Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/4o4L_7_xd96NsgGKsiURLa7lMNQ.roa
File: 4o4L_7_xd96NsgGKsiURLa7lMNQ.roa (raw, json)
Hash identifier: HafbA3v0Vsbqb/QGRzwxXfYkVjmE1FlzpPoVskuxJxs=
Subject key identifier: E2:8E:0B:FF:BF:F1:77:DE:8D:B2:01:8A:B2:25:11:2D:AE:E5:30:D4
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019E5E8024E83D6E4F7030E3E14DBDBFE33E
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/4o4L_7_xd96NsgGKsiURLa7lMNQ.roa
Signing time: Mon 25 May 2026 09:38:36 +0000
ROA not before: Mon 25 May 2026 09:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 91.199.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:80:24:e8:3d:6e:4f:70:30:e3:e1:4d:bd:bf:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: May 25 09:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28e0bffbff177de8db2018ab225112daee530d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:9f:76:93:b4:c4:df:12:ff:f8:aa:f7:b7:
70:a5:ab:82:a1:04:ae:1b:23:48:65:be:5b:a7:a9:
6f:e0:1a:dc:20:17:85:56:b4:9a:ee:03:a2:ed:d6:
31:23:b7:48:de:f1:77:81:a2:37:6f:91:f8:c3:f6:
5a:0a:ac:c4:17:c9:9b:0c:03:91:71:57:6c:82:38:
13:4f:26:d2:ca:43:2f:c2:24:f8:ca:8f:13:bd:cb:
bc:c6:36:64:35:31:86:34:f5:08:31:83:64:ec:b9:
80:53:62:21:70:b9:aa:71:4a:7a:8a:c3:8a:20:2d:
ac:a5:82:f4:d0:d7:d1:63:7c:b8:2c:dc:6a:36:b8:
89:f6:59:08:69:09:c7:a1:e8:fc:7f:bc:75:35:9c:
cf:0b:b9:16:b7:f7:c8:a5:c0:5f:12:82:1c:12:de:
5e:03:37:db:55:71:c2:c6:1c:5d:29:7c:83:6d:73:
b0:96:be:d0:dc:02:72:d4:b3:f9:70:f6:70:79:a1:
6e:3c:d6:da:41:43:c8:cf:1b:e3:80:f7:d5:71:eb:
fb:73:1f:02:ba:c8:4e:58:62:a8:0b:bd:9b:50:8b:
df:c3:b4:3e:28:d8:72:8a:ed:33:47:90:55:0b:5c:
ec:42:72:48:50:a5:d8:13:43:a3:dc:6b:cb:2f:1d:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:0B:FF:BF:F1:77:DE:8D:B2:01:8A:B2:25:11:2D:AE:E5:30:D4
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/4o4L_7_xd96NsgGKsiURLa7lMNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4b:05:22:18:d6:ea:47:46:c7:ac:c3:b4:1b:b8:a4:a1:3d:
b3:2e:d1:81:a6:5f:85:9b:5f:78:8a:18:b5:f1:42:e9:44:6a:
26:bd:b9:31:4c:2f:26:6e:4f:70:c5:40:0b:2e:c0:74:e1:68:
58:e8:b8:31:f7:2a:15:56:f7:ff:a5:61:ac:72:7c:08:36:d0:
d2:32:b7:1a:80:1a:a7:f2:44:01:9b:69:e0:fe:29:28:77:b8:
0f:a9:9d:3c:ce:e7:f4:32:0b:a1:da:fb:c7:7d:1b:16:8d:45:
37:75:44:43:dd:48:1c:67:14:61:99:49:ce:4d:df:8c:69:f9:
a7:ba:0c:df:e4:84:9d:32:f7:de:a5:bd:67:83:26:d5:40:bf:
0d:10:14:44:cc:9f:0e:ac:c9:5b:a0:49:7e:c1:72:92:86:1c:
f2:3f:e6:f1:c3:f0:0d:0a:b0:39:86:5a:0f:fa:af:c5:56:ff:
c7:a4:81:a3:43:27:ea:16:d0:0e:94:cb:a8:8e:8a:a2:9e:d1:
b7:e4:74:bc:4c:7d:53:18:f9:81:a1:e6:8c:63:04:02:9a:25:
a9:4a:ab:a1:09:54:aa:5b:23:15:4b:c4:bc:5c:1d:f8:0a:c0:
f0:12:9a:8d:2b:11:62:e2:8b:fd:d0:80:89:42:66:2d:08:4e:
83:6e:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:50 2026 by rpki-client