Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4_2deSqggAtWNXvf4QnX_nL1YTo.roa
File: 4_2deSqggAtWNXvf4QnX_nL1YTo.roa (raw, json)
Hash identifier: QppRCzDm62Ld8eHKM9dzouSBg0ZVLN+H6mDK2ICjh4Y=
Subject key identifier: E3:FD:9D:79:2A:A0:80:0B:56:35:7B:DF:E1:09:D7:FE:72:F5:61:3A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D96FE4A1E1ED0C009E7846F37BC19B775
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4_2deSqggAtWNXvf4QnX_nL1YTo.roa
Signing time: Thu 16 Apr 2026 15:52:20 +0000
ROA not before: Thu 16 Apr 2026 15:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 103.41.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:fe:4a:1e:1e:d0:c0:09:e7:84:6f:37:bc:19:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 16 15:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3fd9d792aa0800b56357bdfe109d7fe72f5613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:71:ef:56:bf:7a:5b:9c:07:1f:67:6f:07:
d6:d7:75:3a:17:e8:3a:77:dd:c5:ba:1c:64:98:36:
2a:82:49:e2:19:b1:2e:32:fc:63:71:8d:9a:8f:98:
20:44:7b:7f:a4:03:2b:84:56:c4:33:9c:3b:50:0c:
78:1b:b6:78:ae:40:40:ec:54:4c:ef:29:1a:e6:5f:
b6:03:71:b1:db:0b:f9:c6:aa:c1:45:bd:e1:a0:9b:
fa:9b:e5:de:7f:d9:bc:ab:58:1e:df:72:cf:2a:d7:
9d:a1:ad:9d:e3:bf:5e:41:29:92:95:f2:7e:18:fe:
2f:18:dd:39:2d:4a:dc:53:cc:f2:d3:f8:bb:25:71:
3d:91:7f:67:ed:10:39:d7:83:94:7f:c6:f9:f5:f4:
18:df:03:1d:24:28:26:2d:4b:51:0b:d8:11:7e:24:
c3:9c:f0:8a:89:aa:df:07:37:42:9c:8f:43:fe:5e:
a7:9a:16:43:70:5e:a6:08:f8:4f:19:0a:95:34:81:
12:5c:f7:15:a1:4b:8d:c3:bf:86:b5:d4:97:2b:2d:
19:08:4c:bd:08:15:76:e5:87:a0:70:71:a1:41:29:
5a:60:85:99:81:4d:a7:e8:de:7c:c4:4c:4f:81:76:
d0:fe:03:1d:a7:4d:94:8b:b2:16:44:60:b7:53:61:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FD:9D:79:2A:A0:80:0B:56:35:7B:DF:E1:09:D7:FE:72:F5:61:3A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4_2deSqggAtWNXvf4QnX_nL1YTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.46.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:fe:06:b9:dd:6e:0d:33:40:84:76:86:71:01:5b:d6:1f:df:
ee:fe:a3:4b:8b:16:d6:75:02:b7:2c:66:6c:c3:d5:8d:ef:c7:
fe:7f:48:71:f8:7a:39:ca:0b:c8:2d:3a:64:d6:8e:52:aa:fa:
f0:cc:98:df:df:3f:bd:0a:60:36:0a:ed:ba:f3:ad:18:bf:eb:
76:69:30:0e:91:85:d4:f2:d6:cf:73:8b:51:a7:69:7f:42:27:
5b:b6:0e:5a:ce:fb:68:bc:6d:fc:97:5b:5c:22:d5:72:e9:45:
08:b8:f3:8a:16:11:ff:57:bf:aa:ab:9c:52:df:3b:d5:59:96:
98:62:80:c2:66:ca:3a:81:4c:ec:d1:e0:a7:43:8b:77:31:11:
63:89:b1:9b:d6:89:25:30:22:2e:30:5e:5c:86:ac:fd:92:b6:
ed:a6:cf:fb:c5:31:cc:3b:fb:e5:a8:19:f6:ed:9f:b0:30:b9:
6b:59:95:7b:6a:4e:c0:1a:c1:8b:d0:64:f2:cd:5c:c9:e1:50:
2b:6b:bd:fc:e3:70:5f:19:8f:53:68:46:d0:a0:97:64:9b:6c:
4c:3f:ac:a4:48:e6:46:0c:c0:20:33:b6:bf:be:19:97:07:52:
b0:a0:f0:8e:4e:6d:48:39:eb:b8:21:de:c3:43:35:19:fc:d8:
06:c7:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:08 2026 by rpki-client