b:41:18:e6:9f:76:65:3f:b9:40:b5:f8:5d:11:
74:bc:79:d0:90:a2:84:3d:54:c3:47:c5:59:e9:bc:6a:15:00:
eb:9d:2b:9e:d4:07:1b:c7:26:4c:4b:d8:35:7a:b3:6a:b6:17:
de:a6:f8:f2:c3:30:32:f6:bb:11:12:82:8a:74:fb:7e:68:42:
d5:cf:12:79:c2:5e:7c:94:53:c3:e6:ac:08:49:ff:28:c3:58:
54:4f:71:4c:2d:24:f9:40:b0:44:48:38:72:31:e4:71:01:8f:
72:2d:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:28 2026 by rpki-client