Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa
File: 4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa (raw, json)
Hash identifier: ZqY4GqqmXqn1EnGBUxEdD3VnQj8pPDbqpf6OPJo6fp4=
Subject key identifier: E1:1E:F3:39:47:76:6D:62:71:38:10:62:E5:40:BB:87:48:59:BB:5C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019EBC82398A084E8621BF40DF576247947B
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa
Signing time: Fri 12 Jun 2026 15:45:11 +0000
ROA not before: Fri 12 Jun 2026 15:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 213.209.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:82:39:8a:08:4e:86:21:bf:40:df:57:62:47:94:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 12 15:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11ef33947766d6271381062e540bb874859bb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:f6:43:12:92:f2:4a:d3:33:80:7e:a0:0e:
c2:38:c4:7d:89:01:13:47:86:12:2a:df:3f:a4:48:
4e:57:81:85:3d:77:91:cc:07:cd:05:d4:c9:cc:27:
cf:1b:cb:1d:fe:36:9e:c3:77:55:26:26:c3:87:f5:
91:0e:3f:84:d6:1b:a3:db:16:c8:35:e4:ed:df:64:
f7:2e:ec:7b:9a:a9:3d:a3:3c:65:69:4d:11:04:27:
15:32:e7:7b:4b:34:8a:bd:9e:93:73:ac:26:54:64:
3c:d9:c3:91:72:65:12:b6:5e:c4:0b:d1:e4:94:19:
05:9d:d5:e2:28:98:49:c7:05:8e:9f:10:e0:98:fb:
27:86:15:8f:41:69:9b:32:f6:d0:fe:4f:5d:28:4d:
5f:b8:e1:cc:24:ca:70:a9:e7:59:01:68:78:1f:e2:
14:62:b8:65:12:a6:2d:0e:c6:ba:77:23:bd:af:26:
e5:81:b3:f2:45:05:f9:39:49:f2:8c:07:4f:9d:51:
d5:d9:e0:da:d3:27:64:91:ee:83:45:40:fe:db:d2:
bd:46:22:28:7f:13:2c:3e:7d:85:cc:fd:fc:a8:26:
2c:f7:5a:51:5f:59:51:52:63:77:2c:4e:00:c0:a7:
1c:b9:66:c7:92:c7:15:94:2a:b3:9a:ca:8d:b3:33:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:F3:39:47:76:6D:62:71:38:10:62:E5:40:BB:87:48:59:BB:5C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.144.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:2b:7e:ad:61:64:d2:aa:60:32:10:a0:b1:6e:0c:01:92:
ea:66:68:8b:ae:50:52:39:a4:79:97:9b:3b:f8:8a:65:2a:ff:
26:f8:8d:f3:76:cd:4c:0a:79:df:18:1d:18:8d:d9:a7:6a:ef:
78:9b:78:67:fb:2c:ab:a2:50:9b:66:00:2c:b9:b5:63:7f:77:
c1:f8:2f:59:bb:fd:35:24:98:40:55:12:8f:cf:7f:3a:9b:74:
f3:5f:25:c7:c7:6c:2a:af:24:61:07:a8:7a:55:76:0b:8a:9a:
a3:0a:f7:f1:ee:73:7d:f3:6c:49:90:1d:55:0d:cc:85:ba:8f:
db:36:9d:71:33:b7:27:18:7b:e6:90:9c:c4:0e:3c:98:57:81:
14:c3:27:14:b1:53:43:0d:d6:f1:5e:da:6e:3f:68:86:dd:8c:
ab:37:cd:98:58:09:62:91:24:64:0a:db:85:52:17:28:07:4f:
04:66:83:68:83:74:c6:08:f8:55:81:32:b6:20:90:16:fc:5a:
73:f6:60:65:c3:4f:90:c5:52:2c:79:0c:2a:43:88:d6:21:9c:
6c:8e:af:c0:5f:8b:02:2b:4a:d6:d0:e3:b5:ee:9f:35:c1:12:
6d:54:b9:b6:9c:dd:aa:80:fc:16:4c:6d:2b:67:8b:40:35:03:
f8:df:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:48 2026 by rpki-client