Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4JMONQfhbl6xFWceB3NRoKpJOyg.roa
File: 4JMONQfhbl6xFWceB3NRoKpJOyg.roa (raw, json)
Hash identifier: NliXdCHPUPIApsuoOCbkrrZBm8stOlDyXnl9mpkmXJw=
Subject key identifier: E0:93:0E:35:07:E1:6E:5E:B1:15:67:1E:07:73:51:A0:AA:49:3B:28
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C9F58DE1EFA1C5D587B671AEC7DEAD15B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4JMONQfhbl6xFWceB3NRoKpJOyg.roa
Signing time: Fri 27 Feb 2026 13:45:27 +0000
ROA not before: Fri 27 Feb 2026 13:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.102.237.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.125.126.0/24 maxlen: 24
89.125.171.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
103.245.228.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.152.0/22 maxlen: 22
206.245.158.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:58:de:1e:fa:1c:5d:58:7b:67:1a:ec:7d:ea:d1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 27 13:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0930e3507e16e5eb115671e077351a0aa493b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:e7:24:ce:7f:47:bb:7b:35:0d:d7:2a:3e:
5f:5c:09:17:18:fe:96:98:05:40:e9:a8:45:9e:3f:
b0:22:06:56:28:26:6f:82:09:23:a1:34:67:07:c5:
47:1f:d2:45:13:3a:6c:b0:81:f5:d4:a5:03:cc:44:
a1:75:49:8b:1f:8a:40:74:51:e3:76:e7:85:0b:34:
a1:75:29:e5:df:b8:24:c4:49:4f:4b:93:52:71:10:
d0:75:42:fb:32:bc:44:bc:bd:10:63:98:43:6e:54:
a0:09:3a:d0:0a:e1:ca:15:9f:ab:31:b9:de:f5:02:
72:ef:d7:72:d9:29:1a:e4:ab:a3:51:31:6d:37:fb:
e5:5b:b3:d7:5d:81:d8:4a:d5:a8:19:b0:0c:cb:86:
d6:f3:93:00:ae:ff:c9:7c:d1:cb:1e:1b:f2:98:fd:
80:1e:0b:b5:82:0f:84:de:3b:be:c2:7d:e8:23:41:
ef:aa:19:55:56:d0:54:25:b1:b9:e5:0e:10:7c:44:
68:87:1d:00:d9:1c:36:19:7a:8f:f8:5a:a3:4f:86:
bb:a9:04:12:5f:4f:71:4d:b6:2b:e0:fc:ff:46:4c:
62:94:5d:8c:db:a2:6f:fa:4c:64:a5:5c:e7:57:f6:
1a:de:6c:e1:d9:c3:a9:e0:41:93:a2:a4:36:1e:0e:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:0E:35:07:E1:6E:5E:B1:15:67:1E:07:73:51:A0:AA:49:3B:28
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4JMONQfhbl6xFWceB3NRoKpJOyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
89.34.106.0/24
89.125.126.0/24
89.125.171.0/24
91.132.50.0/24
93.114.183.0/24
103.245.228.0/24
167.17.191.0/24
194.58.47.0/24
206.245.152.0/22
206.245.158.0/24
212.192.7.0-212.192.8.255
212.192.10.0/24
212.192.30.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d1:65:82:d7:a3:0e:67:75:91:0b:9d:53:b0:7d:ca:1c:f4:
88:c3:93:a8:cb:3e:29:b0:82:6d:af:cd:ac:aa:11:d5:1a:c2:
55:c7:c9:ae:4f:b3:36:02:58:19:04:42:55:d5:d4:a3:80:df:
4a:3a:fe:31:e3:a1:20:37:2b:47:ae:c8:81:00:cb:44:08:6c:
ba:84:d2:79:4c:2c:fb:09:6c:a8:2c:f9:41:1b:b2:0a:89:e4:
19:08:e3:36:36:9f:40:c9:95:e4:9c:23:c8:37:5d:76:f6:89:
22:ff:81:a4:6f:4f:bc:12:a7:61:99:5f:77:59:af:f9:4c:86:
9f:47:47:ea:14:32:e5:3d:9e:ce:c3:5e:ec:1d:91:99:f1:b7:
62:6b:6a:04:f5:04:9d:80:09:22:98:b4:99:36:e2:c2:68:41:
23:e1:d1:1d:ea:89:6c:20:67:d5:af:e5:9f:a3:11:6b:5d:7e:
0d:29:86:51:ef:ce:19:84:2e:e2:82:c0:b5:e5:1a:c4:61:81:
50:88:03:86:48:1b:8c:13:a5:29:45:72:11:c2:57:c9:e2:6f:
fb:0d:4f:86:5b:09:cf:79:4d:65:20:4f:3d:5c:24:73:ee:e0:
cb:0c:da:f8:2a:57:5a:02:69:c6:d0:35:b1:d4:76:da:28:b3:
ca:84:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:15 2026 by rpki-client