Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4KDzMZ0lkDkjXYe-SrCY9yGDLXc.roa
File: 4KDzMZ0lkDkjXYe-SrCY9yGDLXc.roa (raw, json)
Hash identifier: Fb2sHlsDe7FGoT8knnx86ex85S190han6NaiudJQRL8=
Subject key identifier: E0:A0:F3:31:9D:25:90:39:23:5D:87:BE:4A:B0:98:F7:21:83:2D:77
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 019D8D66D606D68B3B713835891F335B4915
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4KDzMZ0lkDkjXYe-SrCY9yGDLXc.roa
Signing time: Tue 14 Apr 2026 19:10:20 +0000
ROA not before: Tue 14 Apr 2026 19:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213375
IP address blocks: 185.28.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:66:d6:06:d6:8b:3b:71:38:35:89:1f:33:5b:49:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Apr 14 19:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0a0f3319d259039235d87be4ab098f721832d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:7d:ba:6e:66:85:33:d2:5e:31:64:09:bb:
55:c3:37:1e:78:58:6e:e4:11:22:4b:3c:32:bd:8e:
51:da:f3:4d:54:ad:65:67:f5:a7:7a:7e:94:4b:55:
44:a7:00:f4:4b:e3:d8:08:61:b9:f4:19:f2:c0:66:
ff:c3:aa:04:b0:f3:72:a4:30:a1:e9:d2:f1:fa:5d:
be:e2:ab:7b:58:e1:df:9c:6c:44:ed:8a:25:14:7c:
63:c3:61:bc:8e:9d:a0:46:12:cf:25:da:a7:6b:34:
6f:a4:c2:55:9c:a1:ae:58:5c:cb:1c:68:0c:d9:5b:
f0:29:60:18:88:9a:29:33:a7:97:a0:18:fe:d2:81:
27:10:d6:62:80:45:41:be:cb:d0:2f:48:23:f3:ad:
d2:a1:c2:27:c8:91:05:62:3e:c9:e2:4c:7c:a0:b2:
73:7b:a7:e9:b0:cd:02:fb:f3:ae:d2:20:40:44:f1:
63:08:32:b2:1b:cf:3c:c2:f8:f7:08:40:92:3f:df:
df:e7:f3:f1:6f:19:3e:e7:dc:1f:9a:f2:bf:ea:d4:
ee:57:ba:c6:79:5e:9a:c3:34:69:43:8b:7d:54:84:
db:ab:41:34:76:c1:5c:52:82:8d:2c:47:c7:c7:79:
47:02:a1:a5:98:ba:b6:65:f9:ba:16:51:e1:45:a7:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:F3:31:9D:25:90:39:23:5D:87:BE:4A:B0:98:F7:21:83:2D:77
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4KDzMZ0lkDkjXYe-SrCY9yGDLXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.110.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c5:77:2a:82:fe:4b:31:81:c0:09:cd:3e:ea:92:2e:c9:e4:
4d:7d:14:91:8e:dc:b5:0a:f6:8b:5c:c7:7e:6b:a2:f9:28:10:
4a:a1:dd:6e:4a:66:6d:f5:73:6e:ee:47:9b:e4:0c:39:22:8e:
c8:08:04:20:6b:24:c5:29:bf:cf:18:8b:83:ba:1d:bf:dd:22:
4a:41:a6:2d:52:02:4a:0b:31:11:2a:b4:25:69:90:32:97:19:
5b:b8:72:95:91:a9:b9:b0:0d:96:46:44:d4:c9:1e:5c:4f:83:
ad:41:53:68:7d:f1:f8:72:1f:be:9b:1e:4c:9b:2f:fb:f2:ff:
7a:96:e4:c2:5d:59:72:6c:14:a4:94:92:f5:a2:01:13:82:a6:
7e:83:ec:64:fd:2c:ff:90:da:86:1d:90:a0:30:98:61:d5:3e:
50:f5:02:ec:a5:af:80:1d:7e:69:ab:ea:08:49:f0:9b:1f:3a:
8a:17:17:38:a6:11:b9:d7:e7:11:90:11:b9:8e:a8:d3:ef:be:
e6:86:f2:dd:8d:33:c5:27:bf:7a:70:58:96:7b:98:86:3e:be:
95:70:33:25:4a:26:c7:a6:a3:03:b7:19:3e:e2:71:7f:39:bf:
59:54:48:ee:7e:ed:74:df:ae:83:53:5e:b6:4f:60:c1:6b:d9:
41:8d:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:15 2026 by rpki-client