Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/4-70XZL_LoLYwCdfws1cTL2SnVk.roa
File: 4-70XZL_LoLYwCdfws1cTL2SnVk.roa (raw, json)
Hash identifier: E/rkxdhnUNVw1rmGpTXdl2JJv9S4hDWoZIecolBNcc4=
Subject key identifier: E3:EE:F4:5D:92:FF:2E:82:D8:C0:27:5F:C2:CD:5C:4C:BD:92:9D:59
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 019C609524A76C25837FCAF07BAE27D9D040
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/4-70XZL_LoLYwCdfws1cTL2SnVk.roa
Signing time: Sun 15 Feb 2026 09:15:12 +0000
ROA not before: Sun 15 Feb 2026 09:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214151
IP address blocks: 192.166.38.0/24 maxlen: 24
2001:3f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:95:24:a7:6c:25:83:7f:ca:f0:7b:ae:27:d9:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: Feb 15 09:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3eef45d92ff2e82d8c0275fc2cd5c4cbd929d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:44:ca:36:ee:12:85:7f:48:67:4e:6b:e8:
b7:8a:91:3f:f1:73:91:44:6a:e0:bb:50:da:9a:64:
0e:1d:d8:67:67:5d:08:74:3d:b0:16:36:af:0a:b2:
7f:08:8c:94:1a:ae:1e:e0:8d:58:e3:ca:80:37:21:
65:0c:59:fb:fa:e8:60:a6:7b:10:e3:00:fb:75:0e:
ef:cd:3b:c5:bc:27:6c:93:c0:c7:b8:20:f9:f4:7b:
e6:b6:7c:88:36:0a:1d:44:d9:10:ea:8d:3c:d3:b4:
64:b9:06:67:eb:2d:c2:92:95:e5:d2:2b:98:36:63:
8e:06:6f:7d:65:07:d2:00:15:26:86:c1:80:15:f1:
52:43:d7:1f:7a:c6:1b:fa:15:77:9d:5e:4a:1a:72:
a9:ca:06:b8:36:8d:ca:9a:37:d5:de:14:07:7c:0c:
42:23:2a:93:b3:87:6b:4f:e8:53:b5:35:da:8d:d5:
db:4d:1a:bc:2d:d5:f5:39:2c:c7:9b:0c:43:4d:4f:
0a:17:31:52:d9:56:44:06:bd:96:cc:33:2e:a3:cd:
16:fd:71:1c:54:f3:3a:ea:46:d7:fb:a6:11:b5:ed:
39:5a:48:57:78:04:c3:cc:c6:7f:db:60:01:59:57:
fa:5c:38:d0:7b:39:44:72:7a:ed:d1:a4:c9:59:dc:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EE:F4:5D:92:FF:2E:82:D8:C0:27:5F:C2:CD:5C:4C:BD:92:9D:59
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/4-70XZL_LoLYwCdfws1cTL2SnVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.38.0/24
IPv6:
2001:3f40::/29
Signature Algorithm: sha256WithRSAEncryption
80:31:1b:6f:56:58:02:51:2d:20:16:d9:0d:ae:d4:1e:21:ac:
78:5b:94:39:57:45:cd:3b:a2:a0:3b:2f:ca:ef:0c:e3:9e:d2:
18:91:d8:c6:79:90:0b:68:4f:c0:7b:7f:fa:66:92:e8:f3:60:
29:27:03:fd:0e:c3:77:d7:25:a3:eb:0a:e9:b5:ce:90:88:c1:
b1:84:f1:90:01:05:22:9c:c3:c7:1c:d8:01:f8:6d:5f:91:41:
17:92:14:6c:a0:16:40:38:b0:d1:84:77:4c:bd:f7:ac:43:4c:
87:d0:e4:ed:5d:23:fa:3d:54:ad:13:84:ef:28:da:e0:75:3a:
45:22:0c:1a:47:df:31:a1:5c:cc:c0:d1:0c:d0:61:eb:56:54:
a9:47:c2:d4:29:db:03:0e:20:09:f5:b9:6a:c7:fd:a9:ab:ce:
e5:bb:40:36:95:60:24:86:45:40:8d:e7:e5:fd:8f:95:97:9e:
5a:5a:82:8d:19:9a:0d:c8:36:ff:73:c3:91:4d:8e:c0:7d:fa:
72:ed:ec:9c:f0:88:9c:6d:93:c9:a5:fd:4e:d4:f8:97:4e:36:
b4:8c:3a:b1:b4:74:cd:56:d2:68:49:f9:56:9d:6d:30:09:e5:
fc:b0:13:eb:c1:d9:c8:92:00:42:06:52:81:6a:cd:aa:bd:4f:
19:ca:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:10 2026 by rpki-client