Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/4CypVNXRlUvDBje7mxt1CfmoovM.roa
File: 4CypVNXRlUvDBje7mxt1CfmoovM.roa (raw, json)
Hash identifier: mFvuzRC/7svGOuSJoxhgmd+xnQF90mcigroStvs77GM=
Subject key identifier: E0:2C:A9:54:D5:D1:95:4B:C3:06:37:BB:9B:1B:75:09:F9:A8:A2:F3
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019B78A34DCCDB190AB73627466790A064EA
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/4CypVNXRlUvDBje7mxt1CfmoovM.roa
Signing time: Thu 01 Jan 2026 08:18:46 +0000
ROA not before: Thu 01 Jan 2026 08:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35754
IP address blocks: 87.254.32.0/19 maxlen: 19
185.247.120.0/22 maxlen: 22
2a03:d500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4d:cc:db:19:0a:b7:36:27:46:67:90:a0:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jan 1 08:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e02ca954d5d1954bc30637bb9b1b7509f9a8a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:3f:84:8e:3a:28:ab:99:8a:74:28:81:04:
5c:c9:bd:3f:ee:8f:ba:4e:ba:f0:e1:25:03:73:cb:
76:18:e8:75:d5:65:c9:e9:b5:12:57:6a:24:a4:71:
56:1f:13:a6:98:1b:1c:da:2d:7f:02:83:d2:5f:8a:
9a:7e:c1:53:75:d7:08:d6:88:25:97:83:5d:d7:9e:
c1:0a:64:e3:47:cf:0e:3f:eb:88:12:1a:ba:84:91:
aa:08:11:7c:cb:cd:26:d7:f6:e2:06:3e:87:80:03:
dd:ff:06:1b:85:cf:9a:8d:dd:a5:b8:ad:6b:75:df:
63:32:b3:34:ed:52:44:77:a5:78:c4:07:78:56:e5:
32:cc:26:f7:bd:ca:16:0c:1b:f5:54:b4:c8:da:d5:
6a:8f:f6:62:8f:41:5c:cb:26:ca:5d:0e:ff:f2:cd:
3e:9b:0b:ae:78:89:2b:f4:99:f1:70:2a:2e:10:52:
69:22:ba:e0:19:95:69:93:05:7c:7c:40:c0:20:b7:
f8:91:b1:6a:43:0e:dc:3f:3c:98:c4:c6:9e:34:c1:
d4:32:8b:11:51:f9:b2:68:2d:ae:12:f3:9f:42:30:
f1:8f:df:21:e5:34:68:e1:c2:ca:a0:fe:d2:7c:ac:
bf:f2:bd:0f:c8:e8:e9:87:10:d7:51:6d:95:d9:be:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:A9:54:D5:D1:95:4B:C3:06:37:BB:9B:1B:75:09:F9:A8:A2:F3
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/4CypVNXRlUvDBje7mxt1CfmoovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.32.0/19
185.247.120.0/22
IPv6:
2a03:d500::/32
Signature Algorithm: sha256WithRSAEncryption
3c:5f:4e:1e:de:0d:0d:fe:03:81:39:f6:d7:26:24:2b:bb:ba:
45:59:9f:fb:61:e8:f7:de:9f:89:b8:83:3c:bf:13:b7:92:ed:
47:b8:18:3d:d8:60:03:b2:ff:11:d3:7b:f7:d9:56:78:1a:58:
2a:9b:3b:ad:c1:a5:fc:1a:dc:2b:0a:96:c5:1d:89:3e:95:bc:
a4:71:8e:35:b0:22:95:2b:b5:50:de:0e:3c:af:69:de:10:b3:
7f:83:d6:0f:f6:0a:e7:de:58:d6:fb:cb:c9:ea:0b:db:08:17:
f9:9d:2f:1d:01:44:85:02:c7:15:80:c4:fc:69:6c:ec:9a:81:
8d:cb:a3:87:25:54:ee:80:e9:bc:82:16:d6:a2:61:cf:fe:a2:
06:fd:cf:3d:16:48:12:c8:d5:ed:bc:eb:6a:0b:b8:6d:1d:fa:
e6:a7:9d:85:99:f4:24:90:86:32:b7:9e:ca:b4:aa:9f:96:4c:
af:7e:07:16:eb:05:ba:62:c4:4e:dc:25:ea:ba:31:31:4c:97:
d6:8b:e0:09:18:04:3c:4d:92:3b:47:d9:74:de:a3:2d:62:23:
b4:be:b5:4f:9d:d7:29:48:90:e7:e6:55:92:f4:f2:3c:9b:52:
ba:85:73:d4:a9:42:40:dd:bd:11:0b:a8:64:5f:d4:64:95:33:
37:5b:6b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:06:09 2026 by rpki-client