Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa
File: 4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa (raw, json)
Hash identifier: tskoLkmbKnpidodrFvl8GOFIM31iV0Ojzu1LEIBf4fw=
Subject key identifier: E2:47:38:15:49:24:1C:0C:1F:39:E1:76:AD:BF:9C:FB:68:9D:5B:54
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A094FC1DACDC395B26DFBCBEA3764A4089
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa
Signing time: Sat 12 Sep 2026 09:39:05 +0000
ROA not before: Sat 12 Sep 2026 09:39:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 69.8.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:fc:1d:ac:dc:39:5b:26:df:bc:be:a3:76:4a:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 12 09:39:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e247381549241c0c1f39e176adbf9cfb689d5b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:d4:e3:88:3b:3b:5d:0b:9f:23:80:d6:bc:
64:3d:5f:68:50:f3:ad:f4:9a:1c:1e:20:f1:92:01:
3d:24:59:d6:e7:46:b8:76:ed:09:02:e5:98:40:89:
c3:72:76:7c:2e:98:d9:1a:ca:35:a9:cd:55:28:31:
a3:91:19:d6:15:0a:34:ad:b1:d8:b0:d4:31:60:a6:
1d:61:13:e0:29:df:bb:cd:07:0a:ec:6e:10:de:c8:
17:97:d3:5b:78:2f:c9:b8:d9:f0:69:fe:58:a4:73:
8e:ec:25:37:5d:f6:f0:6d:a1:01:22:bc:cb:16:39:
e2:d9:ed:77:a1:da:57:a2:12:f4:56:fa:e5:4a:64:
8a:3d:a4:c8:df:0f:3f:bd:79:15:b0:1a:22:bb:02:
40:ec:6b:b7:e8:d9:cc:a4:26:8a:bd:64:16:cd:91:
86:2e:ba:5f:dc:31:e9:f0:dd:ae:8c:63:68:94:c6:
06:38:8c:03:51:b5:f0:5b:46:40:14:32:f7:71:4e:
4b:01:fa:27:0c:14:1a:40:52:2e:1e:bb:82:eb:7f:
0c:82:10:e7:63:1b:e4:78:d4:b7:71:b7:a6:2e:5d:
63:29:65:a6:86:00:d2:49:30:6a:dc:3c:10:0e:3c:
bc:65:a2:61:3f:d4:08:77:dc:fc:f8:b1:5c:64:16:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:38:15:49:24:1C:0C:1F:39:E1:76:AD:BF:9C:FB:68:9D:5B:54
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/4kc4FUkkHAwfOeF2rb-c-2idW1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.8.134.0/23
Signature Algorithm: sha256WithRSAEncryption
47:b4:fc:bf:0a:81:a9:e0:d5:a5:5a:d0:7b:93:2a:ed:23:c7:
7a:75:51:ab:93:ef:77:e7:90:bf:01:ba:e5:fe:5e:07:4e:a5:
54:9a:88:e4:d6:fb:12:51:d7:8f:3d:d1:dd:f1:a5:fc:1a:53:
a5:69:59:e8:13:e3:3a:13:a1:3a:1d:4b:03:65:de:98:f1:5e:
a2:14:cf:96:3d:50:6d:c5:e8:15:ef:94:6a:61:34:8b:be:3c:
14:c1:70:43:fa:93:8d:3e:07:de:c0:b4:ca:da:e5:07:e6:77:
00:1c:e3:19:f5:7a:64:63:cb:f2:e8:cd:d8:21:21:80:85:af:
aa:0d:33:d8:03:d8:6b:c0:f8:05:db:45:ec:81:92:1a:4a:03:
70:11:c2:91:5a:d6:80:1a:bc:df:d9:2a:e8:0b:56:b1:34:1b:
ab:41:4c:bc:61:1b:89:d2:83:4f:03:7e:d8:9a:e5:5b:10:65:
56:85:1d:a9:b0:e7:c8:da:45:14:ad:8f:50:5e:f6:91:23:79:
80:42:e1:ca:5f:39:95:a4:ea:aa:a7:c5:bd:79:7b:5a:ad:4f:
37:b4:cc:8e:41:53:1c:4b:b0:cb:25:1b:a2:92:f5:1e:4f:4f:
6d:f7:70:0e:9c:d7:a6:90:b6:9d:ad:24:2d:87:31:87:b5:f5:
b7:db:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:02 2026 by rpki-client