Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4DrCuPedkygCysATMu1Kzw_Bubg.roa
File: 4DrCuPedkygCysATMu1Kzw_Bubg.roa (raw, json)
Hash identifier: IDEpWjgLpyh0ymibj1P5FMUAPxBL43OsoxHE5UmBLOY=
Subject key identifier: E0:3A:C2:B8:F7:9D:93:28:02:CA:C0:13:32:ED:4A:CF:0F:C1:B9:B8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019F94C4365B08ED763ADABAE8B583A52BFA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4DrCuPedkygCysATMu1Kzw_Bubg.roa
Signing time: Fri 24 Jul 2026 15:35:14 +0000
ROA not before: Fri 24 Jul 2026 15:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219132
IP address blocks: 212.68.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:c4:36:5b:08:ed:76:3a:da:ba:e8:b5:83:a5:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 24 15:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e03ac2b8f79d932802cac01332ed4acf0fc1b9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:7c:6f:c5:df:b9:3e:47:06:89:7f:b5:51:
63:6d:54:b6:35:d6:4a:84:42:8f:a5:31:8e:03:5c:
ab:b2:c2:8d:43:cc:9b:fd:27:62:b2:83:8e:93:4f:
18:f5:fc:03:21:c6:96:e6:e5:8b:92:11:f6:6e:8c:
10:30:7f:a8:89:0a:b3:14:10:fa:f5:78:e9:b7:37:
9f:09:1a:a8:a9:74:10:91:56:9d:41:d8:f6:a7:21:
6d:5e:59:6f:bc:a4:3c:61:37:c4:96:70:df:d0:a5:
ce:4b:bc:13:f4:b1:6d:0f:77:57:37:71:f1:47:e0:
a1:c1:df:45:d6:26:29:53:75:f1:cb:74:30:3a:92:
d1:a2:e3:1e:82:b9:09:a3:9e:a9:52:44:b7:de:53:
e0:2c:ce:16:64:b3:cb:8f:f0:22:1d:81:d2:9a:a6:
d6:ff:66:6a:2f:60:22:8c:d5:ba:df:9f:69:57:bf:
48:e5:3d:63:07:a7:35:1d:d5:3b:12:f4:a5:5f:e9:
07:18:0d:e7:72:71:42:02:5a:f5:0f:80:5c:e5:8d:
8b:d3:03:e6:42:71:05:50:51:75:54:95:e1:10:4b:
03:39:03:10:6e:67:85:d7:e1:9d:6e:c0:db:ff:68:
bd:38:dd:97:0b:1d:f4:cf:d3:74:ec:74:a5:c7:d2:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3A:C2:B8:F7:9D:93:28:02:CA:C0:13:32:ED:4A:CF:0F:C1:B9:B8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4DrCuPedkygCysATMu1Kzw_Bubg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
28:79:7d:67:d4:5d:2e:9e:ef:f7:87:a7:c1:03:0b:e8:3b:3f:
88:51:2f:5d:3b:4f:b6:3b:d4:6c:fb:94:03:9f:69:e9:62:f0:
d4:50:62:65:f4:be:9f:2d:10:0a:42:69:ef:11:4d:51:06:be:
63:1b:dc:9a:63:23:ed:a3:1d:91:13:cc:a1:c1:4b:07:e8:87:
30:a3:7c:8b:8f:00:24:91:c9:ee:a2:0b:c3:d1:b8:f5:30:0d:
01:c8:45:cb:df:52:e4:b5:d6:89:2f:0f:c9:d3:88:c6:0d:81:
35:c3:ca:27:4a:2a:bc:c8:6b:de:a0:39:29:73:d7:ad:63:85:
87:1c:c0:57:9c:4c:6e:fa:bb:18:12:41:2d:f5:f3:d4:7c:e7:
5e:3b:03:63:02:fa:86:a7:3d:d5:b2:d0:52:50:0d:96:a5:62:
81:97:06:38:d6:50:46:6e:88:03:18:28:a8:9c:1e:41:b7:b3:
6a:63:cb:fe:7f:b6:76:c0:be:51:75:37:93:5e:84:97:0b:b7:
8c:1a:f8:4c:1c:f4:fb:ee:cc:f4:86:c1:1a:09:25:7d:a1:6b:
ad:02:5b:7e:08:10:04:a2:3a:85:2d:2f:06:8d:be:88:66:3b:
0e:86:c9:09:11:ec:2f:2b:ba:ee:b6:e5:df:9a:0c:52:a6:a0:
cf:fe:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:18 2026 by rpki-client