Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/4NasKMzTYIVVFp-ICFK_D4b8RHc.roa
File: 4NasKMzTYIVVFp-ICFK_D4b8RHc.roa (raw, json)
Hash identifier: QS3B9ES6p11t5I186zFeNR/WrVazilsqPckCmSgVmek=
Subject key identifier: E0:D6:AC:28:CC:D3:60:85:55:16:9F:88:08:52:BF:0F:86:FC:44:77
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019C4D6F69940C63ED6E5BEB95962DCB7331
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/4NasKMzTYIVVFp-ICFK_D4b8RHc.roa
Signing time: Wed 11 Feb 2026 16:01:12 +0000
ROA not before: Wed 11 Feb 2026 16:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201938
IP address blocks: 146.247.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:6f:69:94:0c:63:ed:6e:5b:eb:95:96:2d:cb:73:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 11 16:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0d6ac28ccd3608555169f880852bf0f86fc4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:42:30:eb:eb:0b:fc:24:e7:28:3e:bf:c3:
86:40:3b:7e:38:6e:20:53:c3:2e:d8:3e:26:b3:5a:
5d:4e:4c:40:a7:ff:c1:0c:57:3e:64:48:fe:1f:62:
9e:12:e6:7f:94:d3:95:13:71:29:96:41:0a:98:61:
16:bc:84:90:dc:a7:60:ac:e5:8a:9d:f8:ed:0b:c0:
a6:00:64:04:28:1e:00:36:ed:81:20:a4:99:ef:bc:
4b:84:e5:29:17:a6:a8:7d:1e:2d:ef:57:e4:aa:ac:
7b:09:e7:dc:34:17:84:33:e3:9c:fe:34:4f:3d:b2:
3f:68:62:cb:47:af:5d:10:bf:4f:f3:70:47:c2:fe:
7a:b5:79:93:92:d4:d4:df:86:62:7c:16:49:3c:6c:
8c:f3:c0:e0:77:e8:05:4f:42:77:cd:74:d6:6c:0a:
68:d6:b5:55:77:92:0f:db:89:0d:d3:75:eb:ab:7a:
b3:00:af:76:13:43:ac:52:b4:01:ee:8a:32:5f:46:
b6:d6:80:15:19:e8:df:93:62:10:b4:25:d9:e3:3e:
d0:2a:d0:d7:ed:90:b5:df:a4:d8:a6:5e:1a:36:18:
39:bf:51:1a:d2:37:7f:cb:7d:d7:f4:0a:14:57:75:
a9:04:90:be:e6:ee:29:db:39:cb:89:de:d2:70:7e:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:AC:28:CC:D3:60:85:55:16:9F:88:08:52:BF:0F:86:FC:44:77
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/4NasKMzTYIVVFp-ICFK_D4b8RHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2c:71:ad:8d:df:db:20:53:5f:22:76:bf:c9:85:71:3e:21:
29:fe:d7:ba:dd:1c:08:07:4e:42:7b:e9:61:ef:9d:56:2c:d9:
3e:ce:9f:f6:14:59:02:93:7e:68:eb:43:a8:1c:f9:e2:ce:df:
fa:84:f7:2d:eb:60:b8:bf:8f:48:fe:24:75:18:bf:33:c7:f1:
c7:05:c4:47:97:fd:24:16:92:5d:95:51:da:b0:76:85:e5:f4:
6a:2d:aa:fb:24:a0:00:5c:d8:59:c4:2f:fa:75:4e:10:2c:b2:
be:b8:93:c0:23:57:ef:6d:47:70:85:13:0e:e1:28:d3:7c:f0:
a5:78:04:c3:02:28:29:36:54:de:c0:93:c8:e4:b1:fc:d0:ba:
58:a2:c1:7d:4a:c0:e7:37:d1:24:41:9d:0c:42:b5:b7:45:f6:
ec:cf:57:5f:24:83:24:a3:c2:49:66:55:57:94:35:bc:27:e2:
b8:52:37:57:df:c1:1e:43:0d:56:88:f5:86:13:b7:ce:7e:f5:
8a:48:a5:e5:cd:f0:c6:aa:43:75:e3:d1:2d:bb:64:1b:bb:ea:
f7:25:cb:21:e5:3b:2d:ae:8c:35:98:c5:5a:82:bf:22:44:cc:
11:18:eb:0e:5d:53:fe:4c:9a:cb:cf:61:b9:79:dd:aa:6f:b1:
ff:b6:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:19 2026 by rpki-client