Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4c6KH4m5JyBANb9oOy99vsDIdpM.roa
File: 4c6KH4m5JyBANb9oOy99vsDIdpM.roa (raw, json)
Hash identifier: Vau4v3YfR5YHaHhHOoSzdszkBq78658OuV6gr/q3rxE=
Subject key identifier: E1:CE:8A:1F:89:B9:27:20:40:35:BF:68:3B:2F:7D:BE:C0:C8:76:93
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019FA4374A8E22B00D181549D16FC0445F78
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4c6KH4m5JyBANb9oOy99vsDIdpM.roa
Signing time: Mon 27 Jul 2026 15:35:14 +0000
ROA not before: Mon 27 Jul 2026 15:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272378
IP address blocks: 94.125.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:37:4a:8e:22:b0:0d:18:15:49:d1:6f:c0:44:5f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 27 15:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1ce8a1f89b927204035bf683b2f7dbec0c87693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:fe:cc:d2:f0:ba:c8:a4:b8:c4:43:bd:b9:
d1:8e:31:05:2a:e4:3a:14:26:6f:5a:36:f0:61:c1:
46:b0:6a:3c:c8:79:51:03:e5:22:32:46:fc:8f:d8:
4b:13:92:82:2b:bb:d4:94:79:c8:14:a5:7b:f6:0f:
34:b6:0a:f9:f2:b7:c6:e4:7e:02:76:2b:ac:f1:aa:
c7:20:3a:5b:4d:92:ed:c3:fb:5b:1e:2a:d6:0d:4f:
84:24:16:e4:3c:25:90:80:1d:fb:3c:a2:a2:5c:1c:
86:5e:e6:62:6b:8b:61:ac:39:d7:44:8e:ac:c8:24:
92:10:33:31:9b:af:4a:a2:ff:00:4c:f6:20:fd:15:
50:5b:4b:a8:7c:de:9e:ed:48:a5:c4:87:60:3a:da:
ee:b2:74:98:47:df:99:59:fe:1c:57:b2:cd:19:7e:
a2:32:b4:57:42:2a:bd:02:09:49:3f:5e:10:61:f6:
a9:b9:6c:c6:91:04:c3:96:82:b9:2e:4c:1d:47:a1:
ea:7f:a3:b5:8b:0f:81:49:6f:40:45:7d:f0:bd:ac:
d9:24:c3:d3:df:db:ba:6e:78:cf:97:59:18:7c:5f:
3a:f8:cc:a3:42:6d:34:f1:b2:8e:c9:3d:ba:36:65:
ec:76:2b:c9:81:f5:a5:5a:b9:91:16:cd:40:d2:84:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:8A:1F:89:B9:27:20:40:35:BF:68:3B:2F:7D:BE:C0:C8:76:93
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/4c6KH4m5JyBANb9oOy99vsDIdpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:a7:b3:fc:1f:2b:b6:4d:bd:a2:d2:57:6c:67:e0:41:77:
4b:3a:54:d3:3a:6e:de:67:0d:f9:5e:04:71:cf:23:8b:da:0a:
e1:3a:dd:16:ed:32:56:e9:8e:ca:26:f8:ff:95:9f:8e:7f:53:
fd:9f:ea:71:84:3b:1d:c5:b1:f6:05:92:c7:57:04:93:4e:67:
ff:bf:b1:0f:25:7c:6d:99:66:77:75:de:e3:b2:39:ce:c0:c4:
07:ff:65:22:5e:74:80:02:65:b0:34:9b:97:72:ed:f8:39:4a:
73:54:a0:71:c3:e0:74:a8:0f:24:83:78:f0:73:6d:00:83:9e:
fe:9e:b6:0f:8a:60:7a:49:18:06:45:83:1c:3f:5c:6d:09:dc:
91:21:08:86:43:94:b5:85:4c:3b:9f:5f:0b:b4:9b:7a:c1:1e:
fa:8a:8d:9f:bb:93:51:2d:f6:a4:3a:e1:4e:fb:61:b6:d3:e2:
2a:ca:fe:54:e1:aa:4e:18:6b:30:b3:fd:17:71:76:8d:24:5c:
e9:f5:ed:17:62:ce:ba:a6:46:04:e9:f4:6d:a1:c7:4c:c6:d2:
e7:63:c9:65:69:9f:20:7c:9f:3b:12:9a:6d:b6:e1:48:3a:30:
d5:3a:1f:08:41:d7:d0:e5:59:61:61:20:bb:4b:3d:4a:34:5a:
84:e7:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:53 2026 by rpki-client