Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/41oXR0Dcl8hEJOhB0K8Qrklv49c.roa
File: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (raw, json)
Hash identifier: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=
Subject key identifier: E3:5A:17:47:40:DC:97:C8:44:24:E8:41:D0:AF:10:AE:49:6F:E3:D7
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 019CFCFEE732655673657474CB123AADE3F9
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/41oXR0Dcl8hEJOhB0K8Qrklv49c.roa
Signing time: Tue 17 Mar 2026 18:11:29 +0000
ROA not before: Tue 17 Mar 2026 18:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200079
IP address blocks: 185.46.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:fe:e7:32:65:56:73:65:74:74:cb:12:3a:ad:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Mar 17 18:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35a174740dc97c84424e841d0af10ae496fe3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:62:c6:82:9b:f1:1b:1d:ff:3b:87:05:08:
d2:1a:5e:91:43:23:ba:48:2c:6f:bd:10:67:c3:e3:
93:a3:3b:00:75:f0:cf:4d:ce:3a:4b:8f:29:17:b0:
45:80:d1:7c:4a:80:43:4a:1e:91:0d:4e:22:33:b8:
2a:f4:f5:1f:eb:e1:f0:42:df:52:60:88:a5:a0:69:
87:e3:ee:71:23:5f:56:d8:62:2b:bf:09:eb:93:cc:
10:7f:0d:73:01:b0:af:2a:59:49:2f:45:7e:f8:76:
3b:af:59:a1:c8:df:0c:e9:25:c6:eb:bf:79:8f:ce:
ef:44:3b:1b:cd:e1:83:fa:1b:23:db:2f:91:62:c3:
f7:6b:61:3f:f5:c8:cf:b6:00:bb:96:c4:d3:b2:e8:
c1:19:96:ef:f1:b0:82:f1:e8:04:4d:19:b5:02:e2:
25:c7:2c:73:f5:62:92:17:f8:b4:04:d0:d9:79:30:
22:ba:61:53:c2:15:e0:0c:13:bf:ea:f3:38:e6:ee:
d8:42:ff:4b:67:14:a8:34:c6:0f:55:5e:d8:54:96:
90:ff:01:39:93:cc:56:e9:bf:b0:8a:b0:aa:5b:d6:
ef:b3:f8:6b:f0:e1:11:04:ba:98:a2:8e:f3:ae:5c:
d5:d0:d6:a4:1d:42:dc:02:2d:07:f5:ca:9d:f0:19:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5A:17:47:40:DC:97:C8:44:24:E8:41:D0:AF:10:AE:49:6F:E3:D7
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/41oXR0Dcl8hEJOhB0K8Qrklv49c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.115.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d0:20:68:cd:7c:ab:7b:64:50:98:ff:19:37:0d:5f:7c:a4:
b3:b4:75:23:0d:f7:db:4f:4f:d4:dc:de:93:aa:dd:08:f3:aa:
cd:16:01:51:5f:6e:1a:ba:82:7b:c9:a0:76:05:f7:2c:56:af:
14:5d:66:c8:45:b9:2d:72:a5:25:fc:20:31:ab:89:00:35:8c:
5e:7b:99:e1:3a:0e:0a:b6:d0:16:ae:92:d9:be:73:08:50:8e:
52:75:9b:2c:0b:1e:de:68:d1:b9:96:5d:26:47:80:b1:c3:3f:
26:f9:4f:44:a6:6d:b1:15:78:8e:73:fa:11:5c:3b:c6:11:18:
92:ad:cc:60:f2:fb:51:c8:6d:b3:45:ca:35:cb:de:10:26:e1:
1f:6c:0d:35:99:b2:d4:b5:0a:9d:59:00:8a:01:78:b3:c3:f3:
a6:33:f4:68:9e:d6:13:4e:66:7c:a4:81:e9:f6:90:78:2a:a4:
5a:05:49:07:29:62:b6:3e:f9:22:7f:25:2e:50:3d:c2:78:36:
7c:6b:24:70:c5:7e:fc:9c:11:68:3f:66:99:bf:4c:b1:f3:0d:
13:4c:a0:45:2d:c8:1c:f0:a6:e6:5c:9c:72:58:90:2b:37:4b:
43:0d:18:47:c1:51:fe:00:0e:3e:b5:c7:38:5f:6c:63:cf:0e:
11:dd:4b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:35 2026 by rpki-client