Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/vYpajsmf80MiyIj2QQ8skH6FUNs.roa
File: vYpajsmf80MiyIj2QQ8skH6FUNs.roa (raw, json)
Hash identifier: pxdMLgEV+GE8y/CZ5aq08lqIZDvAwUSQwzOUir0h/FI=
Subject key identifier: BD:8A:5A:8E:C9:9F:F3:43:22:C8:88:F6:41:0F:2C:90:7E:85:50:DB
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019F898972FB57A32D27E00433FD1640625A
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/vYpajsmf80MiyIj2QQ8skH6FUNs.roa
Signing time: Wed 22 Jul 2026 11:15:14 +0000
ROA not before: Wed 22 Jul 2026 11:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51693
IP address blocks: 46.70.192.0/21 maxlen: 24
46.70.200.0/22 maxlen: 24
46.70.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:89:72:fb:57:a3:2d:27:e0:04:33:fd:16:40:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jul 22 11:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd8a5a8ec99ff34322c888f6410f2c907e8550db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:52:d1:19:ab:7f:77:04:2d:b9:ec:de:9a:
e2:fc:6e:b2:2d:a2:e8:2a:aa:ab:9c:f2:f0:4c:68:
fc:84:df:c2:9c:7a:c9:d1:28:39:9c:e1:11:3c:e9:
10:0b:93:4a:09:1c:40:7e:f9:eb:54:df:cf:2b:15:
a4:8d:1e:b0:76:b5:7e:e0:62:02:94:93:f9:81:be:
4e:c8:0d:31:9b:c9:58:ba:3e:9f:5c:d1:44:90:d3:
cd:4e:fd:e0:81:7f:f5:89:38:e9:f4:02:00:ed:f0:
e7:07:50:2b:19:8e:ac:d3:88:0f:be:b2:65:56:58:
d3:cb:72:ad:30:13:42:f5:50:97:13:90:3d:84:c7:
61:75:59:35:ef:00:d6:8d:dd:94:37:13:0b:df:3f:
d1:0c:66:60:df:e7:da:53:cb:97:3e:98:01:8c:35:
9e:79:ed:45:61:11:5d:55:18:2e:5f:46:1a:33:ba:
e6:bb:86:b6:13:ce:7c:c1:90:fd:ee:73:a9:06:a8:
a4:2f:8e:d2:b1:07:07:2c:29:fd:e6:2c:2f:18:60:
98:89:29:b5:5f:e7:0d:4e:9d:8e:93:20:97:ca:17:
5a:c0:5e:e0:eb:f2:78:14:90:86:cd:76:66:72:f1:
8d:b2:4d:59:b5:f7:65:08:b1:20:3b:cd:99:c9:a1:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:5A:8E:C9:9F:F3:43:22:C8:88:F6:41:0F:2C:90:7E:85:50:DB
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/vYpajsmf80MiyIj2QQ8skH6FUNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.192.0-46.70.205.255
Signature Algorithm: sha256WithRSAEncryption
10:08:db:1e:9d:bd:4f:d0:5e:ef:92:0b:49:d1:7c:af:b3:c4:
45:be:43:f0:55:78:31:f7:32:43:d1:35:4c:9a:0b:31:8c:ed:
8b:d5:df:3b:a8:22:f1:bf:88:aa:aa:21:b7:bd:15:35:d8:1b:
f6:c7:09:45:46:1f:fd:32:6b:89:76:44:0c:3d:51:11:35:01:
2e:8f:85:be:f7:fd:28:be:db:9c:be:e6:8b:24:7c:ea:d2:ca:
6e:b8:97:7d:12:e7:96:39:11:de:5b:14:56:69:f6:a3:49:ef:
a7:21:51:0c:52:3d:f4:63:2a:1a:e3:77:54:96:f1:95:16:af:
ad:32:c4:fe:3c:8d:1a:5d:08:b7:7d:aa:e4:2d:e8:26:3b:d7:
97:34:65:44:73:f1:6f:20:fd:d0:cd:e9:8b:ad:04:21:93:f2:
b7:17:12:ae:71:63:bc:93:ef:99:25:95:7b:93:bf:c2:db:ec:
42:67:39:d3:f0:0d:28:47:6c:aa:f4:bc:0d:60:33:a8:5d:b6:
b3:6b:2f:3b:40:17:c9:6f:34:d4:a5:cc:af:51:0a:a8:13:65:
fc:8f:58:35:4d:38:2a:e3:e1:9d:79:b1:b4:dd:ce:2b:59:25:
85:fc:9b:47:11:07:42:b2:f3:33:06:3e:c2:ae:fa:55:9c:2f:
d8:d7:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:20 2026 by rpki-client