Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4RdCXqfNe7umvD9wSDolndOkQFk.roa
File: 4RdCXqfNe7umvD9wSDolndOkQFk.roa (raw, json)
Hash identifier: f6tnwGbY3vkgk/UT7Efrq3ZGxNq/JyOl0OoFYDrSvCA=
Subject key identifier: E1:17:42:5E:A7:CD:7B:BB:A6:BC:3F:70:48:3A:25:9D:D3:A4:40:59
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019D622DDD119803314B912B07FF83372F29
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4RdCXqfNe7umvD9wSDolndOkQFk.roa
Signing time: Mon 06 Apr 2026 09:44:26 +0000
ROA not before: Mon 06 Apr 2026 09:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 185.39.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:2d:dd:11:98:03:31:4b:91:2b:07:ff:83:37:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 6 09:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e117425ea7cd7bbba6bc3f70483a259dd3a44059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:db:2f:fd:2f:8f:02:ac:1c:89:e9:72:03:
2e:bf:b5:d8:95:e8:39:f4:6e:1c:96:a1:c1:f3:08:
6d:e6:10:30:2e:3f:38:13:3c:c1:74:df:b0:88:5a:
3b:bb:e5:c1:2e:93:00:8d:a7:89:53:4e:4e:78:29:
38:40:86:c7:08:88:88:be:95:08:e7:13:b2:b8:8d:
d1:93:83:6f:74:9d:9a:dc:4b:99:d9:33:a7:b1:a7:
38:32:c3:77:26:c7:a2:b2:dd:22:07:f8:f6:f3:b4:
51:c7:e3:00:f3:07:62:ef:6c:c0:b8:ee:96:d2:19:
61:ad:47:6c:51:6d:6e:57:52:40:41:09:67:75:96:
47:73:3d:49:c8:3a:a9:69:33:0c:0b:51:86:91:05:
86:b6:66:d5:ce:8b:1d:fc:1f:78:2f:b7:08:b4:a8:
f7:34:ab:64:b4:e6:e3:c0:22:cc:03:b6:93:eb:1c:
f8:45:b2:db:2e:21:10:e2:0a:7c:e8:9b:95:50:37:
6c:b7:d2:d9:5c:ae:7f:59:c1:93:45:68:01:e9:3d:
3c:46:3a:16:54:35:4c:4e:b1:35:51:92:8c:b4:9c:
b9:5e:34:17:ec:cf:32:73:62:d6:ab:04:1f:a1:12:
55:f4:a6:a3:62:04:97:c7:32:9b:2c:f8:5a:7a:7d:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:42:5E:A7:CD:7B:BB:A6:BC:3F:70:48:3A:25:9D:D3:A4:40:59
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/4RdCXqfNe7umvD9wSDolndOkQFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
23:87:9a:66:cf:fe:56:13:ef:cc:80:ef:b7:60:fa:fb:df:7a:
28:16:bc:eb:1d:75:9b:55:cd:eb:e0:82:2f:49:33:3d:3a:88:
81:0d:05:bc:4b:e7:bf:ef:61:9d:70:c3:bd:82:3c:85:a5:ea:
cb:39:8b:86:da:ec:35:26:a1:12:c5:10:ae:a0:13:91:16:c9:
45:bf:95:63:7f:be:40:d7:c0:a6:3e:0b:04:1c:cc:6d:c3:64:
f6:45:85:8f:ff:73:91:7f:13:12:44:b9:a5:6c:6a:1d:6f:1a:
5d:17:15:8c:56:0e:2c:22:d9:8d:4a:2a:c5:74:3a:f1:c7:a0:
64:69:f9:ec:0b:24:47:a9:25:d0:be:78:e9:f3:16:35:aa:f4:
b3:0c:7e:ab:71:7f:44:37:c7:11:68:98:9a:95:95:06:7a:59:
87:78:f0:75:ae:62:b5:3c:cf:06:6e:1f:b6:97:5b:1d:51:9c:
e1:97:59:3f:d0:68:20:07:64:2c:ae:de:89:79:06:52:3b:46:
a6:43:63:18:be:5b:c9:2b:51:d9:10:57:5f:1e:73:0f:e7:d2:
7c:ee:2a:d1:d5:4b:84:30:7e:e1:80:52:3f:b9:d2:11:fe:b2:
1b:7f:6e:f1:03:dd:ba:64:c6:54:39:e3:38:ef:af:2d:ce:58:
08:68:ae:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1iLd0RmAMxS5ErB/+DNy8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjYwNDA2MDk0NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTE3NDI1ZWE3Y2Q3YmJiYTZiYzNmNzA0ODNhMjU5ZGQzYTQ0MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZjbL/0vjwKsHInpcgMuv7XYleg5
9G4clqHB8wht5hAwLj84EzzBdN+wiFo7u+XBLpMAjaeJU05OeCk4QIbHCIiIvpUI
5xOyuI3Rk4NvdJ2a3EuZ2TOnsac4MsN3Jseist0iB/j287RRx+MA8wdi72zAuO6W
0hlhrUdsUW1uV1JAQQlndZZHcz1JyDqpaTMMC1GGkQWGtmbVzosd/B94L7cItKj3
NKtktObjwCLMA7aT6xz4RbLbLiEQ4gp86JuVUDdst9LZXK5/WcGTRWgB6T08RjoW
VDVMTrE1UZKMtJy5XjQX7M8yc2LWqwQfoRJV9KajYgSXxzKbLPhaen1FKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEXQl6nzXu7prw/cEg6JZ3TpEBZMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvNFJkQ1hxZk5lN3VtdkQ5d1NEb2xuZE9rUUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScTMA0G
CSqGSIb3DQEBCwUAA4IBAQAjh5pmz/5WE+/MgO+3YPr733ooFrzrHXWbVc3r4IIv
STM9OoiBDQW8S+e/72GdcMO9gjyFperLOYuG2uw1JqESxRCuoBORFslFv5Vjf75A
18CmPgsEHMxtw2T2RYWP/3ORfxMSRLmlbGodbxpdFxWMVg4sItmNSirFdDrxx6Bk
afnsCyRHqSXQvnjp8xY1qvSzDH6rcX9EN8cRaJialZUGelmHePB1rmK1PM8Gbh+2
l1sdUZzhl1k/0GggB2Qsrt6JeQZSO0amQ2MYvlvJK1HZEFdfHnMP59J87irR1UuE
MH7hgFI/udIR/rIbf27xA926ZMZUOeM4768tzlgIaK60
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:51 2026 by rpki-client