Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/R9mkDG939Vi0V6WPYxWOdOia5yY.roa
File: R9mkDG939Vi0V6WPYxWOdOia5yY.roa (raw, json)
Hash identifier: 4NF69kzNZytc4pvaMVN/lUR5TCOBAdYZbJ6/RSZBFvw=
Subject key identifier: 47:D9:A4:0C:6F:77:F5:58:B4:57:A5:8F:63:15:8E:74:E8:9A:E7:26
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019894DACFD2C061B3790D9D6B8049682914
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/R9mkDG939Vi0V6WPYxWOdOia5yY.roa
Signing time: Sun 10 Aug 2025 16:40:24 +0000
ROA not before: Sun 10 Aug 2025 16:40:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 46.148.32.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:da:cf:d2:c0:61:b3:79:0d:9d:6b:80:49:68:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 10 16:40:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d9a40c6f77f558b457a58f63158e74e89ae726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:8f:5d:9b:b2:7c:58:3d:a4:c4:08:05:5f:
f9:b9:ca:27:ba:2e:88:d2:d0:0f:35:b1:e0:87:d2:
b9:ae:ca:b4:0e:f8:13:ad:6d:5a:3c:7a:36:72:3d:
d7:3c:22:c3:d4:0c:92:53:f9:d2:ba:82:44:ea:8d:
45:9a:8f:7f:e2:40:e4:c0:8a:c7:cb:7a:1c:ae:9a:
4b:a1:10:43:96:ce:dd:71:bc:1b:78:4a:4a:97:4e:
93:29:72:94:af:35:91:43:17:98:89:50:a5:ec:fc:
75:c1:a2:46:f1:33:b9:9a:16:90:44:26:80:af:a5:
c3:d3:09:c2:3c:bd:89:52:dd:f0:ae:c9:d1:2a:60:
17:ee:18:13:e0:d4:6a:eb:0c:bc:ba:c5:35:ea:01:
fb:13:68:ec:ab:78:49:f4:08:94:a8:32:b9:9a:da:
bb:91:2e:46:57:a0:6d:bb:ae:57:35:c7:73:ed:d1:
3c:78:72:81:0f:73:d8:49:49:c0:64:5e:21:39:9c:
aa:79:88:18:72:f5:db:0f:54:a8:2f:04:9c:8c:c0:
93:c6:42:11:e6:4a:e3:3b:0c:dc:b3:9b:5d:59:b4:
55:a2:c5:49:f3:d6:4e:eb:ef:d0:e2:dc:72:44:1f:
82:55:33:29:9a:a0:f8:dc:c0:30:33:ec:1d:71:a7:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:A4:0C:6F:77:F5:58:B4:57:A5:8F:63:15:8E:74:E8:9A:E7:26
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/R9mkDG939Vi0V6WPYxWOdOia5yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.32.0/24
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
96:54:cd:20:ca:6a:33:51:68:f5:4f:34:e1:65:ba:d5:62:34:
42:eb:e1:25:4b:17:6c:b0:96:bd:93:95:7e:c5:2e:05:72:65:
da:4b:70:0f:84:87:14:cc:38:f1:58:fa:65:bb:56:22:7d:c5:
ab:f6:80:e1:16:11:23:df:0a:db:17:fc:49:03:0b:b4:9f:16:
6c:ec:52:38:b2:a9:4c:73:e5:f2:47:91:88:15:97:39:c0:ea:
49:6b:d8:4d:15:7c:12:bd:33:65:cd:47:e7:eb:8a:9d:f2:06:
92:42:40:0a:74:f5:66:c2:c4:d1:1a:cd:b1:d9:30:75:30:36:
46:4e:0d:ff:a8:03:d2:50:c2:ba:56:44:d8:43:9d:e8:6d:b3:
62:dd:88:d2:19:a1:d7:74:b7:fe:3a:b9:b4:3a:d5:2a:5d:3b:
c1:8c:be:3c:20:a6:98:de:c0:d7:6d:96:c2:e5:95:5e:77:b7:
04:05:69:c7:c6:49:c7:d8:39:42:ad:b2:b6:e0:45:67:91:f1:
21:61:b0:f5:2f:e7:f5:bf:00:b9:df:41:47:0d:df:58:6c:9b:
a0:2b:b9:47:af:a6:14:a3:c0:bc:c8:eb:ec:1e:b7:b6:e1:65:
e0:7d:d2:7b:b2:2d:0e:b8:3a:67:84:b7:c3:38:a3:61:08:92:
91:45:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:43:51 2025 by rpki-client