Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa
File: 8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa (raw, json)
Hash identifier: KJQ+hLUiPQSE9je+LLOq5/vsaLlj3ltGveBd4v8E+us=
Subject key identifier: F1:A4:64:AB:91:8C:03:96:1A:D0:9F:2C:9F:76:E3:08:C8:96:A6:EF
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D910BC2D500431DDD5724B0FF4401372E
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa
Signing time: Wed 15 Apr 2026 12:09:20 +0000
ROA not before: Wed 15 Apr 2026 12:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 158.173.49.0/24 maxlen: 24
158.173.74.0/24 maxlen: 24
158.173.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:0b:c2:d5:00:43:1d:dd:57:24:b0:ff:44:01:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Apr 15 12:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1a464ab918c03961ad09f2c9f76e308c896a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:b6:8f:2a:b3:fe:90:8a:87:ba:55:64:9d:
fe:e5:d6:23:bd:65:9e:be:0e:da:70:73:8a:e6:91:
da:c6:cf:a0:28:bf:4b:88:84:99:48:ff:8b:cf:35:
cb:08:c3:e7:2a:57:13:fc:2e:cc:d3:b4:1b:ba:92:
75:3a:08:41:02:ea:2e:4a:ac:60:c5:f4:b3:b5:c3:
ba:1f:88:d7:16:d4:89:63:a5:53:12:bf:1a:01:06:
1a:82:c1:39:a8:35:40:93:c2:b6:b8:05:9e:d3:98:
a0:6a:07:a0:7f:c8:4d:61:5f:4d:ef:8d:6b:a9:7f:
fa:c6:bf:17:f9:9e:e5:b5:ff:71:c9:69:0e:41:07:
b8:68:76:ae:c4:5f:0c:d8:6a:9a:c7:64:94:ea:e8:
80:2a:05:4d:48:d8:a1:10:39:06:63:f2:ff:97:33:
a5:ac:db:11:e5:24:75:89:98:ef:c4:54:82:c1:12:
30:35:f5:b4:e7:ce:a4:6a:62:83:ce:33:2b:5b:d4:
dc:f0:f2:85:84:f4:19:78:d2:fa:19:4f:5f:01:bc:
9e:93:dd:c4:1c:4d:be:39:52:f8:fe:26:72:53:88:
34:8c:8c:9a:62:ec:c2:8c:45:37:24:74:1c:7c:3d:
63:13:22:2e:9d:34:08:31:c1:60:13:6c:60:29:f5:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:64:AB:91:8C:03:96:1A:D0:9F:2C:9F:76:E3:08:C8:96:A6:EF
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/8aRkq5GMA5Ya0J8sn3bjCMiWpu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.49.0/24
158.173.74.0/24
158.173.104.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5e:61:33:f8:22:0f:25:d0:89:cb:40:82:0b:7c:05:1e:48:
37:26:54:1b:37:31:f6:f6:8d:78:a2:f0:b1:89:6c:9c:0a:41:
00:a3:bd:be:b7:21:18:08:24:71:36:56:4b:f7:ba:2f:48:bf:
df:5a:24:f2:20:b0:e5:ac:7c:17:a1:e3:27:c1:b7:7d:8b:62:
0f:12:8c:37:b0:70:6d:e5:f1:9b:2a:b0:b4:e5:cc:ca:24:e2:
e1:41:de:be:06:20:2d:5e:2f:27:58:00:58:7d:c1:08:9a:d2:
e9:e3:da:f7:7a:ae:74:a0:4f:72:db:b6:1f:f4:53:eb:09:79:
c2:e1:36:05:7d:79:06:36:9d:61:bf:01:36:a4:29:29:75:f8:
ee:b9:df:95:fc:e6:97:75:a2:bb:00:d7:6f:fd:27:7c:99:ff:
db:21:35:40:f2:c4:a4:23:c4:0f:e6:f1:4b:d5:5d:47:a5:a0:
a8:73:53:1d:1e:73:1d:d7:bd:59:3c:65:9c:c9:5b:f3:ad:54:
03:01:2f:fa:ed:45:f1:38:a7:a9:82:2b:5e:54:fa:0a:4c:04:
0c:07:47:19:e5:53:eb:31:f8:59:2b:d9:b0:81:71:dc:4b:95:
f0:62:87:ea:a7:a0:99:48:2a:68:c8:5a:fc:18:91:16:9f:cd:
2a:d0:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:34:33 2026 by rpki-client