Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IhZOkFGwlkPZaXkWZYfG9spp4fc.roa
File: IhZOkFGwlkPZaXkWZYfG9spp4fc.roa (raw, json)
Hash identifier: qCEy/Um8M7C4bgM3+k6M7uqAWAjO5DdffVhom4uQ+CM=
Subject key identifier: 22:16:4E:90:51:B0:96:43:D9:69:79:16:65:87:C6:F6:CA:69:E1:F7
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019F898CA4FD7F2F94B73E37EF0533BB8360
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IhZOkFGwlkPZaXkWZYfG9spp4fc.roa
Signing time: Wed 22 Jul 2026 11:18:43 +0000
ROA not before: Wed 22 Jul 2026 11:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47975
IP address blocks: 46.70.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:8c:a4:fd:7f:2f:94:b7:3e:37:ef:05:33:bb:83:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jul 22 11:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22164e9051b09643d96979166587c6f6ca69e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:09:45:5b:e0:36:02:b6:30:c4:d4:fa:97:
e6:a8:29:10:26:87:fa:a8:cc:a4:1b:94:77:44:e4:
2b:37:cc:63:88:10:0d:64:73:02:f2:e1:44:d0:3f:
ae:4c:f5:67:6b:17:7e:ee:44:aa:65:36:dd:90:1d:
f3:46:a4:5f:3b:5c:5f:06:bc:46:71:4d:dc:36:fe:
7b:fa:6b:b0:51:86:b1:d1:6d:1c:4c:86:b0:1f:f7:
28:78:18:bf:38:7f:a2:03:de:26:4f:52:1f:bc:fb:
29:59:9d:5a:c4:61:28:d9:34:41:ef:35:37:60:a2:
4c:e5:6e:df:f0:40:81:b5:b5:b0:41:61:8d:55:40:
79:36:85:be:5d:68:d0:b1:a9:55:f5:9f:6d:7a:90:
d9:8c:f1:2c:13:52:af:08:c3:8f:54:b5:4c:38:58:
5c:c0:0c:8e:3f:7c:26:96:a5:de:5f:29:04:d3:43:
e8:4f:73:31:b5:56:c5:4e:e9:f2:69:36:d7:39:55:
83:53:66:59:30:6f:bd:08:a6:24:5c:8a:29:9f:9f:
e2:1f:95:a6:97:92:1a:66:ae:22:a5:39:97:bc:11:
b9:61:18:86:32:b9:f7:a8:e5:fc:f7:87:2b:10:1b:
ff:b2:92:60:5a:39:16:b7:84:15:16:c3:32:d2:61:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:4E:90:51:B0:96:43:D9:69:79:16:65:87:C6:F6:CA:69:E1:F7
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/IhZOkFGwlkPZaXkWZYfG9spp4fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.206.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:8f:99:f3:d5:5f:99:2f:11:55:8f:03:d2:97:9a:a5:82:b3:
77:da:d7:62:60:04:41:0e:21:a1:37:6e:42:52:b4:df:21:08:
1f:fc:70:11:7e:b6:d5:8a:ed:c8:ef:22:c1:a5:30:15:3d:31:
7a:2e:c8:8a:98:2f:d9:0f:b8:a6:dd:04:c6:d4:f8:b4:8b:b1:
b1:96:d2:d3:16:1d:7a:4c:44:1f:5f:ef:24:e0:8e:b8:dc:6c:
2f:ef:0a:e0:57:b9:89:9f:96:91:da:d2:59:fc:39:e5:f3:18:
5f:45:80:bb:59:fa:8c:1d:e5:b1:4c:bb:73:0d:9e:7e:07:cd:
59:92:48:19:8d:8e:5c:07:22:20:dc:ff:e4:3d:84:94:99:0d:
28:e4:c6:c7:c1:97:fc:fe:62:dd:c2:9f:ad:79:29:33:1e:86:
5b:df:42:f3:38:c0:d9:6e:27:3a:f0:df:1a:55:e7:40:17:70:
b6:05:c0:42:0f:c8:b5:4e:d7:0a:70:98:47:1c:64:bc:e3:be:
ba:ef:53:12:59:e2:4b:f3:15:ef:0e:5e:f7:f6:15:0d:26:55:
5e:e1:fa:b0:54:53:c6:86:c5:48:21:8b:f4:cc:18:67:05:89:
f6:eb:1a:0b:18:64:bc:23:1e:0c:2e:95:fd:f4:d7:49:73:2c:
58:4a:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:38 2026 by rpki-client