Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/4vJay7dgDNJKgr3k0OJ6Jaa3yiM.roa
File: 4vJay7dgDNJKgr3k0OJ6Jaa3yiM.roa (raw, json)
Hash identifier: uFB9lllHc00x5yqIkyvaAhoVXEGD+4Tvq12caxqwGYM=
Subject key identifier: E2:F2:5A:CB:B7:60:0C:D2:4A:82:BD:E4:D0:E2:7A:25:A6:B7:CA:23
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A1A1CB7E0827DDF483121B493069E49EF6
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/4vJay7dgDNJKgr3k0OJ6Jaa3yiM.roa
Signing time: Tue 03 Nov 2026 14:23:49 +0000
ROA not before: Tue 03 Nov 2026 14:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 81.188.10.0/24 maxlen: 24
81.188.88.0/24 maxlen: 24
81.188.113.0/24 maxlen: 24
81.188.127.0/24 maxlen: 24
81.188.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:cb:7e:08:27:dd:f4:83:12:1b:49:30:69:e4:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Nov 3 14:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2f25acbb7600cd24a82bde4d0e27a25a6b7ca23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:81:a0:21:51:43:31:85:af:4b:70:01:52:
91:e1:11:ea:ad:c5:7d:7c:a1:f0:f2:76:c8:6f:75:
b8:98:ce:89:5f:3e:96:95:3e:64:9e:7d:47:03:80:
ae:f9:0c:6e:12:5e:b0:fa:f5:8e:fc:c6:0d:37:9f:
83:86:3b:a6:5e:bd:4a:ac:c2:f0:5c:59:61:72:da:
1a:70:78:1c:89:1b:55:fa:40:14:cd:0e:e1:7b:bd:
d3:2f:5c:bf:48:af:20:54:27:5f:11:d2:e2:3c:19:
a4:fd:35:60:1a:73:3e:91:e6:31:17:0e:c6:d4:e1:
5c:49:8e:b0:0c:dc:b3:97:75:59:e5:03:35:03:6b:
5f:25:0c:38:14:81:ea:bf:41:bc:ff:03:7e:0f:0d:
3b:af:98:03:ee:b9:06:ac:4e:dd:31:eb:56:81:93:
42:76:27:1d:b5:f0:2d:e5:bd:5b:60:be:4a:57:e8:
33:4e:78:62:c6:64:01:1a:e4:8c:52:6f:a4:75:dd:
af:c6:b2:19:6f:80:dd:4c:36:7f:b1:f7:f3:5d:24:
f2:ee:fb:b9:53:b3:91:ca:b8:90:5b:1c:42:f4:60:
94:78:4d:59:2a:46:6a:cf:aa:47:d4:86:61:08:b5:
21:94:2a:e4:e5:0f:1c:4f:33:59:71:5b:a6:56:b4:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:5A:CB:B7:60:0C:D2:4A:82:BD:E4:D0:E2:7A:25:A6:B7:CA:23
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/4vJay7dgDNJKgr3k0OJ6Jaa3yiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.10.0/24
81.188.88.0/24
81.188.113.0/24
81.188.127.0/24
81.188.167.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:89:2f:2d:4d:da:f9:f9:f3:34:74:b3:74:4d:e7:56:f7:76:
6c:0d:0e:59:21:09:05:90:d5:56:7e:27:78:05:98:97:6e:3d:
85:98:7b:09:51:af:44:f5:1e:b2:67:11:bc:51:cc:9b:a3:8d:
ad:0a:87:ba:8c:8e:f0:1b:76:88:54:9a:5a:41:0a:9e:97:ff:
da:59:73:3b:82:6b:1d:fd:ad:83:3a:42:51:de:a2:44:3d:c3:
1d:4b:fb:91:13:d3:5a:88:46:da:ac:42:15:a5:ca:cc:ba:97:
c3:89:57:d1:c1:d0:8e:63:b7:a1:1b:2d:67:34:b7:82:ba:ed:
e0:63:82:5f:29:9c:bd:2e:84:53:3e:dd:12:26:db:d2:7b:4f:
e9:aa:d1:64:54:e6:6d:b3:68:1c:a8:63:2d:9f:ac:6d:05:70:
c8:dd:13:17:30:77:88:40:f7:fc:70:74:dd:a0:2c:11:32:5d:
41:78:f8:9e:91:2e:92:0c:10:88:4c:a3:26:ac:24:8a:0e:7e:
78:4d:84:73:a9:26:7f:89:28:66:fa:64:ab:e4:33:68:aa:05:
7a:53:01:e9:97:9c:44:fc:58:06:d1:b5:cc:67:6a:07:a5:cb:
9c:20:c3:41:03:2d:b2:a6:25:0a:bf:5e:d3:cb:a4:3a:97:f0:
52:26:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:35 2026 by rpki-client