Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4v86MLPklybJQ_ivrvTYVcVfsh4.roa
File: 4v86MLPklybJQ_ivrvTYVcVfsh4.roa (raw, json)
Hash identifier: xJ0hbKLYK7sovpGL1nlBIC72OKTOpZSxCZjQFdQzLSM=
Subject key identifier: E2:FF:3A:30:B3:E4:97:26:C9:43:F8:AF:AE:F4:D8:55:C5:5F:B2:1E
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0A97A6C77E94639139036759E33170616
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4v86MLPklybJQ_ivrvTYVcVfsh4.roa
Signing time: Wed 16 Sep 2026 09:09:27 +0000
ROA not before: Wed 16 Sep 2026 09:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:7a:6c:77:e9:46:39:13:90:36:75:9e:33:17:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 16 09:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2ff3a30b3e49726c943f8afaef4d855c55fb21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:db:fe:70:c2:63:aa:4e:88:06:2a:47:dc:
ff:25:30:ef:e4:44:86:38:0a:78:f4:88:8f:b6:24:
e3:16:11:79:9a:fa:e8:db:28:37:5c:42:93:92:3d:
b7:9f:d6:67:ab:a9:86:ac:bb:97:81:e2:4f:65:61:
6a:97:58:ba:f0:6c:59:de:c0:60:a6:22:d5:bf:75:
50:49:dc:a7:b6:03:a2:bc:f6:47:13:bc:e4:54:83:
42:44:6f:b6:3c:f1:00:55:0c:00:da:1d:bd:b0:ea:
1b:00:d0:20:18:cc:06:fe:72:1e:0f:6f:8e:2f:b1:
df:67:ae:23:9c:88:af:b6:ea:fc:99:bc:c5:ba:cb:
c4:70:8b:24:09:1a:79:7c:00:09:d6:a3:c9:fa:92:
db:49:9b:a3:c3:99:28:9f:20:2f:f3:85:4d:2f:7f:
28:ef:47:b4:67:ad:95:6e:3a:5a:4d:c1:a1:ee:0c:
ec:81:64:90:53:c2:0a:00:bf:70:51:be:04:40:4b:
f0:f3:d1:9d:b8:54:95:61:d7:13:40:65:dd:ce:c8:
17:96:78:ee:27:c7:1f:91:2a:24:f2:71:20:63:1e:
b0:f2:79:f0:87:17:ff:9f:fe:78:99:e1:3c:83:82:
95:06:d7:3b:f5:c2:c0:c5:ac:1b:17:37:2c:b3:c0:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:3A:30:B3:E4:97:26:C9:43:F8:AF:AE:F4:D8:55:C5:5F:B2:1E
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/4v86MLPklybJQ_ivrvTYVcVfsh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:96:e5:8a:1b:d6:31:a5:45:cb:92:b4:6e:06:24:7d:92:0e:
38:c2:63:1c:7f:3d:0d:e6:30:91:c3:b2:74:a8:5d:2f:e2:eb:
ed:5d:55:fe:9e:29:f8:4e:9e:29:3b:88:59:9b:d4:c8:56:92:
a4:12:d4:a8:92:75:e8:e9:c7:f3:19:e0:35:63:ea:d5:a1:19:
9b:7d:a7:25:69:cd:c8:ef:d8:7e:34:bc:1f:ae:08:45:65:ae:
e1:b2:8f:37:22:9f:13:e0:49:d1:19:87:04:86:1d:78:03:09:
7e:e7:49:df:fa:a1:f9:7a:33:83:90:f2:1c:35:6b:be:04:f8:
50:f0:da:d2:4b:89:7f:d3:7a:6e:ba:05:67:46:07:07:75:f6:
5d:25:e1:18:e0:84:e4:de:bf:71:c3:55:b2:a9:83:8a:b2:78:
cf:03:7b:c4:01:fd:f8:c5:c1:29:af:b7:38:12:b4:42:e0:7a:
49:66:45:bb:1b:63:8c:85:18:82:c0:79:0f:39:0d:71:4d:af:
9e:bd:98:58:84:a5:ba:7a:02:45:48:c8:6d:fa:98:1c:0a:2e:
f6:08:e2:bb:c9:77:02:62:d0:38:e7:23:df:9e:3e:a1:ad:b4:
c7:d5:87:93:48:57:05:b2:9d:4a:1b:03:e3:16:c4:ea:1c:cc:
3f:4b:36:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCpemx36UY5E5A2dZ4zFwYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjBkNDZkMWQ4MDQ2YjRkNzRlNGQ4MTU4MThjOGUzNjU5
ZWRiZTkwHhcNMjYwOTE2MDkwOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmZmM2EzMGIzZTQ5NzI2Yzk0M2Y4YWZhZWY0ZDg1NWM1NWZiMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysXb/nDCY6pOiAYqR9z/JTDv5ESG
OAp49IiPtiTjFhF5mvro2yg3XEKTkj23n9Znq6mGrLuXgeJPZWFql1i68GxZ3sBg
piLVv3VQSdyntgOivPZHE7zkVINCRG+2PPEAVQwA2h29sOobANAgGMwG/nIeD2+O
L7HfZ64jnIivtur8mbzFusvEcIskCRp5fAAJ1qPJ+pLbSZujw5konyAv84VNL38o
70e0Z62VbjpaTcGh7gzsgWSQU8IKAL9wUb4EQEvw89GduFSVYdcTQGXdzsgXlnju
J8cfkSok8nEgYx6w8nnwhxf/n/54meE8g4KVBtc79cLAxawbFzcss8BmfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOL/OjCz5JcmyUP4r6702FXFX7IeMB8GA1UdIwQY
MBaAFMBg1G0dgEa0105NgVgYyONlntvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvNHY4Nk1MUGtseWJKUV9pdnJ2VFlWY1Zmc2g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dwpMA0G
CSqGSIb3DQEBCwUAA4IBAQB6luWKG9YxpUXLkrRuBiR9kg44wmMcfz0N5jCRw7J0
qF0v4uvtXVX+nin4Tp4pO4hZm9TIVpKkEtSoknXo6cfzGeA1Y+rVoRmbfaclac3I
79h+NLwfrghFZa7hso83Ip8T4EnRGYcEhh14Awl+50nf+qH5ejODkPIcNWu+BPhQ
8NrSS4l/03puugVnRgcHdfZdJeEY4ITk3r9xw1WyqYOKsnjPA3vEAf34xcEpr7c4
ErRC4HpJZkW7G2OMhRiCwHkPOQ1xTa+evZhYhKW6egJFSMht+pgcCi72COK7yXcC
YtA45yPfnj6hrbTH1YeTSFcFsp1KGwPjFsTqHMw/SzaG
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:56:24 2026 by rpki-client