Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/F4Vgr4L1EbwW3XosQZ_v157FMI4.roa
File: F4Vgr4L1EbwW3XosQZ_v157FMI4.roa (raw, json)
Hash identifier: 9QrlKW7ocjgl0QVizrLrTu8nAqX3uWUTPtBosztTts8=
Subject key identifier: 17:85:60:AF:82:F5:11:BC:16:DD:7A:2C:41:9F:EF:D7:9E:C5:30:8E
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 01A04453FADE4230501AFE9908DC4C85A6FB
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/F4Vgr4L1EbwW3XosQZ_v157FMI4.roa
Signing time: Thu 27 Aug 2026 17:45:49 +0000
ROA not before: Thu 27 Aug 2026 17:45:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31037
IP address blocks: 185.134.178.0/24 maxlen: 24
185.134.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:53:fa:de:42:30:50:1a:fe:99:08:dc:4c:85:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Aug 27 17:45:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178560af82f511bc16dd7a2c419fefd79ec5308e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:0a:e2:0f:ab:52:36:7a:cf:35:1f:49:50:
ec:c5:ef:00:76:95:c3:9f:e1:db:4f:61:c3:c8:1d:
67:e9:ca:e8:45:a0:71:68:e9:4d:91:a5:35:f1:b2:
c0:95:61:89:1e:b4:df:21:22:c7:37:4e:b2:4d:8c:
af:76:06:ad:44:21:80:5f:46:d4:f8:d4:4c:34:ac:
7f:12:46:dd:67:9c:97:80:33:69:e4:73:2d:5b:c6:
e9:70:5a:84:e8:1a:16:d9:95:65:7c:c2:b2:df:65:
09:c8:2e:ab:89:ec:ce:30:1e:2a:8a:54:44:a3:0a:
17:f8:d0:a3:9f:9e:3c:b4:8d:10:16:d7:84:7d:5d:
36:1a:fb:60:fb:b2:49:69:fd:db:58:77:5c:5c:49:
55:80:f8:3e:81:56:5c:9f:d9:f3:fa:a0:73:19:9d:
28:18:80:ee:41:91:13:1f:ac:d1:79:13:d9:26:d9:
58:0d:0c:19:f1:4f:0c:08:55:5b:c1:26:df:38:fa:
1d:65:5d:08:54:2e:af:a4:4b:5a:b1:36:0d:a8:18:
70:5a:38:cd:c4:36:87:ac:6f:55:5a:18:84:87:53:
00:df:f0:19:1b:5e:90:13:39:1b:58:c0:dd:34:56:
68:a1:27:ba:72:88:58:53:c2:26:9f:bf:68:16:e6:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:85:60:AF:82:F5:11:BC:16:DD:7A:2C:41:9F:EF:D7:9E:C5:30:8E
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/F4Vgr4L1EbwW3XosQZ_v157FMI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.178.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:6d:de:9a:a4:ab:81:2e:4c:ef:32:61:16:dc:be:de:6e:a8:
cc:f9:e9:ee:6e:5a:c3:d9:df:bc:ae:c0:21:c8:81:43:aa:ae:
8f:e0:bb:08:5a:0a:f5:9e:6d:de:63:f5:28:58:d6:13:c6:78:
30:a0:52:1d:c5:35:82:7e:c9:6a:cc:df:23:94:cf:6c:17:a7:
ce:e4:1d:94:6b:37:51:bf:07:e2:8a:2f:20:94:08:e5:1b:29:
d6:bf:05:c0:fd:76:78:15:33:85:f5:f4:0d:bc:7b:47:1e:44:
97:55:55:73:d0:7b:97:3a:6b:a7:f6:4c:ab:34:a9:dd:a7:6a:
da:28:4a:f5:2b:71:78:1b:e7:5a:fc:b4:8b:c6:62:25:f1:11:
6e:89:a5:01:87:87:d8:0d:d6:fe:86:e9:30:27:1e:ad:f0:5f:
0a:cd:db:ca:9c:c3:6a:fd:78:2a:d5:34:cd:e9:fb:21:f0:17:
59:24:15:d5:fb:3c:7a:43:cc:8a:d8:69:d9:b0:b0:95:a0:9b:
e2:58:ac:26:81:93:c7:85:83:f9:fb:25:95:da:6f:a4:16:c7:
68:03:3c:81:c9:c0:93:32:5a:bb:83:05:45:0b:6e:be:6a:25:
d6:df:3a:b4:ce:6b:1a:8d:64:1f:02:e5:61:b0:f6:50:8e:0a:
07:1f:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 22:56:29 2026 by rpki-client