Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4EkHMydJKVt7leHSS5JasbvF4iA.roa
File: 4EkHMydJKVt7leHSS5JasbvF4iA.roa (raw, json)
Hash identifier: aFU8uOxuO4YDXtVhRtaBh88gXAbHhd6LEeYvMAy0bjA=
Subject key identifier: E0:49:07:33:27:49:29:5B:7B:95:E1:D2:4B:92:5A:B1:BB:C5:E2:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C4C3CB6CC7C7D1BE20782190D342707FD
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4EkHMydJKVt7leHSS5JasbvF4iA.roa
Signing time: Wed 11 Feb 2026 10:26:13 +0000
ROA not before: Wed 11 Feb 2026 10:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 5.180.50.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.185.0/24 maxlen: 24
85.209.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:3c:b6:cc:7c:7d:1b:e2:07:82:19:0d:34:27:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 11 10:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e04907332749295b7b95e1d24b925ab1bbc5e220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:d6:1c:c1:da:9c:81:5d:a8:00:00:d1:46:
58:f4:0d:fd:69:80:8a:a1:bd:e8:fc:2d:c5:db:1f:
ef:77:71:22:b2:a1:2b:bc:9b:4e:82:cf:ce:ac:76:
6f:5d:63:1e:c7:99:c8:ea:ae:18:7b:b4:09:3e:06:
30:01:85:96:41:90:23:ef:d9:72:68:18:c8:ef:a2:
33:7b:73:3c:d4:5f:e0:d4:d6:10:cf:70:ab:1d:6a:
d1:a2:67:63:69:bb:b6:1e:ec:72:ff:13:b7:45:94:
d9:c9:d7:16:9d:b6:91:56:7f:e4:0e:da:4c:2d:fc:
66:e5:52:70:f2:dd:4e:79:7a:64:5c:07:e1:0b:93:
20:ea:61:36:49:5c:aa:04:c7:6c:14:97:99:1a:f4:
ad:30:a4:c8:3c:cc:ff:ce:84:03:31:41:d2:74:a0:
ad:6f:21:e1:c1:14:9d:fb:41:d2:34:ae:8c:bf:80:
50:07:85:8d:6c:27:5c:14:2c:81:0d:e6:77:39:c3:
0d:e8:d6:da:66:1c:49:a1:a1:4f:ac:f1:45:6c:98:
89:15:17:4f:53:fd:14:59:9c:48:10:66:1b:f4:12:
61:6f:b9:4d:c3:31:1a:c8:68:33:c8:a7:0e:93:97:
43:84:61:d8:d1:97:45:bd:19:4f:c2:5f:db:99:ff:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:07:33:27:49:29:5B:7B:95:E1:D2:4B:92:5A:B1:BB:C5:E2:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4EkHMydJKVt7leHSS5JasbvF4iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.50.0/24
5.253.39.0/24
45.8.185.0/24
85.209.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a6:ca:16:cb:0d:fc:f7:98:5f:52:00:5e:88:d4:92:8a:62:
b3:9c:28:b7:4b:16:c9:b0:95:cd:07:e3:1b:50:18:ec:8e:f8:
c1:51:f8:bf:9d:05:03:26:f7:32:8c:7b:82:42:4f:40:7f:18:
4d:ae:69:00:c7:1e:fd:7b:50:56:c4:b2:6b:65:01:51:ad:54:
a5:9e:a5:f1:af:f1:2d:ff:69:e6:89:4e:ff:d5:98:53:f3:5b:
8c:23:37:f9:38:98:27:77:01:50:0e:48:44:8c:d8:d8:aa:16:
d7:09:45:f3:de:53:d5:8d:ea:d8:43:3e:09:91:49:fb:fc:76:
82:6d:93:87:92:f6:1f:da:d2:94:07:cf:b5:1a:96:9a:4a:1e:
96:1c:90:30:30:ee:b2:b5:cb:f8:8c:6d:eb:6a:8c:96:e8:97:
69:b0:02:12:20:00:56:16:6d:a6:90:36:c1:4a:9a:cc:a5:54:
8e:0e:a9:48:f0:1a:23:60:88:0e:6a:75:12:0b:bb:de:f4:0c:
ad:db:ac:1a:e2:c0:ce:07:e6:63:42:05:21:b7:a1:a7:ee:81:
8c:13:0b:b4:c6:f3:2c:4c:08:cf:36:26:36:8b:a1:3b:43:15:
46:65:77:91:1f:f2:23:37:9b:cf:31:75:69:a9:05:29:7c:7a:
43:26:02:74
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZxMPLbMfH0b4geCGQ00Jwf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwMjExMTAyNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDQ5MDczMzI3NDkyOTViN2I5NWUxZDI0YjkyNWFiMWJiYzVlMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjWHMHanIFdqAAA0UZY9A39aYCK
ob3o/C3F2x/vd3EisqErvJtOgs/OrHZvXWMex5nI6q4Ye7QJPgYwAYWWQZAj79ly
aBjI76Ize3M81F/g1NYQz3CrHWrRomdjabu2Huxy/xO3RZTZydcWnbaRVn/kDtpM
Lfxm5VJw8t1OeXpkXAfhC5Mg6mE2SVyqBMdsFJeZGvStMKTIPMz/zoQDMUHSdKCt
byHhwRSd+0HSNK6Mv4BQB4WNbCdcFCyBDeZ3OcMN6NbaZhxJoaFPrPFFbJiJFRdP
U/0UWZxIEGYb9BJhb7lNwzEayGgzyKcOk5dDhGHY0ZdFvRlPwl/bmf8nKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOBJBzMnSSlbe5Xh0kuSWrG7xeIgMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvNEVrSE15ZEpLVnQ3bGVIU1M1SmFzYnZGNGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbQyAwQA
Bf0nAwQALQi5AwQAVdGiMA0GCSqGSIb3DQEBCwUAA4IBAQCwpsoWyw3895hfUgBe
iNSSimKznCi3SxbJsJXNB+MbUBjsjvjBUfi/nQUDJvcyjHuCQk9AfxhNrmkAxx79
e1BWxLJrZQFRrVSlnqXxr/Et/2nmiU7/1ZhT81uMIzf5OJgndwFQDkhEjNjYqhbX
CUXz3lPVjerYQz4JkUn7/HaCbZOHkvYf2tKUB8+1GpaaSh6WHJAwMO6ytcv4jG3r
aoyW6JdpsAISIABWFm2mkDbBSprMpVSODqlI8BojYIgOanUSC7ve9Ayt26wa4sDO
B+ZjQgUht6Gn7oGMEwu0xvMsTAjPNiY2i6E7QxVGZXeRH/IjN5vPMXVpqQUpfHpD
JgJ0
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:41 2026 by rpki-client