Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/4ru4Rw2txaIV51D8_pSqZuKGezE.roa
File: 4ru4Rw2txaIV51D8_pSqZuKGezE.roa (raw, json)
Hash identifier: S73LDBTkpEByiDJsnnoFy/R1ly95bTgnpkyfbp4IRdU=
Subject key identifier: E2:BB:B8:47:0D:AD:C5:A2:15:E7:50:FC:FE:94:AA:66:E2:86:7B:31
Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Certificate serial: 019C99EC0151215166F4B205B373114A6E1B
Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/4ru4Rw2txaIV51D8_pSqZuKGezE.roa
Signing time: Thu 26 Feb 2026 12:28:26 +0000
ROA not before: Thu 26 Feb 2026 12:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197991
IP address blocks: 185.239.56.0/22 maxlen: 24
2a0c:4b80::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:ec:01:51:21:51:66:f4:b2:05:b3:73:11:4a:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910
Validity
Not Before: Feb 26 12:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2bbb8470dadc5a215e750fcfe94aa66e2867b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:dc:f0:12:cc:ff:8e:86:34:96:f5:2b:b4:1f:
45:77:a8:c7:77:fd:07:af:17:64:ab:93:d1:b6:f1:
5e:ee:86:87:fb:cd:c7:75:20:76:b8:cd:c4:0d:4d:
a7:b2:6f:c7:d2:42:47:08:a3:de:58:bf:72:f4:10:
e0:47:85:55:77:6e:d3:ff:50:e4:63:20:d3:fa:10:
43:a3:fc:96:3f:e3:61:35:bd:b4:09:97:0a:3a:e2:
85:aa:02:1e:83:dd:d6:69:31:50:b2:d5:8f:73:5c:
9d:e7:93:73:ff:28:bc:b0:91:37:6a:23:99:f9:8f:
8e:1e:73:60:2b:61:6d:08:59:63:5c:31:2b:b8:74:
4f:8b:43:db:c9:b8:47:dd:07:26:e5:40:e6:3e:13:
af:1e:a4:14:de:fa:94:07:35:f7:60:36:35:5d:22:
35:bc:46:0c:1c:74:e5:de:31:86:82:51:64:93:c2:
5e:3c:f0:d5:e9:96:eb:f9:f8:38:2b:0e:98:ef:9d:
b8:22:3c:74:3c:59:14:88:43:79:c8:06:cb:a6:2e:
3d:50:2e:ae:7b:e2:a8:04:1c:27:96:70:4d:1a:ec:
31:f2:e9:78:fe:3c:40:1a:b1:92:aa:cd:1c:9b:fc:
77:f6:68:7b:2a:d6:e7:59:8a:6e:2b:7c:42:df:67:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:B8:47:0D:AD:C5:A2:15:E7:50:FC:FE:94:AA:66:E2:86:7B:31
X509v3 Authority Key Identifier:
keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/4ru4Rw2txaIV51D8_pSqZuKGezE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.56.0/22
IPv6:
2a0c:4b80::/34
Signature Algorithm: sha256WithRSAEncryption
60:b7:f2:95:6e:8d:be:ca:f5:b1:b6:e2:da:4d:c2:8a:ce:e1:
9c:21:bb:f3:74:3a:58:56:bc:bf:bc:d8:5b:92:f3:3a:ad:9e:
c6:a0:d7:c6:1f:04:04:31:b5:02:b1:4c:5f:53:17:9e:b1:31:
ac:42:90:d8:d5:42:ba:8c:5f:a2:a5:e2:63:c0:c9:ae:94:7c:
ff:16:e9:54:85:38:42:22:27:47:88:c9:14:88:ca:c9:3f:e1:
be:af:66:78:9f:ca:52:60:e0:41:2e:16:e0:de:d9:47:b3:45:
9f:76:64:ae:ba:46:ed:9e:31:dd:29:96:7e:a7:38:d4:5a:23:
e5:05:86:c5:77:b4:d4:88:df:19:42:63:24:90:1c:0b:d1:5c:
4e:28:37:e8:dd:00:49:04:2f:06:76:1b:f0:db:12:4f:69:6e:
2b:30:29:af:6a:77:e8:17:8d:1c:6a:d3:d4:48:1d:28:97:85:
55:12:08:46:2f:0f:5a:0f:a8:6d:13:3b:46:d9:be:02:43:7a:
de:e7:da:88:3c:6a:65:55:eb:6c:5d:2e:f6:28:fd:9a:4c:aa:
ca:6f:83:71:bf:29:b6:16:62:db:87:b2:3d:af:f6:bd:6c:15:
75:f1:0f:06:e5:bc:8f:9b:e7:91:b4:cc:00:d3:f4:3d:c2:2b:
6b:5f:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:19 2026 by rpki-client