Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4DjthTFuBFBUicM1fyQrr1R-zpA.roa
File: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (raw, json)
Hash identifier: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=
Subject key identifier: E0:38:ED:85:31:6E:04:50:54:89:C3:35:7F:24:2B:AF:54:7E:CE:90
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019D521252DF26E73FC4B688837809221CB6
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4DjthTFuBFBUicM1fyQrr1R-zpA.roa
Signing time: Fri 03 Apr 2026 06:40:25 +0000
ROA not before: Fri 03 Apr 2026 06:40:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21305
IP address blocks: 79.98.48.0/22 maxlen: 22
79.98.48.0/24 maxlen: 24
79.98.49.0/24 maxlen: 24
79.98.50.0/24 maxlen: 24
79.98.51.0/24 maxlen: 24
79.98.53.0/24 maxlen: 24
80.94.224.0/24 maxlen: 24
80.94.225.0/24 maxlen: 24
80.94.226.0/24 maxlen: 24
80.94.227.0/24 maxlen: 24
80.94.228.0/24 maxlen: 24
80.94.229.0/24 maxlen: 24
80.94.230.0/24 maxlen: 24
80.94.231.0/24 maxlen: 24
80.94.232.0/24 maxlen: 24
80.94.233.0/24 maxlen: 24
80.94.236.0/24 maxlen: 24
80.94.237.0/24 maxlen: 24
80.94.238.0/24 maxlen: 24
80.94.239.0/24 maxlen: 24
95.128.64.0/24 maxlen: 24
95.128.67.0/24 maxlen: 24
95.128.69.0/24 maxlen: 24
95.128.70.0/24 maxlen: 24
2a04:9b40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:12:52:df:26:e7:3f:c4:b6:88:83:78:09:22:1c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Apr 3 06:40:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e038ed85316e04505489c3357f242baf547ece90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:2c:22:45:16:0d:94:8d:dd:a5:78:1e:8e:
a2:d4:6d:d0:81:47:02:f2:d0:dd:dd:a8:f8:10:b7:
4a:ef:65:0f:78:e2:a8:5a:78:f5:ad:8b:fb:9e:cc:
90:c6:22:db:c1:30:d6:dd:99:a3:f3:b0:f2:34:aa:
f1:d5:56:b6:fc:5c:d6:80:83:38:0f:bd:e6:a1:e2:
bf:af:4f:a1:b3:69:90:fa:93:68:38:d8:45:3c:f3:
bc:2d:f4:eb:e6:03:4d:ef:22:72:49:31:61:34:b6:
a3:fe:02:68:14:4f:ab:17:ac:d1:18:bf:fe:a9:83:
3b:d6:54:b7:11:88:e4:f8:c6:c9:20:a5:7b:77:af:
aa:51:ea:d7:2d:89:ae:b4:68:d3:f1:e3:c6:b9:17:
44:24:bd:60:c7:68:72:17:f5:9f:7b:35:c9:22:16:
ec:5a:c0:f5:fc:10:7d:d2:fa:ba:06:bd:a7:f7:21:
85:44:e1:ee:8f:f2:2b:87:79:58:44:c4:05:f7:a1:
7b:d7:0d:4c:8a:e5:ab:20:96:93:55:ef:54:6b:a8:
94:4b:c0:8f:a1:55:d1:b0:fa:ef:70:38:2a:8d:39:
e8:7f:5f:4e:2f:17:b2:31:4b:41:6a:ed:f5:5f:d9:
5a:90:27:66:76:4c:3e:75:1e:48:c6:c9:13:16:e2:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:38:ED:85:31:6E:04:50:54:89:C3:35:7F:24:2B:AF:54:7E:CE:90
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4DjthTFuBFBUicM1fyQrr1R-zpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.48.0/22
79.98.53.0/24
80.94.224.0-80.94.233.255
80.94.236.0/22
95.128.64.0/24
95.128.67.0/24
95.128.69.0-95.128.70.255
IPv6:
2a04:9b40::/32
Signature Algorithm: sha256WithRSAEncryption
c0:12:64:e1:5c:0a:cc:a8:af:e9:55:77:0c:e3:0b:3e:7e:25:
dd:bf:44:5b:f8:2c:5b:03:4f:3b:e9:93:e7:a4:61:ab:8d:96:
93:cf:84:c5:22:16:89:65:7c:69:6b:4d:ad:fc:76:32:95:4e:
e3:f5:0d:01:6a:f7:86:dd:5b:b6:3d:aa:d5:d1:35:fc:bf:2d:
c2:3c:e8:32:ae:4b:a4:cd:34:45:60:65:be:ce:7c:17:13:4a:
93:71:db:7a:1b:63:9c:41:fa:c7:5f:a2:f8:5c:86:c0:a6:ef:
ae:f6:66:3a:e3:bd:52:b4:6a:15:2e:9e:7c:c1:93:68:7f:ad:
2e:a8:89:5e:27:4b:b5:c9:3b:d1:9b:86:62:fa:cd:59:12:79:
f3:2c:48:74:a0:c8:fa:69:73:c0:28:f2:da:ac:63:45:d9:d2:
8c:6d:f7:cf:21:29:96:c8:e5:29:71:23:39:e6:12:83:38:21:
f9:41:10:18:10:2f:b9:41:31:04:b8:15:67:93:00:8c:bf:d4:
a5:fb:77:e5:50:65:5c:8a:58:ce:19:71:dd:46:fb:0d:e3:90:
83:b1:c1:76:4c:2c:fa:3b:64:73:ef:21:5a:66:8f:01:5b:fa:
2d:b6:33:76:82:62:05:2f:f4:29:93:47:c5:11:0e:49:1b:d8:
ef:0f:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:42:22 2026 by rpki-client