Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/4HckTplFAkrhNdnTW5XAwXnIPU0.roa
File: 4HckTplFAkrhNdnTW5XAwXnIPU0.roa (raw, json)
Hash identifier: aOiQZ5Y4tPIRQ54Gd+E8kwPi9RJOGCIJHp3uteSth8M=
Subject key identifier: E0:77:24:4E:99:45:02:4A:E1:35:D9:D3:5B:95:C0:C1:79:C8:3D:4D
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 01A05BA0140ABB78D528A652294C82BD6453
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/4HckTplFAkrhNdnTW5XAwXnIPU0.roa
Signing time: Tue 01 Sep 2026 06:20:12 +0000
ROA not before: Tue 01 Sep 2026 06:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210478
IP address blocks: 194.58.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:a0:14:0a:bb:78:d5:28:a6:52:29:4c:82:bd:64:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Sep 1 06:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e077244e9945024ae135d9d35b95c0c179c83d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:ff:fb:be:c1:6b:89:9b:f8:3f:72:70:f0:
e7:b6:ef:47:6d:83:6d:50:b0:8f:8e:6f:89:a8:af:
8d:f0:60:76:dd:d9:74:09:ad:79:1f:6c:ed:69:bc:
c0:5e:7a:aa:57:14:7a:d5:7f:a8:47:18:5a:bf:da:
9b:fb:21:2e:bd:2d:35:a7:0e:84:3d:2b:df:91:63:
99:73:a6:2f:14:7b:a8:a9:0a:64:b5:bf:fe:b1:99:
e3:97:4a:e4:e1:22:06:1e:7f:c1:78:55:6f:f8:e4:
a9:b7:85:59:fc:2b:ea:0e:eb:f4:ee:e3:05:3a:2e:
84:28:7f:1d:83:d0:51:3b:f6:c1:8e:fd:a5:39:a3:
ad:30:96:d4:74:0f:d3:0a:e8:0c:f5:d3:d7:86:35:
7f:54:a4:82:b6:ab:c8:62:4a:54:f8:66:de:5d:bc:
36:b2:54:92:c2:1b:f9:e3:f0:0d:00:d1:22:85:1c:
ed:ef:85:17:1c:d0:ea:b2:db:d7:66:3d:19:1c:35:
d9:60:61:84:e4:75:3d:6b:4d:e7:31:66:82:7b:6f:
f2:aa:03:0d:cf:e1:2f:a2:33:de:c2:82:d2:64:2e:
61:92:13:5f:fc:ab:71:1d:ae:54:9c:d8:27:f5:6e:
be:ff:68:11:c9:24:42:35:81:69:21:9a:91:61:a1:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:24:4E:99:45:02:4A:E1:35:D9:D3:5B:95:C0:C1:79:C8:3D:4D
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/4HckTplFAkrhNdnTW5XAwXnIPU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0e:6d:e8:6c:01:74:0b:d1:de:10:33:a0:d2:9f:3e:6a:e7:
8e:37:98:dd:36:78:2b:af:82:71:9d:14:80:ff:e6:5c:56:5c:
e2:40:ad:d7:11:fc:bf:35:1d:a4:49:91:44:f3:af:77:50:35:
bd:5d:b5:8d:bf:02:81:fc:51:f2:40:7d:c1:a9:28:ec:1a:8e:
50:8b:d7:6c:ec:98:70:50:82:ce:66:2d:6c:45:63:e8:f6:f0:
c5:ce:ba:a1:9c:07:aa:aa:39:b8:94:d8:e1:1b:d5:58:0d:0b:
09:ce:65:55:56:17:57:b0:7f:e1:5a:cb:a0:1a:7b:bd:a4:96:
96:25:65:96:3f:81:97:8b:b3:65:f2:de:3f:22:11:79:a7:56:
d1:94:73:27:53:11:c9:7d:d1:85:3c:d8:c2:c6:12:3e:5e:fc:
6e:45:e3:e7:1f:49:70:a2:1c:c9:18:b1:75:33:1b:28:f0:71:
24:48:01:ae:46:24:d6:ef:6a:c4:cf:d0:d0:2c:37:e3:ce:cd:
c2:47:7d:f9:54:ca:8d:95:52:a9:d2:0f:5d:91:cb:ba:7d:11:
35:5e:cb:ee:f3:66:ae:bd:e7:25:89:a4:cf:40:81:0b:3b:b4:
ab:51:6a:f4:11:e0:f4:6e:ec:75:27:87:19:dd:7f:6d:f3:2f:
c8:1a:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:44 2026 by rpki-client