Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4CeETaDbMmlemWxGvvx0_WuaR08.roa
File: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (raw, json)
Hash identifier: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=
Subject key identifier: E0:27:84:4D:A0:DB:32:69:5E:99:6C:46:BE:FC:74:FD:6B:9A:47:4F
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 019D8BC29C60FC5B387F439C442CAAFFA1CB
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4CeETaDbMmlemWxGvvx0_WuaR08.roa
Signing time: Tue 14 Apr 2026 11:31:20 +0000
ROA not before: Tue 14 Apr 2026 11:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201768
IP address blocks: 78.93.168.0/22 maxlen: 22
78.93.172.0/22 maxlen: 22
86.60.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:c2:9c:60:fc:5b:38:7f:43:9c:44:2c:aa:ff:a1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Apr 14 11:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e027844da0db32695e996c46befc74fd6b9a474f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:69:5d:2b:7c:d2:22:39:92:67:67:bc:d8:
50:40:1b:0e:e6:b4:e8:25:c7:75:42:05:b5:19:df:
46:9c:6f:53:f0:4b:52:dd:ef:a9:77:91:9e:83:78:
d5:56:22:cd:01:af:0d:82:39:19:3c:ef:bc:83:03:
13:79:6e:70:20:8a:60:00:c2:99:04:2c:b3:7d:65:
59:45:e8:b0:9c:66:36:71:4b:ab:ae:9f:c2:c3:eb:
84:20:b8:a7:58:d2:03:c3:53:14:9c:3a:f9:d0:ec:
a5:f7:8c:f6:48:94:8d:df:19:8b:30:3d:06:ac:0a:
61:21:f2:9c:89:61:17:f9:a8:d4:88:2a:e2:29:48:
15:b2:a7:9b:9c:b2:15:53:ff:47:37:5a:62:55:43:
7a:3a:fc:b0:44:fd:37:a3:07:73:c3:49:84:7e:b0:
f3:21:e3:4d:af:03:8f:a4:5e:63:f8:ce:a6:ab:f2:
22:64:6b:e0:1a:87:35:85:30:19:19:39:f7:8f:9e:
26:29:43:a0:c1:3d:ce:2e:92:da:07:9b:39:4c:11:
6c:eb:5b:a9:09:9d:49:94:f1:ad:19:a6:0c:c5:10:
7d:d0:55:fe:e1:fc:48:39:c1:a7:86:11:4c:95:a0:
ab:46:d6:29:1e:07:58:b9:5f:85:94:b3:8b:09:32:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:84:4D:A0:DB:32:69:5E:99:6C:46:BE:FC:74:FD:6B:9A:47:4F
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/4CeETaDbMmlemWxGvvx0_WuaR08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.93.168.0/21
86.60.44.0/23
Signature Algorithm: sha256WithRSAEncryption
29:03:e5:47:d3:5b:e4:72:c6:c4:e6:be:1d:23:fc:8c:a0:46:
60:8c:ef:4b:3f:41:17:da:50:6e:ac:d8:d3:89:b8:11:2f:6e:
56:91:50:9f:36:32:ad:58:23:c4:95:28:a2:5c:0e:28:4d:1f:
6a:96:74:cd:b1:e6:15:fd:87:af:f3:65:7d:fa:8f:4e:b8:01:
a3:71:bd:fa:d0:4b:00:71:37:5d:13:17:17:51:c9:a2:a5:0c:
54:ee:a2:c1:07:46:27:0a:9c:cf:e1:92:fe:4e:ad:7c:a3:40:
10:e5:6b:3f:1e:bb:4b:6d:1f:a4:8e:91:06:3f:7e:34:cc:d6:
83:61:1d:94:af:ae:7a:84:7c:e7:8e:f1:c0:5a:c3:e2:b5:97:
e2:a0:4f:ca:af:97:63:ac:d3:54:58:70:50:9c:50:32:e2:bd:
9a:c8:4d:e3:0f:78:bf:f9:73:0d:67:4a:0e:9e:cc:8b:d6:58:
8a:e6:40:b2:37:ca:93:fc:5c:f4:a8:06:16:7d:9b:1f:35:e1:
ce:e1:2a:22:2a:bc:25:da:f8:63:38:24:cb:b8:60:39:3f:5d:
15:93:ed:37:cb:21:c1:1a:73:a4:b6:11:ba:31:8a:b5:9c:02:
e6:f1:15:02:74:c2:09:74:4d:c1:62:b2:a7:7a:d8:2b:c1:fc:
74:46:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:20 2026 by rpki-client