Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CdgjSj8B2eEBBly0iK4h89jCNUc.roa
File: CdgjSj8B2eEBBly0iK4h89jCNUc.roa (raw, json)
Hash identifier: aTHrwyvkvgZuRLuQPng1C8Fc89AkT7KTKhgpjKS5Q+Q=
Subject key identifier: 09:D8:23:4A:3F:01:D9:E1:01:06:5C:B4:88:AE:21:F3:D8:C2:35:47
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019D6312BE1E06108728F354BE452D0377B5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CdgjSj8B2eEBBly0iK4h89jCNUc.roa
Signing time: Mon 06 Apr 2026 13:54:25 +0000
ROA not before: Mon 06 Apr 2026 13:54:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 213.220.4.0/24 maxlen: 24
213.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:12:be:1e:06:10:87:28:f3:54:be:45:2d:03:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 6 13:54:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09d8234a3f01d9e101065cb488ae21f3d8c23547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:df:1c:23:23:8d:a7:c3:6b:1a:c2:c5:ca:
c0:b4:3f:4b:ff:d2:be:51:e2:80:2e:0c:ed:65:1f:
6b:c0:72:af:d1:b1:22:91:02:fc:55:07:7a:7c:5f:
f5:02:89:2f:9d:39:b0:6b:2a:73:94:32:f4:e0:8e:
7d:33:78:29:69:2e:ef:c4:33:bd:bf:d8:81:a1:97:
fc:97:a4:56:ad:87:00:6f:d0:95:2b:cf:2b:63:ed:
4e:da:6b:18:5a:de:46:c7:d0:11:75:c1:08:b6:00:
70:77:d7:cc:0f:18:54:73:2a:7a:93:0e:c5:0c:07:
a9:87:9f:71:d4:61:92:c4:23:d9:fa:fc:9b:e2:ab:
a5:b2:dd:34:4b:a3:fe:ec:a2:fe:fc:50:e0:d6:6d:
0e:63:87:45:5e:0f:d8:72:34:9c:11:6f:60:93:30:
35:92:1f:a6:97:31:fb:cd:94:63:30:a9:29:a1:c9:
13:5b:51:82:7e:7b:3c:61:47:aa:e4:b7:cc:bd:44:
a6:e6:7c:cb:12:80:bc:d2:42:33:2f:d6:ab:ff:f5:
fa:ae:bd:28:b6:eb:b6:e3:56:da:1d:8f:5f:07:bc:
f6:e7:37:d9:63:3a:a0:0d:1f:9f:3b:27:da:cf:28:
e1:54:7b:c5:49:51:f2:ea:75:07:8e:20:a1:f8:b1:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:23:4A:3F:01:D9:E1:01:06:5C:B4:88:AE:21:F3:D8:C2:35:47
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/CdgjSj8B2eEBBly0iK4h89jCNUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.4.0/24
213.220.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d6:1c:94:71:85:5a:bd:9b:fd:e7:0e:aa:52:40:ee:39:77:
57:27:ad:cb:b6:38:69:7d:f5:3a:89:18:14:4b:a1:4b:2d:09:
d1:0d:88:07:c9:01:8d:bb:f3:6d:43:32:78:22:00:5b:03:32:
e3:60:8f:0d:9b:71:00:31:98:a7:bd:3e:59:c9:24:2f:80:4d:
f5:4f:79:cd:8e:3f:07:66:ca:68:45:13:16:87:56:39:b1:d5:
eb:56:0e:2f:06:97:ad:af:48:29:1d:97:b9:49:07:2f:4e:69:
5c:ec:c6:ea:ed:58:ca:2f:28:a9:7d:b2:0c:86:9a:96:ab:71:
b6:b2:68:f8:83:c9:f4:00:4c:18:d7:17:c7:92:18:e0:df:1d:
94:de:de:70:22:0f:9e:f6:be:7b:de:f1:8f:de:1f:ab:48:7b:
8f:3e:06:5c:32:5f:c5:c0:a5:9a:2a:59:72:46:78:ff:5e:62:
d4:20:53:07:b4:63:76:cd:bd:ef:b1:2a:3d:fb:40:25:02:a4:
e1:a3:eb:1d:1e:fa:38:b9:04:c6:b8:ce:fa:f8:3e:23:f9:2f:
8c:ee:b7:8e:58:8f:80:90:47:80:78:8a:c7:40:90:34:4d:be:
e9:9e:d6:4d:89:9c:dc:e0:97:0e:5c:02:49:f0:bc:7e:df:7c:
c4:92:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:24 2026 by rpki-client