Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa
File: 4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa (raw, json)
Hash identifier: l+G/CcJNCFJU4d+SNUaOc2KOUJVWckb0n4DNmMjMMz4=
Subject key identifier: E0:7A:2B:BD:29:7A:CC:42:78:1C:2E:62:7E:47:CA:E7:19:CD:9A:C1
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 019B78351CEEE99763A4862C5C277102C4B1
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa
Signing time: Thu 01 Jan 2026 06:18:25 +0000
ROA not before: Thu 01 Jan 2026 06:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39832
IP address blocks: 37.228.104.0/21 maxlen: 24
82.145.208.0/20 maxlen: 24
91.203.96.0/22 maxlen: 24
141.0.8.0/21 maxlen: 24
185.26.180.0/22 maxlen: 24
195.189.142.0/23 maxlen: 24
2001:4c28::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:1c:ee:e9:97:63:a4:86:2c:5c:27:71:02:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jan 1 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e07a2bbd297acc42781c2e627e47cae719cd9ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:af:5c:86:97:96:dd:50:bc:ac:52:cc:e8:
b9:61:53:97:10:c3:b7:ef:53:96:f0:bd:a2:c2:b0:
af:54:e0:2d:ff:13:61:29:04:36:12:fc:e8:38:4a:
75:a8:3d:e7:7c:bb:75:cb:2f:e2:47:f0:06:d9:87:
91:9c:53:0b:df:e2:8c:6e:33:2c:09:ae:bb:4a:d2:
5d:48:57:04:73:f4:26:71:f0:66:8f:ba:8e:d4:ca:
32:46:07:c4:4f:ec:1d:89:d9:24:6b:cb:02:13:4a:
53:27:ab:74:69:1e:86:c1:34:e5:ab:de:95:1f:8b:
e5:ab:bc:60:83:4a:39:b8:00:6b:a1:57:f5:cb:ef:
ce:4d:94:d2:4d:9b:95:d2:6f:a2:1d:fe:b8:6c:2f:
c2:21:b8:5c:7c:63:bc:41:a1:97:e4:e0:8e:27:f9:
fc:ed:45:09:0f:80:53:cc:db:67:81:64:a0:18:1d:
4a:ca:25:25:aa:c3:84:1d:f6:a2:1c:70:fd:77:09:
82:6b:47:72:44:ef:71:6c:ed:15:fa:2e:06:2c:4b:
2f:24:22:9f:8e:ae:1d:03:c4:26:1b:21:40:ef:d6:
de:0a:77:b7:00:9d:68:c7:aa:90:bf:bd:4c:73:17:
6f:39:e0:50:f5:0e:1d:38:f3:22:9b:a9:69:ff:29:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:2B:BD:29:7A:CC:42:78:1C:2E:62:7E:47:CA:E7:19:CD:9A:C1
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.104.0/21
82.145.208.0/20
91.203.96.0/22
141.0.8.0/21
185.26.180.0/22
195.189.142.0/23
IPv6:
2001:4c28::/32
Signature Algorithm: sha256WithRSAEncryption
44:fa:a8:eb:e4:24:3e:40:9f:57:ab:c5:d2:b8:ad:ed:de:ac:
cf:4b:15:07:bb:00:29:43:26:3d:d8:b7:de:78:22:f8:20:94:
b3:1e:c0:39:42:ca:ae:82:a3:e2:83:de:ef:4a:83:64:c4:b0:
f2:ad:f4:e8:1f:3c:dc:dd:65:df:28:29:3a:56:c8:b0:c6:d4:
38:72:cb:e5:77:78:8b:12:da:32:c9:15:9a:d3:94:f1:d9:8d:
43:a8:cb:85:31:d3:ab:87:55:97:cd:bb:88:80:f8:60:04:88:
42:3c:74:87:d2:33:02:ea:14:4e:39:d1:98:1b:5d:77:da:10:
c6:d9:56:12:d3:bd:68:9c:88:a2:d5:a1:47:ba:3c:81:f9:48:
18:67:d6:c0:00:3f:7d:a3:1f:f1:c4:67:01:7c:75:8b:b7:da:
f9:34:6f:2f:89:60:7a:43:0a:c1:d2:ee:fb:f4:15:01:1a:30:
82:4b:db:f8:ea:07:bc:cf:44:f5:d6:b1:96:92:7f:30:f9:94:
8a:c6:0c:6e:9d:d0:0e:2f:1e:92:51:19:76:2e:c4:26:6f:63:
83:c8:9d:6a:27:45:e2:ef:bd:41:c8:c4:e4:c9:a4:82:11:38:
b7:f5:b7:03:a9:a8:6a:ea:03:f6:20:68:d7:95:b0:1e:97:a2:
6d:67:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:40 2026 by rpki-client