Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/850KtEe2xcqmKEfmNfSIV4cO3ow.roa
File: 850KtEe2xcqmKEfmNfSIV4cO3ow.roa (raw, json)
Hash identifier: phHrYuGGkiJtZUfLJhrRJl7lWlOv+7DSIS34Bt7sZVI=
Subject key identifier: F3:9D:0A:B4:47:B6:C5:CA:A6:28:47:E6:35:F4:88:57:87:0E:DE:8C
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A0CDE319860279D7DBF17E4A53306B6A69
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/850KtEe2xcqmKEfmNfSIV4cO3ow.roa
Signing time: Wed 23 Sep 2026 10:50:07 +0000
ROA not before: Wed 23 Sep 2026 10:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
109.74.72.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00::/32 maxlen: 32
2a13:1b00:1000::/48 maxlen: 48
2a13:1b00:4000::/48 maxlen: 48
2a13:1b01:a00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:e3:19:86:02:79:d7:db:f1:7e:4a:53:30:6b:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 23 10:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f39d0ab447b6c5caa62847e635f48857870ede8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:a8:da:cd:27:01:3f:ef:4c:04:00:f5:35:
06:f2:49:fa:1b:a1:96:8b:97:f5:80:ca:1d:89:26:
cb:0f:21:24:25:f7:f9:01:c5:4b:43:76:a1:47:3c:
ea:48:94:9f:96:03:2a:5d:d5:13:5e:53:77:27:cb:
a2:8d:29:85:e7:cc:4a:78:69:b4:13:cf:bb:7e:45:
ae:d7:3b:97:ae:7f:9c:c6:04:d6:42:64:c1:ee:09:
92:9d:f0:a9:3a:0d:f1:2b:32:c0:a3:2e:b6:48:44:
de:cf:2a:81:97:c6:6a:9d:59:b7:47:4d:65:9b:9e:
9b:9e:2c:c0:e6:31:f3:2a:21:81:88:7c:58:e6:53:
76:69:44:5f:47:f7:ba:aa:41:0c:18:bc:12:69:6d:
a7:50:84:cd:fa:09:3b:fd:dc:32:5c:02:7d:17:64:
c8:2a:2e:b3:f1:75:0a:91:0c:48:d2:38:24:7b:7b:
2e:c4:89:65:e3:e5:ba:96:2b:99:af:ff:57:f2:ba:
eb:65:38:a0:a3:64:31:2b:ac:ab:7b:24:03:f2:75:
68:f9:98:c0:12:f3:e2:a3:b6:1d:ac:19:f9:84:c8:
d6:cf:f8:b3:8f:3f:84:27:1c:b7:23:4c:d8:eb:05:
e2:b0:9b:77:27:bd:a4:52:12:ab:57:23:4e:d1:5d:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:0A:B4:47:B6:C5:CA:A6:28:47:E6:35:F4:88:57:87:0E:DE:8C
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/850KtEe2xcqmKEfmNfSIV4cO3ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
109.74.72.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
44:92:83:b1:67:44:75:ee:33:f3:7c:39:20:34:ab:b9:43:99:
54:4c:ae:12:a1:df:9b:2d:1e:0b:05:16:57:84:0e:19:f8:ee:
82:66:75:92:c5:cf:1e:5e:6c:36:29:9b:30:4b:da:fc:96:25:
e1:14:4c:53:c4:3e:ac:65:66:a0:70:e0:36:bb:55:92:be:9e:
61:4b:42:79:a6:e6:c4:c0:6d:c7:40:5d:b7:2e:39:55:0f:e0:
b0:04:a0:73:14:c0:cf:23:09:f8:fb:49:45:c3:bc:06:cf:62:
51:4b:56:fa:93:4e:34:7a:0f:a9:18:4c:cd:84:2a:ec:28:88:
59:bd:dc:17:07:b5:e0:65:41:d3:8c:cf:88:6d:1d:1a:7e:f5:
6b:95:06:0d:72:8f:f9:5a:7f:4a:5f:64:6e:ad:25:b4:4f:fe:
09:23:c4:4a:b6:50:c1:7e:8d:e6:6f:54:2f:69:94:64:47:50:
5f:d7:d1:3e:5b:44:d4:20:5e:60:c3:b7:b1:d3:0b:90:d6:46:
c7:83:4b:00:05:c4:03:8e:38:20:d1:d0:42:44:9a:bd:16:cf:
5f:a7:cf:28:81:ec:50:0d:38:ce:00:47:44:3c:38:fc:eb:cf:
f6:44:05:d1:2a:08:60:dc:6c:ea:d2:03:6f:09:46:82:43:f9:
9c:d6:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:09 2026 by rpki-client