Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa
File: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (raw, json)
Hash identifier: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=
Subject key identifier: E2:06:A4:8C:E9:76:AC:A2:31:B4:37:98:F2:4C:76:78:EB:CF:FC:9A
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019B7C1239F8123FB90D639BA29DBB9D06B8
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa
Signing time: Fri 02 Jan 2026 00:18:47 +0000
ROA not before: Fri 02 Jan 2026 00:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3262
IP address blocks: 217.18.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:39:f8:12:3f:b9:0d:63:9b:a2:9d:bb:9d:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jan 2 00:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e206a48ce976aca231b43798f24c7678ebcffc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:16:ea:4c:84:91:7d:de:7f:54:58:b8:21:
e5:b6:ba:2e:64:4e:7f:65:d6:0c:a7:0f:f7:c6:4f:
6b:a3:b6:4c:a0:7b:e0:a8:72:5e:b8:fa:12:14:17:
ad:59:69:8b:eb:b3:b2:b5:e8:67:14:ee:f4:5a:23:
ad:ce:b0:55:b0:1a:e5:47:17:63:5b:62:4f:d7:cc:
8d:3c:64:10:6d:e4:ca:da:64:44:e6:ad:3d:1a:57:
3a:ae:16:37:1d:68:d4:51:ca:5a:aa:ae:be:79:03:
2a:e4:36:90:10:0e:74:4e:24:a5:43:1b:35:1a:d9:
5b:a5:c9:9a:bf:e8:34:26:5b:e5:5f:95:49:39:14:
b2:a9:b8:be:f8:7b:4d:8f:e5:de:b0:ab:87:49:54:
21:46:b2:9a:ab:ac:84:e6:40:ad:0a:dc:05:1f:a1:
ee:1a:61:49:22:90:ca:50:81:30:63:75:a4:21:19:
e2:84:a6:c6:a5:f7:ee:7b:5b:29:ca:a2:61:c7:ae:
2b:4e:e3:4e:a9:58:e7:1e:0c:e2:ce:33:1b:ef:4d:
95:b3:1f:9a:19:cb:1a:88:41:2b:66:6a:50:a6:7f:
7e:b1:dc:1f:a8:b8:d4:83:04:63:20:ff:67:3c:26:
0d:f9:a1:07:56:d2:4b:6f:64:46:72:cb:0b:c4:2b:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:A4:8C:E9:76:AC:A2:31:B4:37:98:F2:4C:76:78:EB:CF:FC:9A
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:fa:5e:e1:29:06:e4:b9:37:1c:fa:f5:14:7a:78:45:15:
aa:97:89:bc:07:f8:69:0f:c8:3c:58:62:74:47:60:80:66:a3:
dd:af:f4:71:b0:2b:38:d1:25:cd:2c:81:79:51:d5:99:af:87:
d4:e7:5c:e8:f3:95:b8:ac:cd:1d:83:07:4a:f8:ed:c4:2d:d2:
50:c1:30:27:02:62:0e:fa:33:95:6a:09:88:fd:f3:07:6e:73:
38:5e:22:40:e7:c5:3c:7d:a6:27:55:0b:0b:a5:b0:ce:1f:9c:
ba:d3:74:61:9d:ff:c6:8c:e0:ab:1e:97:ae:6f:c5:1f:9f:7a:
11:fc:27:0e:9a:5e:b6:7f:50:c5:3c:b1:af:cf:c5:c4:14:e6:
9a:85:b1:fb:db:d1:b1:b2:95:7c:27:03:12:fb:30:57:32:1e:
43:35:b5:5d:80:d4:2b:fe:3b:94:04:8b:07:d8:c0:99:8f:9b:
74:a8:8b:51:a4:7e:17:a6:8f:e2:ff:a6:02:08:8b:5d:d3:58:
08:82:91:42:bd:d5:42:cf:15:b7:40:2c:00:ef:6a:64:fa:f7:
86:bc:68:ae:12:54:5c:4a:97:d8:af:46:c9:21:c0:ea:69:3c:
26:98:a0:86:78:d8:58:71:85:f1:dd:fd:bf:54:9b:be:f6:36:
13:0c:25:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ejn4Ej+5DWObop27nQa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA2YTQ4Y2U5NzZhY2EyMzFiNDM3OThmMjRjNzY3OGViY2ZmYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54W6kyEkX3ef1RYuCHltrouZE5/
ZdYMpw/3xk9ro7ZMoHvgqHJeuPoSFBetWWmL67OytehnFO70WiOtzrBVsBrlRxdj
W2JP18yNPGQQbeTK2mRE5q09Glc6rhY3HWjUUcpaqq6+eQMq5DaQEA50TiSlQxs1
Gtlbpcmav+g0JlvlX5VJORSyqbi++HtNj+XesKuHSVQhRrKaq6yE5kCtCtwFH6Hu
GmFJIpDKUIEwY3WkIRnihKbGpffue1spyqJhx64rTuNOqVjnHgzizjMb702Vsx+a
GcsaiEErZmpQpn9+sdwfqLjUgwRjIP9nPCYN+aEHVtJLb2RGcssLxCvGZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIGpIzpdqyiMbQ3mPJMdnjrz/yaMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvNGdha2pPbDJyS0l4dERlWThreDJlT3ZQX0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLuMA0G
CSqGSIb3DQEBCwUAA4IBAQCNKfpe4SkG5Lk3HPr1FHp4RRWql4m8B/hpD8g8WGJ0
R2CAZqPdr/RxsCs40SXNLIF5UdWZr4fU51zo85W4rM0dgwdK+O3ELdJQwTAnAmIO
+jOVagmI/fMHbnM4XiJA58U8faYnVQsLpbDOH5y603Rhnf/GjOCrHpeub8Ufn3oR
/CcOml62f1DFPLGvz8XEFOaahbH729GxspV8JwMS+zBXMh5DNbVdgNQr/juUBIsH
2MCZj5t0qItRpH4Xpo/i/6YCCItd01gIgpFCvdVCzxW3QCwA72pk+veGvGiuElRc
SpfYr0bJIcDqaTwmmKCGeNhYcYXx3f2/VJu+9jYTDCVd
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:42 2026 by rpki-client