Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4K4j5oQFSESAEQ1MeIZKTFbsAF4.roa
File: 4K4j5oQFSESAEQ1MeIZKTFbsAF4.roa (raw, json)
Hash identifier: tdptIJFs3hE/+xYFJONNmLlkIg39nNkov9RWYsn/iuo=
Subject key identifier: E0:AE:23:E6:84:05:48:44:80:11:0D:4C:78:86:4A:4C:56:EC:00:5E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019D900501C899155701BAEF21BCB25DD3CA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4K4j5oQFSESAEQ1MeIZKTFbsAF4.roa
Signing time: Wed 15 Apr 2026 07:22:20 +0000
ROA not before: Wed 15 Apr 2026 07:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a09:6285::/32 maxlen: 32
2a10:4100::/32 maxlen: 32
2a11:4b40::/32 maxlen: 32
2a13:2984::/30 maxlen: 30
2a13:3880::/32 maxlen: 32
2a13:3881::/32 maxlen: 32
2a13:3882::/32 maxlen: 32
2a13:3883::/32 maxlen: 32
2a13:3884::/32 maxlen: 32
2a13:3885::/32 maxlen: 32
2a13:3886::/32 maxlen: 32
2a13:3887::/32 maxlen: 32
2a13:93c2::/32 maxlen: 32
2a13:93c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:05:01:c8:99:15:57:01:ba:ef:21:bc:b2:5d:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 15 07:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0ae23e68405484480110d4c78864a4c56ec005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:89:fc:de:85:9c:71:85:04:d6:8e:b4:62:
4f:a7:50:2c:6b:6f:d6:49:2c:b0:03:e6:9c:df:79:
3e:42:9e:8c:a0:10:08:c7:8c:20:70:0a:e6:d4:b4:
41:a1:b1:3a:10:0b:40:54:ff:30:be:81:ae:2f:0b:
d1:08:ca:6a:e5:ab:3b:15:5e:63:c2:fc:7b:d0:13:
51:62:89:22:2e:76:f0:ab:c2:e6:f8:ee:73:db:81:
a9:02:4b:33:de:c8:f9:44:8e:20:75:73:b0:db:a8:
43:63:52:28:21:74:12:9e:a0:65:d2:35:fd:40:b8:
93:49:47:4c:9c:ff:2a:33:e0:2a:2e:b6:88:95:1e:
92:d8:f5:db:89:eb:73:9e:29:2f:d6:2b:48:c1:d5:
70:78:bd:f4:f1:19:2e:78:d2:3f:84:c8:11:10:1c:
e8:4f:ae:41:4f:e4:c6:ab:6b:7c:fe:8d:8e:eb:47:
53:95:71:91:84:e3:de:09:27:08:75:a1:50:94:33:
ba:00:0b:4d:99:fb:fa:2b:80:f1:91:84:c9:dd:8b:
de:a5:72:dc:1c:49:8a:0f:25:36:37:51:0a:83:07:
a6:91:4d:9d:71:33:d4:a0:e1:6c:64:30:36:cc:d0:
ef:f4:73:82:82:41:12:01:37:f6:f3:05:0f:17:ec:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AE:23:E6:84:05:48:44:80:11:0D:4C:78:86:4A:4C:56:EC:00:5E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4K4j5oQFSESAEQ1MeIZKTFbsAF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6285::/32
2a10:4100::/32
2a11:4b40::/32
2a13:2984::/30
2a13:3880::/29
2a13:93c2::/32
2a13:93c4::/32
Signature Algorithm: sha256WithRSAEncryption
3c:33:79:dc:56:f7:0a:27:23:db:ad:6e:7d:ee:68:b0:e8:75:
16:48:94:9f:81:d9:96:e9:81:42:c1:a3:15:a3:63:96:72:1d:
56:f7:59:fa:21:d7:e1:65:8f:7a:82:12:45:9b:01:ab:c4:b0:
07:30:aa:e8:bf:71:d6:c7:3d:d4:e1:9b:35:2b:4d:81:c3:6e:
8c:22:4a:ca:41:e2:48:a6:18:49:d8:9a:58:a1:30:9c:2c:97:
44:0f:07:38:b3:aa:1c:f6:47:90:77:f5:9f:03:3a:de:c2:f9:
82:b3:ad:98:56:9d:11:35:f0:1a:b9:26:06:28:3a:c2:98:42:
f1:44:30:af:3c:05:82:03:63:0f:27:e4:e1:54:2d:76:55:1f:
64:7a:fe:24:96:69:d5:8a:9f:62:41:83:98:e3:a8:a1:7f:a2:
c0:06:f1:b6:82:97:7d:94:2f:89:b0:24:8e:7a:80:44:e5:47:
eb:bc:a6:3b:82:0e:2f:c0:2e:72:57:81:81:0b:2c:26:45:47:
ac:b6:68:54:f9:82:c9:04:51:46:11:ef:53:1d:a1:11:51:8f:
a4:6d:ea:fa:8a:b8:dc:ad:fb:c2:07:0f:15:b4:9f:20:d7:02:
9c:3b:1f:4f:92:a3:4e:a8:d5:b0:ad:c4:18:aa:ec:6e:d1:f0:
50:85:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:02 2026 by rpki-client