Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4C6lDO5r4dO34Kvc4puKU6qDzrc.roa
File: 4C6lDO5r4dO34Kvc4puKU6qDzrc.roa (raw, json)
Hash identifier: cr37FJDk08RUMr1ukCqH/SNRGksdiL298wPzQsPdogU=
Subject key identifier: E0:2E:A5:0C:EE:6B:E1:D3:B7:E0:AB:DC:E2:9B:8A:53:AA:83:CE:B7
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019C9BB131C4E58E978E61F7A02A87BBFF9F
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4C6lDO5r4dO34Kvc4puKU6qDzrc.roa
Signing time: Thu 26 Feb 2026 20:43:26 +0000
ROA not before: Thu 26 Feb 2026 20:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 185.240.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:b1:31:c4:e5:8e:97:8e:61:f7:a0:2a:87:bb:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Feb 26 20:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e02ea50cee6be1d3b7e0abdce29b8a53aa83ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:31:e7:77:24:98:63:e4:44:2b:c6:ea:d7:
5d:f3:5a:c5:ca:5d:7c:b7:da:3a:b7:14:72:59:1a:
f2:24:fc:a9:cb:be:57:1b:0e:9d:e4:7a:37:b5:60:
36:0c:79:3e:9c:75:0a:ed:79:4a:42:43:a8:81:b7:
1e:27:f4:a0:11:40:45:72:d8:48:65:03:e5:41:42:
cd:e4:a9:70:83:d1:21:86:f5:eb:23:7d:3a:85:c0:
18:6f:62:07:20:00:37:b1:0a:dd:95:32:27:96:a3:
73:aa:d0:bb:2f:de:54:6c:7e:72:33:c9:e9:03:f0:
f5:1b:9a:31:6b:b4:bc:cf:b3:7c:8c:2c:12:cd:b7:
1b:be:a4:a2:b3:82:95:1d:e4:ae:ae:96:93:b3:e3:
06:fc:ff:13:8e:79:05:4d:b3:03:86:dc:45:a2:c8:
45:f8:15:35:b9:7d:ef:1f:97:95:13:b1:30:d8:75:
7a:f7:90:35:97:e9:bb:29:83:53:28:97:af:d8:35:
e4:90:d7:49:56:bb:4f:3d:c6:78:13:53:c4:fa:24:
59:c1:92:52:12:14:2e:b1:39:1f:35:db:07:85:7c:
de:4c:07:76:b6:80:cd:d4:ee:b5:99:88:ca:22:12:
06:17:c7:73:59:d7:ce:e8:f6:b3:10:94:63:e4:dd:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:A5:0C:EE:6B:E1:D3:B7:E0:AB:DC:E2:9B:8A:53:AA:83:CE:B7
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4C6lDO5r4dO34Kvc4puKU6qDzrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.91.0/24
Signature Algorithm: sha256WithRSAEncryption
06:45:a4:0b:fa:8e:1c:db:58:49:5d:56:4e:96:be:0a:ca:20:
7f:99:fc:e2:84:e3:46:bf:af:d6:f9:a0:83:8d:b2:48:c0:18:
33:a6:59:1f:df:fc:86:1d:19:61:5b:c4:79:df:fb:cf:76:c3:
7c:d8:7b:51:b5:ff:4c:c9:4c:3d:f5:a3:49:0f:fb:9b:67:03:
f8:a2:67:d0:4c:67:f4:de:26:4a:36:48:0a:e7:f1:d3:f8:7b:
ce:ce:6d:27:fc:9f:77:3f:a7:4b:09:4d:3d:49:9e:b9:0c:de:
a8:6a:b2:02:8a:a4:8e:ad:5f:dd:7d:0f:2e:b2:79:53:24:c4:
1c:29:7c:8a:7f:b1:bd:b9:e5:73:2f:c4:79:46:1a:e7:72:2a:
ae:35:8c:f6:db:9c:46:1c:07:2e:22:da:88:65:e3:77:a5:3a:
9d:ca:61:70:4d:40:95:eb:75:c2:14:43:cc:b7:31:01:ff:9b:
31:e3:e2:4f:a1:db:71:f3:b2:5a:4d:5d:c9:56:d8:53:82:08:
dd:1e:a4:1d:d5:c8:00:20:68:c9:6f:07:e3:2a:56:63:4c:9c:
ff:6f:f7:1a:e9:59:c7:41:ed:fb:4e:43:2b:80:6f:89:76:99:
eb:11:7d:fc:e7:51:80:15:0c:68:0b:7b:e2:c9:b4:5f:04:05:
b3:59:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:40 2026 by rpki-client