Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa
File: 2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa (raw, json)
Hash identifier: h7g9VGs3XqpFOw06DvMhbAXgfcpKbwQItbjDo8Cg+8U=
Subject key identifier: DA:EC:A7:F7:EA:ED:E2:A5:C3:42:72:7F:46:E0:6A:86:92:DF:34:51
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 01A0CA63B6F64EE855F4E62AFC3C3EAAF264
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa
Signing time: Tue 22 Sep 2026 18:32:07 +0000
ROA not before: Tue 22 Sep 2026 18:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398436
IP address blocks: 46.18.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:63:b6:f6:4e:e8:55:f4:e6:2a:fc:3c:3e:aa:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Sep 22 18:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daeca7f7eaede2a5c342727f46e06a8692df3451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5c:ec:7a:b5:d0:ac:18:5c:52:23:60:78:68:
64:7d:d8:d4:a1:f5:17:5e:60:f3:ba:6d:f7:1b:d5:
ba:f9:fd:d6:8e:2d:c1:2e:4a:31:3d:82:de:f3:5e:
7a:d7:d4:16:bb:65:2e:ee:db:3f:21:dd:54:c7:b8:
62:d6:4e:a2:70:43:e0:e4:5c:b9:89:c5:59:ff:3a:
f2:27:0d:b4:33:f2:6f:7e:bc:47:29:44:f9:43:d7:
06:9b:8e:b8:a3:72:a9:b7:64:77:e4:98:3e:7b:9a:
00:05:7c:46:2f:00:75:ff:42:92:71:ca:63:ff:4b:
ba:7e:dd:00:5a:37:77:be:65:44:34:f2:29:f8:3b:
21:4f:4b:a1:05:83:6e:b0:50:2c:14:87:e9:ca:61:
a0:dd:53:4e:7c:2b:8f:e5:cc:80:05:61:14:29:78:
71:b1:4e:3e:ef:3c:a0:5d:77:3c:3d:3a:ed:1e:14:
4e:82:c1:70:e1:03:dc:d4:fa:04:e8:e0:86:02:d6:
3e:8b:1e:a6:69:ff:3a:c6:89:91:86:0f:a2:ed:89:
03:cc:8c:fe:07:bf:40:a6:4e:2b:c7:4a:48:e2:c3:
ef:e7:e9:cd:63:e5:4a:d1:f5:90:f7:e9:34:65:7e:
21:a4:cd:17:b6:3a:c4:0c:0e:1d:f7:12:21:d5:32:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:A7:F7:EA:ED:E2:A5:C3:42:72:7F:46:E0:6A:86:92:DF:34:51
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a1:cc:8b:4a:ff:b2:ef:98:82:7b:42:d3:b2:b7:85:85:e8:
8a:8c:1c:b9:74:73:6c:e7:92:3c:3c:7b:f0:3d:9b:5f:78:59:
24:fb:95:58:26:18:cb:da:02:af:c8:ce:1c:f1:ff:10:aa:1f:
37:77:b5:e6:f0:1c:be:78:5e:74:85:c2:b2:28:d3:16:73:1f:
de:6b:7f:33:87:85:d0:3e:0d:ec:f5:85:66:89:56:11:89:d5:
7c:c7:59:22:a8:4d:f9:2f:b5:3c:4e:db:5f:20:ca:89:77:ae:
0c:5a:72:38:34:6f:76:54:69:c1:3c:ce:86:96:0f:bb:1c:f3:
f3:b5:1c:94:9e:fd:16:eb:6c:31:7c:4a:ac:34:93:ca:19:d0:
24:65:a4:6a:2e:1a:db:f1:a3:79:e5:f5:35:7e:f6:39:c3:45:
2e:3d:91:ff:7e:ce:c8:38:fb:a6:77:08:39:91:85:8e:a2:67:
51:c6:c0:f1:0f:d6:8f:2d:bc:df:0f:7c:58:36:e8:5e:50:39:
00:bd:5a:3f:17:db:04:7d:2d:8f:81:70:dd:d7:e3:c1:54:00:
d4:b4:8e:5c:61:b1:63:82:6f:f0:74:63:7d:2f:32:20:c5:cc:
dd:cf:b4:85:3e:5b:07:a4:90:9e:aa:d4:03:1f:90:67:2b:05:
62:71:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:04:37 2026 by rpki-client