Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/F4rY5JVMtMl_zYzUZwZp4oeHP1I.roa
File: F4rY5JVMtMl_zYzUZwZp4oeHP1I.roa (raw, json)
Hash identifier: E0rqrVkOGoV8SRKX7SA5ZbTVTAKBdcJrr4ggv5rMXIg=
Subject key identifier: 17:8A:D8:E4:95:4C:B4:C9:7F:CD:8C:D4:67:06:69:E2:87:87:3F:52
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 019B79ED34B006B9D565FD1A96575CE81502
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/F4rY5JVMtMl_zYzUZwZp4oeHP1I.roa
Signing time: Thu 01 Jan 2026 14:19:07 +0000
ROA not before: Thu 01 Jan 2026 14:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41182
IP address blocks: 195.248.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:34:b0:06:b9:d5:65:fd:1a:96:57:5c:e8:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Jan 1 14:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178ad8e4954cb4c97fcd8cd4670669e287873f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:86:ef:03:54:a3:76:aa:f1:66:1e:29:b3:
2c:65:8f:fa:d4:2b:a5:fc:0d:67:8d:a2:d1:ac:da:
fc:40:d3:cf:cb:e8:aa:25:d1:ed:ff:6c:ca:94:17:
a5:cd:2a:78:98:42:8b:ae:6a:ff:c1:25:05:81:53:
4a:ef:be:9b:e3:19:d7:fb:7c:90:f0:1d:91:9a:78:
01:8f:bf:97:1b:a6:7d:ac:3a:2e:a5:78:27:d5:93:
e0:ab:24:71:42:dd:1f:f2:9b:96:db:ac:8c:30:94:
60:23:b0:30:16:44:e9:4e:a8:34:d2:4d:75:33:e0:
19:4c:eb:d9:13:c2:70:85:1f:1a:6c:39:49:19:c2:
a0:b0:b6:03:23:d5:af:e1:bc:c3:04:e3:68:c1:1f:
58:fd:92:73:e7:db:19:91:3c:95:f2:75:6d:10:bf:
c1:4c:01:54:22:ec:0e:33:f8:fa:cf:7a:a0:6e:60:
e6:5a:04:32:dc:c8:0f:69:de:14:44:46:67:60:2c:
28:0a:e9:41:d0:b1:25:d5:2d:73:b4:e7:43:ea:7b:
3a:26:c2:b1:c7:08:54:60:70:d0:2b:37:05:1d:0e:
6c:5c:e2:01:c0:5a:6a:f2:fe:b0:78:44:23:a7:2f:
1d:3d:0c:99:f0:e4:2b:f1:a4:db:6e:47:f9:7a:c1:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:D8:E4:95:4C:B4:C9:7F:CD:8C:D4:67:06:69:E2:87:87:3F:52
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/F4rY5JVMtMl_zYzUZwZp4oeHP1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.68.0/24
Signature Algorithm: sha256WithRSAEncryption
51:12:75:b7:d9:0b:f3:7a:5a:c1:01:9c:2f:5f:84:20:36:14:
e1:ed:0e:65:58:8f:29:67:20:22:e2:07:96:63:01:1f:b1:b9:
54:65:66:80:67:12:39:c4:a9:d2:7e:ff:84:0a:db:4a:80:15:
3c:4f:d0:9f:67:a7:3c:9a:51:03:38:5a:b1:d4:d7:b5:b3:2d:
99:60:9a:69:3b:85:d1:0c:ca:b7:9a:4f:82:7c:b0:38:9c:d8:
c1:43:8a:bf:55:f0:aa:99:90:63:5a:26:8a:37:f3:ff:6f:fd:
60:e8:40:6e:6b:71:1f:ad:9c:92:eb:44:00:06:fc:92:04:50:
48:ce:ca:7c:08:20:4f:97:75:be:c8:17:3c:e4:38:15:07:8c:
01:ac:50:e8:33:14:da:c0:a4:bb:ea:77:a9:59:c5:46:c5:42:
2a:eb:2b:02:cd:74:83:fe:a7:72:e2:76:37:aa:66:34:4e:62:
57:16:48:08:76:99:36:df:7d:88:04:1e:be:5e:8b:1a:46:02:
1a:7b:5c:82:82:58:40:5d:3d:54:65:dd:19:f1:88:11:e6:1e:
ab:bb:12:e2:66:92:e1:2e:c1:be:fc:e2:b7:3b:c1:62:3d:47:
68:72:fe:b3:5e:12:9f:3e:f3:ee:08:a8:72:cd:2a:57:4e:6d:
71:dc:aa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:49 2026 by rpki-client