Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4EEj2r6-0zg77-9LmRLFaGfhLMY.roa
File: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (raw, json)
Hash identifier: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=
Subject key identifier: E0:41:23:DA:BE:BE:D3:38:3B:EF:EF:4B:99:12:C5:68:67:E1:2C:C6
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0BF330596BBCD59438CA1EF9D0316EFEA
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4EEj2r6-0zg77-9LmRLFaGfhLMY.roa
Signing time: Sun 20 Sep 2026 14:23:07 +0000
ROA not before: Sun 20 Sep 2026 14:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51248
IP address blocks: 153.52.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:33:05:96:bb:cd:59:43:8c:a1:ef:9d:03:16:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 20 14:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e04123dabebed3383befef4b9912c56867e12cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:23:fd:ce:82:02:ed:61:c4:5f:27:1c:c4:
40:54:fb:63:a2:8d:0c:ab:a9:8c:3a:2a:e0:07:fc:
25:71:0c:a7:ab:51:70:a3:9a:2f:7e:29:bb:21:a2:
86:c1:fa:b9:3b:ab:4f:62:b0:32:87:1a:fa:ea:32:
1f:1e:a2:28:cb:44:4f:65:bd:e2:f8:52:cc:87:39:
bb:d4:13:4d:90:a3:da:65:74:b7:b7:47:9c:75:72:
af:49:89:92:a5:c9:12:54:a7:ac:37:de:df:00:58:
7e:6f:c4:59:d8:73:fd:40:3c:77:fd:b8:81:fb:90:
c6:8e:f8:73:a9:19:a5:a3:61:b1:70:cc:19:b8:b4:
3a:fc:79:8e:47:22:de:61:1c:1d:47:70:cc:f0:6b:
ab:f8:2f:80:97:dc:10:4d:56:ca:6d:cf:48:1c:27:
73:e5:bb:12:1e:03:ab:20:27:e9:6a:db:cf:89:a7:
3e:2c:68:f9:b5:d3:06:e0:cd:26:b0:d5:df:65:55:
66:cc:68:a9:3b:05:9c:f7:c1:78:0e:d8:53:6e:f7:
7a:70:f9:9d:b1:20:64:18:19:09:2c:ab:ba:27:9c:
bd:21:4b:0d:bb:94:63:7d:07:8b:b0:66:e2:5e:03:
78:6d:61:7a:dd:c8:f5:b6:0f:8f:16:d1:1b:6f:0a:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:23:DA:BE:BE:D3:38:3B:EF:EF:4B:99:12:C5:68:67:E1:2C:C6
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/4EEj2r6-0zg77-9LmRLFaGfhLMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.69.0/24
Signature Algorithm: sha256WithRSAEncryption
73:25:86:d6:c2:26:4e:aa:ea:83:74:eb:28:32:86:bf:50:65:
46:e2:e1:a9:92:54:bb:01:d7:46:87:4c:3c:48:87:0b:09:1e:
61:c7:b4:31:03:f0:b6:e0:9d:6a:7c:a4:f0:dd:d6:a0:1c:3b:
3e:fa:ab:8b:f8:52:64:eb:ee:87:b6:6c:a2:a1:80:ad:ae:04:
f7:5c:46:7d:09:3b:dd:53:0a:25:67:70:5b:c1:e0:12:3d:6b:
4e:a4:5b:fe:e3:ed:6d:48:59:09:e5:98:c4:13:0c:b6:17:20:
64:1b:00:84:25:e1:ec:ec:f9:8e:47:46:53:08:66:e5:96:44:
b3:53:38:8c:bd:0c:58:84:ae:20:6d:66:bb:28:b2:69:04:50:
ef:63:8c:83:6d:92:dc:6f:38:47:81:70:55:ae:71:4c:67:60:
10:67:f4:42:b2:4e:d9:57:3f:aa:bc:26:26:94:92:41:02:40:
eb:aa:6b:38:9b:b5:ea:54:d9:a1:fb:dc:e7:ad:0d:9c:a6:0b:
3a:8e:28:34:fd:6a:10:79:d0:76:ac:3a:b0:48:80:c9:8e:11:
33:29:45:4c:4d:5a:d8:b3:07:6f:4b:87:b1:c5:3a:94:bb:25:
58:9c:83:80:ea:fc:4b:eb:47:7f:20:07:ab:55:65:0a:48:35:
74:af:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:15 2026 by rpki-client