Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4t1kYUpF3TTJOy6STdyRAHnA4Jg.roa
File: 4t1kYUpF3TTJOy6STdyRAHnA4Jg.roa (raw, json)
Hash identifier: DJLAmpOTEh6xM9w5VxfLdJ+1bQZXWr/cDyWfmLj3Dpo=
Subject key identifier: E2:DD:64:61:4A:45:DD:34:C9:3B:2E:92:4D:DC:91:00:79:C0:E0:98
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D6CB1719465FDF98A0816704F1DE97483
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4t1kYUpF3TTJOy6STdyRAHnA4Jg.roa
Signing time: Wed 08 Apr 2026 10:44:21 +0000
ROA not before: Wed 08 Apr 2026 10:44:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200506
IP address blocks: 37.202.217.0/24 maxlen: 24
151.245.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:b1:71:94:65:fd:f9:8a:08:16:70:4f:1d:e9:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 10:44:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2dd64614a45dd34c93b2e924ddc910079c0e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:48:27:45:ba:74:67:d2:ec:02:c6:86:2d:
3e:ed:42:ce:22:8e:dc:91:cf:be:18:53:a2:29:9e:
82:69:16:24:97:22:0b:16:b7:ce:62:c5:88:cb:68:
01:83:ac:2a:f9:18:49:d9:8f:09:12:9e:6a:5f:de:
20:d9:eb:5d:ca:d4:f9:cf:2b:73:ee:ea:48:1d:86:
0b:2d:6a:1f:7f:a9:0b:d9:94:cb:57:12:b1:9d:fc:
ad:10:f9:3c:9f:12:a2:1d:ac:68:1a:9f:ee:45:d7:
c7:34:9c:43:45:aa:42:85:76:9a:37:3a:6c:51:b7:
42:20:2a:d1:4e:61:bc:ce:db:76:af:fc:78:10:61:
57:56:62:a6:93:df:f7:16:5d:55:4a:1e:21:d5:93:
63:d7:0e:9a:cd:89:be:ce:9a:7d:79:49:7e:20:d0:
44:94:5c:8d:30:a9:4c:e6:21:12:38:9e:4b:12:5c:
21:f1:51:11:71:73:88:e9:fe:22:6a:df:6b:ae:64:
dd:8a:dd:23:de:36:17:4e:57:7a:e0:f4:06:44:61:
33:f4:82:d2:cf:9c:8d:aa:c3:a0:b3:3b:ca:1d:da:
12:32:78:08:ee:7d:23:08:ab:ef:a7:b9:9d:70:b6:
4d:36:e3:78:7f:e0:9f:7a:c6:ea:ac:c1:db:b0:c8:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:64:61:4A:45:DD:34:C9:3B:2E:92:4D:DC:91:00:79:C0:E0:98
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4t1kYUpF3TTJOy6STdyRAHnA4Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.217.0/24
151.245.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3c:aa:eb:b8:36:ca:0c:dd:5a:0d:37:76:02:f1:ea:5b:a4:
cc:75:f4:e3:25:47:93:53:53:92:30:5b:ca:89:e9:ad:4b:d8:
e9:a7:6f:2e:70:aa:d6:8d:ea:fa:ec:dd:2e:8c:d8:a0:d5:89:
61:d8:88:5b:b6:b6:81:b0:5b:99:49:2f:2f:e5:ff:e3:06:91:
e7:45:b7:41:43:00:6f:51:69:ae:50:15:9e:e7:73:40:62:d4:
e5:10:81:46:56:e5:0e:b4:59:4f:e5:fc:87:41:9b:e9:65:8b:
79:dd:97:56:c8:9a:de:e8:25:4c:c4:c9:e2:c0:9f:e9:fb:c6:
84:02:92:0c:0f:d1:ab:44:1d:4b:5b:03:0d:1d:b0:e4:91:b7:
90:a4:b4:0c:5a:f2:67:3a:e3:63:89:ab:fa:30:be:88:5b:9f:
e6:50:10:59:58:8b:67:28:d6:7a:28:eb:b5:87:de:65:d3:c0:
de:9c:b2:a5:82:db:e0:a3:47:74:a4:32:d8:cb:f3:af:b7:ae:
e4:e5:b8:01:22:6b:59:f8:fa:74:d5:65:d1:05:37:5b:6f:68:
26:00:97:94:26:d4:43:eb:b9:b8:d5:41:cf:61:f0:51:52:e0:
fb:cc:c9:21:f7:9e:2e:e8:b6:15:df:1d:88:6f:f5:25:db:f3:
08:e0:88:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1ssXGUZf35iggWcE8d6XSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDA4MTA0NDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRkNjQ2MTRhNDVkZDM0YzkzYjJlOTI0ZGRjOTEwMDc5YzBlMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09JIJ0W6dGfS7ALGhi0+7ULOIo7c
kc++GFOiKZ6CaRYklyILFrfOYsWIy2gBg6wq+RhJ2Y8JEp5qX94g2etdytT5zytz
7upIHYYLLWoff6kL2ZTLVxKxnfytEPk8nxKiHaxoGp/uRdfHNJxDRapChXaaNzps
UbdCICrRTmG8ztt2r/x4EGFXVmKmk9/3Fl1VSh4h1ZNj1w6azYm+zpp9eUl+INBE
lFyNMKlM5iESOJ5LElwh8VERcXOI6f4iat9rrmTdit0j3jYXTld64PQGRGEz9ILS
z5yNqsOgszvKHdoSMngI7n0jCKvvp7mdcLZNNuN4f+CfesbqrMHbsMjKCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOLdZGFKRd00yTsukk3ckQB5wOCYMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNHQxa1lVcEYzVFRKT3k2U1RkeVJBSG5BNEpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrZAwQA
l/WEMA0GCSqGSIb3DQEBCwUAA4IBAQAbPKrruDbKDN1aDTd2AvHqW6TMdfTjJUeT
U1OSMFvKiemtS9jpp28ucKrWjer67N0ujNig1Ylh2IhbtraBsFuZSS8v5f/jBpHn
RbdBQwBvUWmuUBWe53NAYtTlEIFGVuUOtFlP5fyHQZvpZYt53ZdWyJre6CVMxMni
wJ/p+8aEApIMD9GrRB1LWwMNHbDkkbeQpLQMWvJnOuNjiav6ML6IW5/mUBBZWItn
KNZ6KOu1h95l08DenLKlgtvgo0d0pDLYy/Ovt67k5bgBImtZ+Pp01WXRBTdbb2gm
AJeUJtRD67m41UHPYfBRUuD7zMkh954u6LYV3x2Ib/Ul2/MI4Igw
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:25 2026 by rpki-client