Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/47sWOPTHnZb9BF-ya3p9tYZmQl0.roa
File: 47sWOPTHnZb9BF-ya3p9tYZmQl0.roa (raw, json)
Hash identifier: RBzAZuMSt44/uQERR1k3fKGneZwh+1kpWY7wx6/NCk0=
Subject key identifier: E3:BB:16:38:F4:C7:9D:96:FD:04:5F:B2:6B:7A:7D:B5:86:66:42:5D
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01A0814901A24DE4B910516F40B76AA088A8
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/47sWOPTHnZb9BF-ya3p9tYZmQl0.roa
Signing time: Tue 08 Sep 2026 13:50:40 +0000
ROA not before: Tue 08 Sep 2026 13:50:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396026
IP address blocks: 185.219.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:49:01:a2:4d:e4:b9:10:51:6f:40:b7:6a:a0:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Sep 8 13:50:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3bb1638f4c79d96fd045fb26b7a7db58666425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:b8:80:5e:83:73:89:8b:d8:bf:74:d1:0e:
b4:66:cd:b3:64:08:29:e7:5b:84:8d:00:2d:4b:95:
04:96:2d:3a:93:85:36:a0:5b:14:c5:99:c1:c0:5b:
a3:ac:46:e9:f6:68:7c:8f:d8:d5:96:53:90:33:d3:
1b:43:53:ce:21:e1:75:e4:0b:ae:81:a9:cc:ac:f9:
65:71:8d:89:10:5c:87:96:8b:21:32:fb:ff:c2:ce:
9f:8e:1a:90:b9:49:da:fc:0a:0b:30:f4:9c:07:9d:
0c:54:1d:bd:8f:e4:f2:06:f2:12:e6:4a:81:8f:52:
f4:b3:27:9a:f9:43:e6:7f:73:1b:96:54:c5:cf:cc:
67:6e:b6:56:97:a8:41:e3:4d:b2:1a:5c:05:39:43:
13:6f:f2:c6:49:13:a7:3b:54:be:4a:23:f2:2b:29:
50:7d:fc:d8:28:3b:84:e1:f6:a2:9f:d4:f9:27:aa:
7d:64:52:d5:87:21:e9:dd:7d:8f:58:9c:34:a8:86:
43:18:87:c6:2f:51:5e:9c:94:27:00:9d:b0:28:fa:
cc:1b:4e:25:d8:2a:b2:fa:49:90:2a:68:ea:48:5b:
4c:94:c5:db:9a:10:8c:7c:5e:ba:65:f5:b5:e2:a9:
44:32:36:e5:37:b5:c8:ff:6d:63:a1:00:64:4d:79:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:16:38:F4:C7:9D:96:FD:04:5F:B2:6B:7A:7D:B5:86:66:42:5D
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/47sWOPTHnZb9BF-ya3p9tYZmQl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:8a:13:10:bb:26:ad:af:12:00:88:91:1b:44:f3:ac:2b:1b:
1a:68:fc:54:40:00:9e:5a:b9:02:98:51:a3:ff:07:73:73:a2:
d4:54:40:a9:2e:fb:c6:b8:f0:31:b2:db:2b:b7:1b:62:96:44:
f4:ed:3c:7f:db:d0:9d:b7:37:fe:f4:34:de:1a:8f:b3:57:ab:
ef:5d:af:be:ba:56:c3:24:db:16:b7:81:ec:de:45:a5:9d:93:
cd:17:20:ee:35:8b:12:4b:18:45:e5:51:e8:2a:50:ce:40:23:
2a:8a:0b:88:88:0a:ec:c4:c8:af:d5:1a:6e:51:f7:db:ba:1d:
ed:fa:58:d8:ec:46:c2:8b:94:47:14:98:58:f8:49:db:5d:c7:
45:40:2a:04:c0:35:35:6c:0a:f5:31:b7:30:d3:bd:c2:9a:42:
68:3d:e3:04:fa:06:92:9d:a0:42:fe:18:ec:cf:59:0a:14:43:
40:2b:96:b9:a5:c6:2a:84:35:91:eb:7f:97:d0:aa:1e:e4:9f:
48:43:88:43:a8:00:77:c9:27:9d:08:11:d0:81:b5:4a:d2:a0:
65:45:9b:90:60:20:59:3d:97:7c:62:bf:21:a0:7d:89:0d:7e:
58:9a:4a:75:12:e4:ee:7a:c3:8b:8a:a0:3e:b2:9b:a7:2f:4f:
bc:f0:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:08 2026 by rpki-client