Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/4GpPsuXyTB7mqbStOGGvgQlaA3c.roa
File: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (raw, json)
Hash identifier: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=
Subject key identifier: E0:6A:4F:B2:E5:F2:4C:1E:E6:A9:B4:AD:38:61:AF:81:09:5A:03:77
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 019C7ABBB1CC7ED9583FAB1F47087AA1765E
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/4GpPsuXyTB7mqbStOGGvgQlaA3c.roa
Signing time: Fri 20 Feb 2026 11:07:26 +0000
ROA not before: Fri 20 Feb 2026 11:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206423
IP address blocks: 185.117.196.0/22 maxlen: 23
185.156.252.0/22 maxlen: 23
2a07:a1c0::/29 maxlen: 48
2a13:6dc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:bb:b1:cc:7e:d9:58:3f:ab:1f:47:08:7a:a1:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Feb 20 11:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e06a4fb2e5f24c1ee6a9b4ad3861af81095a0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:c1:7e:d2:a2:c8:8f:61:35:a9:c1:78:02:
ef:09:2e:60:92:c2:39:a4:64:97:fa:5b:1f:76:7a:
a8:65:c3:1c:b3:75:19:d8:a7:aa:29:95:a2:97:12:
9f:e9:94:97:83:5a:b4:40:f5:78:a7:e0:94:a1:18:
8a:08:9c:fb:15:49:43:81:b7:5c:1c:79:87:ff:9d:
7e:85:f9:cc:ab:c5:df:3d:eb:83:17:48:c2:bc:2f:
ed:0c:21:b4:d3:d9:47:ad:1e:7c:d0:14:f4:ad:fc:
f0:1a:e1:54:4c:66:28:f5:50:99:ef:d6:4f:3e:cd:
ff:3b:da:ef:c1:8c:ad:a2:f6:a5:d8:36:81:2d:82:
12:11:55:42:e9:53:95:7b:83:3c:14:5d:97:51:6a:
cd:11:8e:da:d1:48:f1:42:f3:23:27:b1:e7:7b:79:
8e:e7:f1:0b:be:47:3b:04:7a:12:c3:e2:8f:57:db:
34:fb:cc:09:20:ee:9c:4c:a0:0d:2d:bc:06:ee:95:
38:58:92:dd:1b:dd:d6:44:61:8d:39:0e:2e:e3:af:
a4:cf:1d:45:65:f7:14:fd:c8:7b:80:c7:9c:59:b1:
db:6f:01:0b:ba:6d:ab:16:0c:14:4f:41:ae:f9:c4:
86:02:6c:93:02:bf:a3:7a:49:46:69:b9:01:88:3f:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:4F:B2:E5:F2:4C:1E:E6:A9:B4:AD:38:61:AF:81:09:5A:03:77
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/4GpPsuXyTB7mqbStOGGvgQlaA3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.196.0/22
185.156.252.0/22
IPv6:
2a07:a1c0::/29
2a13:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
45:94:4e:2f:54:65:42:4a:cd:17:d8:9f:b4:dd:13:f9:68:6c:
35:72:16:99:18:31:e1:aa:48:6d:42:18:89:61:a8:19:9a:eb:
fd:a0:ed:1a:8e:c9:00:cb:bc:f1:b5:c4:78:eb:99:38:19:e9:
de:a5:12:40:08:cd:56:be:d4:5c:c4:61:81:eb:35:9d:92:04:
5a:60:69:f8:5e:97:7b:f4:eb:c7:b4:d8:80:b4:dc:93:a2:5d:
c2:78:c0:d8:7c:82:90:d5:a4:ff:3b:49:46:60:8f:0d:5a:57:
7b:51:1f:4e:8b:e5:9b:11:99:4d:34:10:0d:64:db:ae:a1:20:
d8:2d:3e:6d:25:32:e1:b5:b8:bb:75:09:cd:ff:37:ed:bd:7b:
ba:3f:34:63:fb:3d:1c:87:1b:a5:d4:90:0d:40:42:93:c3:a4:
47:66:39:f1:37:ca:2e:fa:72:73:c0:d4:24:ee:5b:64:b6:cb:
e7:3e:c4:aa:2d:31:51:85:3d:59:1c:ea:07:5f:76:52:97:dc:
89:d9:e9:97:31:fb:06:f3:42:ef:9c:32:af:48:aa:35:e0:62:
a1:1b:85:03:80:3e:27:93:09:01:66:3c:06:e1:68:3e:51:4f:
68:f4:5e:b7:30:2e:e3:d2:05:88:04:19:7b:f7:f6:0d:f5:bc:
8e:e4:d9:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZx6u7HMftlYP6sfRwh6oXZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi
YTMwZmEwHhcNMjYwMjIwMTEwNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDZhNGZiMmU1ZjI0YzFlZTZhOWI0YWQzODYxYWY4MTA5NWEwMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHBftKiyI9hNanBeALvCS5gksI5
pGSX+lsfdnqoZcMcs3UZ2KeqKZWilxKf6ZSXg1q0QPV4p+CUoRiKCJz7FUlDgbdc
HHmH/51+hfnMq8XfPeuDF0jCvC/tDCG009lHrR580BT0rfzwGuFUTGYo9VCZ79ZP
Ps3/O9rvwYytoval2DaBLYISEVVC6VOVe4M8FF2XUWrNEY7a0UjxQvMjJ7Hne3mO
5/ELvkc7BHoSw+KPV9s0+8wJIO6cTKANLbwG7pU4WJLdG93WRGGNOQ4u46+kzx1F
ZfcU/ch7gMecWbHbbwELum2rFgwUT0Gu+cSGAmyTAr+jeklGabkBiD8I2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOBqT7Ll8kwe5qm0rThhr4EJWgN3MB8GA1UdIwQY
MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et
YmMyODlkYzE3ZDIwLzEvNEdwUHN1WHlUQjdtcWJTdE9HR3ZnUWxhQTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw
LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuXXEAwQC
uZz8MBQEAgACMA4DBQMqB6HAAwUDKhNtwDANBgkqhkiG9w0BAQsFAAOCAQEARZRO
L1RlQkrNF9iftN0T+WhsNXIWmRgx4apIbUIYiWGoGZrr/aDtGo7JAMu88bXEeOuZ
OBnp3qUSQAjNVr7UXMRhges1nZIEWmBp+F6Xe/Trx7TYgLTck6JdwnjA2HyCkNWk
/ztJRmCPDVpXe1EfTovlmxGZTTQQDWTbrqEg2C0+bSUy4bW4u3UJzf837b17uj80
Y/s9HIcbpdSQDUBCk8OkR2Y58TfKLvpyc8DUJO5bZLbL5z7Eqi0xUYU9WRzqB192
UpfcidnplzH7BvNC75wyr0iqNeBioRuFA4A+J5MJAWY8BuFoPlFPaPRetzAu49IF
iAQZe/f2DfW8juTZng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:28:00 2026 by rpki-client