Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4KVt51QAn_PTT4ieM9NJHGud-R0.roa
File: 4KVt51QAn_PTT4ieM9NJHGud-R0.roa (raw, json)
Hash identifier: 81QC74KBS9U0d3rEgdSdnN+aTkDPdqtWfuLVhzUYNCA=
Subject key identifier: E0:A5:6D:E7:54:00:9F:F3:D3:4F:88:9E:33:D3:49:1C:6B:9D:F9:1D
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A0C45F2F9CE62C4AFC8051FBC04588F529
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4KVt51QAn_PTT4ieM9NJHGud-R0.roa
Signing time: Mon 21 Sep 2026 14:29:27 +0000
ROA not before: Mon 21 Sep 2026 14:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1653
IP address blocks: 145.98.16.0/24 maxlen: 24
2001:678:1334::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:5f:2f:9c:e6:2c:4a:fc:80:51:fb:c0:45:88:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 21 14:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0a56de754009ff3d34f889e33d3491c6b9df91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:98:12:48:c0:66:aa:96:5a:05:19:93:e1:
87:a2:b0:45:44:40:5a:31:92:46:7f:a7:0d:f0:29:
92:1a:2d:3c:40:33:3d:1c:71:e3:de:f8:59:17:65:
ed:af:5b:73:e3:fe:8f:04:8d:0e:2c:17:76:77:2e:
ef:8c:ba:9b:c1:6c:c0:37:40:6a:06:3c:dc:40:f5:
19:5f:09:d5:05:a9:77:4b:64:60:78:f7:19:3f:11:
99:ce:1e:c4:6b:28:6f:00:83:b3:f6:d2:70:34:f1:
68:48:0f:e1:10:72:4b:fb:93:b5:ee:6d:5b:66:de:
d7:fa:6a:7c:3c:42:32:b6:fe:39:fd:c5:b2:65:0c:
94:bb:e5:39:66:ba:e9:0c:e9:28:4a:a8:35:43:e0:
67:8d:71:5a:67:86:5d:22:57:41:89:c4:23:40:e1:
0e:2a:5c:35:45:a3:76:30:be:11:22:f9:aa:dc:57:
70:3b:23:c1:fa:71:ff:98:c1:27:d6:de:78:f7:ae:
76:6c:4f:72:41:e7:98:55:0d:f5:8b:f0:f4:08:1c:
02:14:7a:97:76:83:a5:98:1e:ac:2c:b1:09:59:00:
87:b1:f8:f4:34:c2:84:aa:5a:72:b3:7d:da:02:d8:
3a:cf:73:20:f4:0f:bc:7c:89:c8:e3:3a:a6:65:4d:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A5:6D:E7:54:00:9F:F3:D3:4F:88:9E:33:D3:49:1C:6B:9D:F9:1D
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/4KVt51QAn_PTT4ieM9NJHGud-R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.98.16.0/24
IPv6:
2001:678:1334::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a3:60:f5:24:e2:86:dd:b7:20:b5:27:e9:18:bb:f0:78:1e:
4b:c1:00:d4:4a:82:4e:5a:ae:9b:e2:30:5d:26:9a:74:f4:a9:
fb:52:20:a0:98:f6:ce:ec:63:68:81:d6:c3:77:e2:50:09:31:
22:24:18:f4:af:ae:fb:98:68:99:c4:75:41:00:ce:78:be:41:
e3:03:54:44:3d:30:aa:77:00:53:fe:af:5c:0a:91:ef:85:28:
9c:b7:b8:34:ba:24:82:53:7d:ed:99:67:3e:bf:ce:46:c7:07:
87:d2:33:4f:55:17:66:6e:f0:17:a2:f2:a3:9b:81:44:4e:f0:
da:7b:31:35:22:64:57:e7:45:2a:3f:8d:65:17:45:f9:9b:eb:
b9:eb:c2:24:c0:3e:21:0e:1e:1d:f2:d5:81:6c:74:cc:a7:89:
d7:8c:a1:bf:3a:18:43:18:c7:3b:73:51:28:d9:e2:50:e6:69:
20:d9:02:78:34:f1:3d:cf:5c:ff:98:0e:23:b8:32:d2:0f:c6:
9c:d2:23:08:1d:0e:ec:4b:80:fb:37:0a:ef:8d:cf:22:a1:da:
6e:25:26:94:f5:49:bf:62:00:ed:0b:bd:40:12:4a:fe:4b:f6:
b0:f7:a1:17:1d:1f:bd:8f:d4:26:31:e4:05:8d:d7:44:83:6a:
20:74:f5:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaDEXy+c5ixK/IBR+8BFiPUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwOTIxMTQyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGE1NmRlNzU0MDA5ZmYzZDM0Zjg4OWUzM2QzNDkxYzZiOWRmOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6mYEkjAZqqWWgUZk+GHorBFREBa
MZJGf6cN8CmSGi08QDM9HHHj3vhZF2Xtr1tz4/6PBI0OLBd2dy7vjLqbwWzAN0Bq
BjzcQPUZXwnVBal3S2RgePcZPxGZzh7EayhvAIOz9tJwNPFoSA/hEHJL+5O17m1b
Zt7X+mp8PEIytv45/cWyZQyUu+U5ZrrpDOkoSqg1Q+BnjXFaZ4ZdIldBicQjQOEO
Klw1RaN2ML4RIvmq3FdwOyPB+nH/mMEn1t549652bE9yQeeYVQ31i/D0CBwCFHqX
doOlmB6sLLEJWQCHsfj0NMKEqlpys33aAtg6z3Mg9A+8fInI4zqmZU391wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOClbedUAJ/z00+InjPTSRxrnfkdMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvNEtWdDUxUUFuX1BUVDRpZU05TkpIR3VkLVIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAkWIQMA8E
AgACMAkDBwAgAQZ4EzQwDQYJKoZIhvcNAQELBQADggEBADqjYPUk4obdtyC1J+kY
u/B4HkvBANRKgk5arpviMF0mmnT0qftSIKCY9s7sY2iB1sN34lAJMSIkGPSvrvuY
aJnEdUEAzni+QeMDVEQ9MKp3AFP+r1wKke+FKJy3uDS6JIJTfe2ZZz6/zkbHB4fS
M09VF2Zu8Bei8qObgURO8Np7MTUiZFfnRSo/jWUXRfmb67nrwiTAPiEOHh3y1YFs
dMynideMob86GEMYxztzUSjZ4lDmaSDZAng08T3PXP+YDiO4MtIPxpzSIwgdDuxL
gPs3Cu+NzyKh2m4lJpT1Sb9iAO0LvUASSv5L9rD3oRcdH72P1CYx5AWN10SDaiB0
9U8=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:23:47 2026 by rpki-client