Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/w4rJkQ1L2NbRD7CY26hQcNK7FC8.roa
File: w4rJkQ1L2NbRD7CY26hQcNK7FC8.roa (raw, json)
Hash identifier: gdaM1bHyGA8MaDL1shCVLPY6FMBfeft7Q1N5eukFP8I=
Subject key identifier: C3:8A:C9:91:0D:4B:D8:D6:D1:0F:B0:98:DB:A8:50:70:D2:BB:14:2F
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019D9FF758C203E9A27B87636BBD4A10C936
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/w4rJkQ1L2NbRD7CY26hQcNK7FC8.roa
Signing time: Sat 18 Apr 2026 09:41:20 +0000
ROA not before: Sat 18 Apr 2026 09:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20764
IP address blocks: 79.141.208.0/20 maxlen: 20
79.141.213.0/24 maxlen: 24
80.64.96.0/20 maxlen: 20
80.64.97.0/24 maxlen: 24
80.64.98.28/32 maxlen: 32
80.64.99.0/24 maxlen: 24
80.64.102.0/24 maxlen: 24
80.64.103.0/24 maxlen: 24
80.64.104.0/24 maxlen: 24
80.64.105.0/24 maxlen: 24
80.64.108.0/24 maxlen: 24
80.64.109.0/24 maxlen: 24
81.27.240.0/20 maxlen: 20
81.27.241.0/24 maxlen: 24
81.27.248.0/24 maxlen: 24
81.27.252.0/24 maxlen: 24
81.27.253.0/24 maxlen: 24
185.5.160.0/22 maxlen: 22
2a00:1c28::/29 maxlen: 29
2a00:1c28::/32 maxlen: 32
2a00:1c2b:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:f7:58:c2:03:e9:a2:7b:87:63:6b:bd:4a:10:c9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Apr 18 09:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c38ac9910d4bd8d6d10fb098dba85070d2bb142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:f5:92:87:38:f3:a0:98:33:7b:84:f3:0b:
c3:6e:e1:ee:40:63:f1:3a:2c:a3:00:37:33:47:5c:
72:a8:22:f5:50:04:ab:f8:00:f1:26:63:b1:7f:20:
4a:de:75:ee:81:81:35:81:4b:d9:55:26:ef:c7:c4:
82:eb:56:63:95:9c:e1:23:33:d1:46:e8:73:c6:18:
c5:d2:4b:4d:76:ff:a1:53:ce:2a:fe:8d:2c:bf:fa:
46:d0:e2:02:e1:50:99:cf:73:52:08:ef:55:41:11:
af:14:bc:b3:e9:ed:2e:95:50:33:2e:2c:6b:6b:fd:
67:82:d7:fb:c7:6e:45:05:76:5c:bc:aa:bb:ef:f3:
9b:c5:1a:f5:96:49:1c:53:55:b4:35:f2:65:e0:1d:
8c:35:49:5b:29:dd:dc:a3:15:b0:f7:cc:45:6a:a5:
d3:6d:d5:f2:92:f0:33:78:a6:ae:01:44:94:75:7a:
d0:6d:5f:2c:d5:ad:27:3e:d0:47:bb:29:d7:e5:db:
9b:d5:12:2d:e5:2b:55:54:6f:7c:a1:af:5e:e6:e2:
32:1f:90:b7:24:38:05:0a:48:f8:dd:3b:f4:20:7b:
f4:07:85:6a:23:83:26:ce:f1:06:c1:41:c7:6f:77:
a4:33:37:79:7b:60:bd:c0:4d:32:0c:4b:50:4b:f5:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:C9:91:0D:4B:D8:D6:D1:0F:B0:98:DB:A8:50:70:D2:BB:14:2F
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/w4rJkQ1L2NbRD7CY26hQcNK7FC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.208.0/20
80.64.96.0/20
81.27.240.0/20
185.5.160.0/22
IPv6:
2a00:1c28::/29
Signature Algorithm: sha256WithRSAEncryption
26:43:21:b7:f1:d8:1b:ce:7b:c7:8c:51:61:8d:f9:55:ef:10:
d4:f3:bb:4e:95:50:72:a9:69:99:2e:d6:af:91:6a:33:40:cc:
ee:61:91:a6:97:fd:ad:30:48:1d:aa:90:cc:a7:a6:71:0f:fb:
06:61:49:bc:54:79:7f:9d:d4:39:ef:99:90:22:b0:31:ce:b4:
a7:29:ec:a8:00:1c:3e:41:1b:3d:61:0c:21:eb:79:38:ab:07:
b9:6a:fa:0a:9f:7f:51:2a:0a:38:7b:e8:68:8e:26:aa:75:41:
71:ea:db:47:93:80:fb:6a:3d:24:1e:bf:69:d2:24:62:34:be:
73:87:c6:e3:37:90:3d:c8:50:c2:3d:ed:81:40:73:16:72:a5:
38:28:44:27:2f:6e:0b:d3:23:fd:f4:ee:c2:7d:cc:cd:55:c0:
b1:b8:68:36:67:f1:a3:3c:b9:71:80:e4:6f:97:0e:89:be:8b:
44:42:e6:bc:92:a0:e3:2c:f2:50:00:b4:09:43:21:9f:5f:46:
74:a7:da:40:11:35:71:8c:b1:98:c5:1d:b7:86:b2:56:5c:34:
66:3a:63:a5:63:51:09:72:eb:21:ad:8c:af:42:c4:fd:7c:aa:
64:c8:6e:dc:87:c1:d0:d0:da:03:e2:c5:23:d6:43:6b:dd:99:
e2:a3:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:54 2026 by rpki-client