Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4kaoM_1JFXqtONDnoZQo4DeqG_U.roa
File: 4kaoM_1JFXqtONDnoZQo4DeqG_U.roa (raw, json)
Hash identifier: AjSsALIS1hOFS0VbRb3Uq7yagcpDtHwgGVU2KzA5nbU=
Subject key identifier: E2:46:A8:33:FD:49:15:7A:AD:38:D0:E7:A1:94:28:E0:37:AA:1B:F5
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01A08B6FFDB4CC818BB666035D2418E28D13
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4kaoM_1JFXqtONDnoZQo4DeqG_U.roa
Signing time: Thu 10 Sep 2026 13:09:27 +0000
ROA not before: Thu 10 Sep 2026 13:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.92.247.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
185.243.212.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:6f:fd:b4:cc:81:8b:b6:66:03:5d:24:18:e2:8d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Sep 10 13:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e246a833fd49157aad38d0e7a19428e037aa1bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:6e:2e:0d:e8:fe:2f:34:71:9c:e5:f5:2f:
6d:71:f9:d2:17:32:66:d6:ed:f9:d8:fa:ae:ec:fc:
4d:0b:a8:1a:06:3d:db:d1:f2:0d:cb:47:36:c1:e7:
31:d9:08:f2:65:9f:e8:28:e1:9c:27:03:13:e4:6d:
13:18:f8:dd:e7:db:18:7d:c4:cd:7a:6f:af:57:c1:
51:74:7f:dd:8f:8f:6f:31:7e:09:e3:37:90:13:80:
74:f0:43:cd:cb:50:bc:91:dd:c3:db:9b:59:fa:aa:
0a:da:e3:22:30:1f:d5:ad:9a:4a:33:bb:a6:03:46:
66:05:5f:7d:17:a5:ce:87:7f:e8:7b:d4:10:96:f2:
4c:70:6c:82:8a:da:ca:26:d1:88:72:77:ae:5a:eb:
b4:7c:be:7d:d9:9a:01:6b:63:55:83:84:82:e9:f1:
3e:1a:29:fd:ba:9f:0a:68:b4:77:cb:17:7d:86:62:
00:9e:ee:a9:09:97:fa:e3:4f:7e:fa:4f:96:c2:24:
3e:fa:01:d1:8a:a6:58:88:70:a0:42:c9:f9:60:78:
91:2f:94:4d:1f:de:eb:88:b3:3b:89:5f:7d:87:cb:
13:a7:79:8a:49:d4:cd:4a:b2:e8:9d:25:d7:e2:16:
86:0f:00:12:4d:52:09:8a:75:f5:5c:cf:a3:f9:d8:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:A8:33:FD:49:15:7A:AD:38:D0:E7:A1:94:28:E0:37:AA:1B:F5
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/4kaoM_1JFXqtONDnoZQo4DeqG_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.92.247.0/24
91.132.60.0/23
91.132.63.0/24
93.94.140.0/24
93.94.142.0/24
95.169.196.0/24
95.169.202.0/23
185.1.156.0/24
185.7.219.0/24
185.243.212.0/23
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
94:c5:bf:ff:37:ab:ba:a6:d6:b2:e4:2e:6b:d1:46:88:6d:17:
f4:94:28:37:8e:17:08:6f:a5:0b:99:a5:90:63:25:9c:ef:af:
e3:13:e2:ec:05:a4:eb:dd:94:4c:fc:02:d3:04:b5:f2:57:86:
b0:55:be:65:1d:12:2c:47:2e:6b:78:80:46:7b:a8:02:74:82:
c0:b7:b6:04:63:73:06:f3:68:a5:10:71:19:ee:bf:e3:ad:17:
14:63:0d:bd:13:47:e0:52:bc:a7:8a:d6:75:87:34:a3:4f:a6:
e3:d5:9b:5b:ed:a7:a4:89:a3:34:73:1e:25:6c:be:6b:0f:8f:
cc:88:ef:f3:4f:59:5b:b1:98:0a:07:ba:71:fc:6a:f3:11:73:
de:bd:9f:23:92:a9:f2:e3:20:af:e1:c8:42:22:91:02:a5:85:
f6:92:6b:21:1e:5c:5f:c2:44:2e:ca:f6:6c:93:c9:8d:76:5d:
a5:d8:2d:89:49:11:1c:f7:eb:ee:02:5f:25:a7:1a:70:f2:9c:
3b:f9:03:2f:2e:76:78:6b:29:d0:60:7f:ca:00:b3:ba:03:85:
da:df:df:37:0b:5f:e6:da:39:33:4c:97:cc:74:fd:fd:9b:ec:
84:d2:10:f4:d0:d5:f4:ad:f6:c5:5f:20:87:04:6a:c9:66:f9:
d2:8c:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:57 2026 by rpki-client