Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa
File: 4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa (raw, json)
Hash identifier: 6c2di21UkdxCdq2ON9gqALGB3nBwbFRZkNvS0qOjJOA=
Subject key identifier: E0:E7:D4:DA:B7:EA:C1:C9:90:1D:53:02:81:3E:C2:5B:9C:BD:12:C7
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 019D6770F8C5657CFED2FE7CBDEC3169D882
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa
Signing time: Tue 07 Apr 2026 10:15:50 +0000
ROA not before: Tue 07 Apr 2026 10:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38983
IP address blocks: 5.172.216.0/21 maxlen: 24
185.64.192.0/22 maxlen: 24
185.105.200.0/22 maxlen: 22
185.122.152.0/22 maxlen: 22
188.64.48.0/21 maxlen: 21
188.126.96.0/19 maxlen: 24
188.126.108.0/23 maxlen: 23
188.126.112.0/21 maxlen: 22
188.126.124.0/22 maxlen: 22
2a03:8f00::/29 maxlen: 29
2a09:f400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:70:f8:c5:65:7c:fe:d2:fe:7c:bd:ec:31:69:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Apr 7 10:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0e7d4dab7eac1c9901d5302813ec25b9cbd12c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:54:ba:3b:fa:e6:56:52:58:44:0e:30:0e:
af:af:70:a7:ec:be:19:48:b6:89:65:8a:1b:dc:69:
f9:8b:da:9b:85:7d:8f:c3:ba:c4:83:22:1e:fb:93:
2a:f0:05:7f:7e:36:9b:f5:9f:94:da:6a:d7:01:a8:
9b:d5:81:e4:6f:ec:6f:d7:05:36:56:9d:b5:01:aa:
0b:e9:e7:3b:8b:8e:ac:04:7f:00:06:c2:12:3a:19:
36:d7:d5:91:3f:df:44:75:12:93:67:92:97:87:32:
8e:19:b7:fc:d2:3e:c2:c2:c1:da:fc:0c:8c:fc:c9:
ee:09:6e:72:02:54:fa:48:82:86:41:af:82:8f:b6:
28:05:32:7d:76:95:fa:a1:76:da:49:6f:f0:cc:79:
f0:25:cb:ae:49:43:f0:d8:ff:da:42:4f:2c:f8:81:
4f:23:26:26:84:e4:94:7c:f2:fa:04:85:3a:e1:46:
c3:b2:dd:f0:bb:ad:4c:3a:51:24:b8:09:29:12:f1:
15:d3:6a:a8:7e:19:d0:4f:05:f7:56:2d:7f:76:d0:
28:5e:31:90:94:15:f2:de:8c:87:5a:06:9a:fe:ca:
14:c0:18:9a:bd:34:17:cb:1b:e3:c1:96:a2:65:ad:
42:e3:a4:87:0f:d9:9b:f3:16:b6:14:24:82:ca:b9:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E7:D4:DA:B7:EA:C1:C9:90:1D:53:02:81:3E:C2:5B:9C:BD:12:C7
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.216.0/21
185.64.192.0/22
185.105.200.0/22
185.122.152.0/22
188.64.48.0/21
188.126.96.0/19
IPv6:
2a03:8f00::/29
2a09:f400::/29
Signature Algorithm: sha256WithRSAEncryption
76:91:83:29:af:0f:fe:d7:07:d1:05:70:9f:52:3c:b7:12:48:
9c:fc:f0:c1:09:cc:f8:53:52:61:88:29:74:77:4c:8f:33:c2:
3f:4e:53:85:be:11:97:2f:8b:70:ea:cd:01:47:fc:44:fe:1d:
2e:d8:a5:73:e9:07:a8:26:b5:d7:48:bd:0a:62:8b:49:50:cb:
75:2e:d5:d2:d2:df:00:e9:a6:5d:d9:43:fc:b6:11:b2:fc:41:
78:6b:7f:fa:2b:d1:5a:a3:5d:38:d0:89:fb:a2:3f:45:86:28:
af:00:08:26:4e:c2:1e:c7:7b:7c:54:46:fb:09:7e:c1:3d:dc:
c3:88:8b:85:85:db:d9:43:9a:3a:06:b4:c8:1f:04:2f:9a:cd:
c1:31:b9:a6:df:62:e2:97:a3:19:40:f0:54:e5:6e:81:cc:8e:
a4:d5:04:f3:7a:9b:67:84:74:98:40:4b:1b:1d:48:9e:27:ee:
4b:1a:1a:d6:d1:13:bb:11:f4:1b:6c:60:44:85:c8:3f:8f:54:
21:61:28:9a:a5:ee:3c:c3:8e:a4:91:c9:d4:2d:02:01:15:4b:
7e:88:fd:98:45:bb:bd:0e:b4:83:62:33:6f:07:84:6e:88:49:
17:fa:a4:33:cb:2c:ef:d4:5b:55:08:48:8d:60:23:72:a8:4e:
ba:20:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:21 2026 by rpki-client