Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/4vrwiaTButk46FX3SS-Jgoz-2Es.roa
File: 4vrwiaTButk46FX3SS-Jgoz-2Es.roa (raw, json)
Hash identifier: CIEbV7qfb+WAbWcbqsufVTdk5A1WkFuowAVq6zTmgQg=
Subject key identifier: E2:FA:F0:89:A4:C1:BA:D9:38:E8:55:F7:49:2F:89:82:8C:FE:D8:4B
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019EBC4B4B36E54E5ACC4E81DC770B16116C
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/4vrwiaTButk46FX3SS-Jgoz-2Es.roa
Signing time: Fri 12 Jun 2026 14:45:11 +0000
ROA not before: Fri 12 Jun 2026 14:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41952
IP address blocks: 91.149.194.0/24 maxlen: 24
91.149.227.0/24 maxlen: 24
185.228.206.0/24 maxlen: 24
193.32.192.0/24 maxlen: 24
193.32.193.0/24 maxlen: 24
193.32.194.0/24 maxlen: 24
193.32.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:4b:4b:36:e5:4e:5a:cc:4e:81:dc:77:0b:16:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jun 12 14:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2faf089a4c1bad938e855f7492f89828cfed84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:7e:c5:b4:75:a1:c1:b5:90:fa:26:7a:35:
0f:55:2a:65:46:f6:f9:b4:d5:54:a9:46:c9:08:6c:
18:62:24:8a:58:ad:90:0f:c5:03:d3:47:ae:55:ac:
a5:c4:a2:cb:36:1f:d3:49:e4:08:4a:3c:e3:4d:05:
ac:8d:bc:18:e3:d6:92:48:db:3a:04:9e:77:27:53:
f2:17:a7:d8:4d:9c:35:84:e4:09:73:a8:3b:94:b4:
da:e1:b9:e1:b2:84:c4:a1:ef:0b:08:96:95:d6:09:
98:5e:01:82:6e:4d:54:d1:bf:43:21:a2:04:b0:fd:
56:b1:79:62:d0:d7:5c:ff:17:93:28:04:35:48:57:
35:70:48:42:ba:2b:4b:4a:29:9a:9a:95:3e:a9:cc:
45:18:65:2f:36:d5:7f:ac:cf:37:80:47:23:3a:6d:
af:8a:b6:3a:5c:77:6e:e0:e8:d8:13:40:b6:a3:bc:
a5:64:86:3c:08:85:c2:ff:3c:67:05:ff:d3:cd:76:
91:c8:85:f3:d5:e0:a7:78:0c:f5:80:61:c3:05:fa:
d3:e1:f4:cb:39:1c:42:8b:ee:32:12:a3:1e:54:d1:
54:03:9e:9d:24:25:09:b8:f3:04:f8:2d:a1:f6:8e:
a8:bd:c3:9e:0f:fa:65:06:4d:93:11:d2:77:c4:53:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:F0:89:A4:C1:BA:D9:38:E8:55:F7:49:2F:89:82:8C:FE:D8:4B
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/4vrwiaTButk46FX3SS-Jgoz-2Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.194.0/24
91.149.227.0/24
185.228.206.0/24
193.32.192.0/22
Signature Algorithm: sha256WithRSAEncryption
91:47:1a:33:36:57:d6:4e:eb:55:07:87:f6:51:1c:45:3a:a8:
26:3a:6f:c8:aa:2f:8e:71:62:7c:77:fe:9a:52:8a:99:5b:2f:
7c:62:1c:e2:29:df:0b:1a:97:b8:cc:e7:cb:4d:03:e6:5c:eb:
23:5c:e9:a6:07:b7:47:58:32:f1:7a:9c:7e:38:11:8d:eb:64:
1d:20:5a:6e:e0:47:8c:62:5c:3c:18:e9:b4:72:2f:aa:e7:83:
ad:27:01:4a:07:07:b8:74:f3:58:5c:15:65:ac:7a:a8:cf:c4:
52:cd:e7:7c:ae:ff:e1:d6:31:d3:01:b5:47:27:a3:1c:fd:c2:
9b:0a:26:d6:e9:ff:93:37:b9:e7:30:7f:72:96:5b:73:90:f1:
a8:dd:78:11:11:bb:41:3e:89:0b:32:cc:0a:e8:e9:95:50:ac:
61:5d:66:4f:8b:56:1e:f6:df:86:e9:4f:82:33:40:6d:ab:0b:
46:2e:3f:ec:52:cb:95:43:8f:ba:88:e1:20:de:09:90:fc:3a:
8d:b0:21:d5:9d:4f:57:23:1a:fb:c2:50:81:d8:7e:ec:c5:46:
69:28:f0:3e:34:7f:ac:c2:04:42:ee:0e:d4:25:de:18:27:6e:
e3:47:ef:4a:93:31:81:5f:88:61:63:f5:8e:a0:cd:f1:c5:14:
29:55:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:09 2026 by rpki-client