Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/SpCNuk1u-hXCk_6chs0ukaT-xPc.roa
File: SpCNuk1u-hXCk_6chs0ukaT-xPc.roa (raw, json)
Hash identifier: KE7oMTHzlDHmctRL6sItqmo0AwEpnij4sNxyXYuwrUk=
Subject key identifier: 4A:90:8D:BA:4D:6E:FA:15:C2:93:FE:9C:86:CD:2E:91:A4:FE:C4:F7
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 01A0AE4E96F3A0D820C80EC4A3242EF4C2BD
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/SpCNuk1u-hXCk_6chs0ukaT-xPc.roa
Signing time: Thu 17 Sep 2026 07:39:41 +0000
ROA not before: Thu 17 Sep 2026 07:39:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21497
IP address blocks: 81.95.176.0/21 maxlen: 21
81.95.184.0/23 maxlen: 23
81.95.188.0/23 maxlen: 23
81.95.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:4e:96:f3:a0:d8:20:c8:0e:c4:a3:24:2e:f4:c2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Sep 17 07:39:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a908dba4d6efa15c293fe9c86cd2e91a4fec4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:ef:b8:7b:98:e9:89:90:23:57:7d:eb:54:
c6:b1:9e:6d:fd:aa:5d:9c:dd:4b:77:79:89:07:f0:
91:60:52:13:d4:05:62:d5:52:b8:6c:27:65:73:d4:
b1:ae:57:5f:9d:33:e5:3c:97:16:21:55:a5:e4:09:
1a:f8:d1:72:ff:c1:54:3c:8a:dd:c4:98:4b:f9:4b:
bc:d2:4d:96:9f:2c:92:c0:32:50:26:a0:cf:93:1a:
11:30:4d:79:1f:5f:2b:3d:31:0e:57:b3:86:e7:07:
b4:a3:87:69:97:19:33:e6:37:25:5c:13:d8:ed:84:
da:c0:2a:13:10:a2:51:ce:f3:3e:e9:1e:2b:93:a7:
5d:6e:74:33:af:55:ee:fd:f6:df:bd:4a:b0:59:26:
87:07:78:d5:98:d4:b5:33:4d:14:24:83:cd:2c:18:
47:c5:88:8d:ca:c4:b0:58:3f:f2:96:50:df:3d:00:
1c:65:12:03:48:fb:cc:bc:4e:04:85:79:f1:0b:06:
a1:b2:b2:05:a2:84:b9:40:10:b5:33:4c:4d:0e:62:
18:e5:be:77:87:66:c7:29:58:7c:3d:a3:99:70:f8:
ea:81:92:5d:db:d5:cd:11:fe:98:dc:9d:61:36:3d:
b3:0c:43:2e:c5:52:b8:bf:ab:30:72:64:03:22:88:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:8D:BA:4D:6E:FA:15:C2:93:FE:9C:86:CD:2E:91:A4:FE:C4:F7
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/SpCNuk1u-hXCk_6chs0ukaT-xPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.176.0-81.95.185.255
81.95.188.0/22
Signature Algorithm: sha256WithRSAEncryption
62:01:e9:fa:d8:99:5c:21:b4:0e:c1:35:b2:08:35:d9:e2:fc:
ec:6b:a8:99:1a:bd:ad:0f:29:65:4c:d2:f2:2d:c6:aa:79:5d:
ab:c8:dc:b2:6f:74:e7:a3:d9:07:b9:fe:85:80:b3:d9:37:11:
b3:26:d6:fb:e7:d4:09:75:ac:c2:b3:47:34:cd:d5:e0:d6:84:
46:57:9e:7c:fd:13:f6:07:c9:76:99:67:ae:fd:ca:19:23:50:
b9:23:ef:8f:26:2e:e3:7a:b0:b1:91:aa:8b:24:4f:68:1e:35:
ca:54:e4:4f:83:0b:0d:a7:19:83:ec:a2:57:5d:2e:bc:0f:9e:
e4:0e:73:a6:f1:6c:56:3c:9d:6b:68:1b:f9:27:8e:db:75:51:
90:b7:66:de:ba:69:47:4f:07:e6:df:03:82:c4:49:44:f9:45:
f3:cb:f1:a4:ca:f5:dd:16:a8:ae:74:83:1a:4e:eb:99:f2:69:
62:d6:dd:ea:5f:3d:ca:84:d8:b0:8f:7f:41:ce:ec:39:6c:38:
50:29:fe:6d:a2:33:e5:bd:3c:b6:88:2e:ab:62:8e:5c:b5:85:
13:41:14:63:8c:f3:1f:65:02:cc:d2:71:3b:ba:10:30:c5:6c:
7f:68:ea:a4:56:6e:cf:f1:e5:0c:6f:ed:b5:7d:9b:60:16:63:
8f:a7:96:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:27 2026 by rpki-client