Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/04Jned94Tm4i1zjB6zNQbqDkj_E.roa
File: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (raw, json)
Hash identifier: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=
Subject key identifier: D3:82:67:79:DF:78:4E:6E:22:D7:38:C1:EB:33:50:6E:A0:E4:8F:F1
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 019F236884955C3B3C7BDE7FD2B56378A431
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/04Jned94Tm4i1zjB6zNQbqDkj_E.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203995
IP address blocks: 46.46.192.0/18 maxlen: 20
46.230.128.0/19 maxlen: 20
91.149.0.0/19 maxlen: 19
91.149.48.0/20 maxlen: 20
93.179.0.0/19 maxlen: 20
178.72.32.0/19 maxlen: 19
185.83.164.0/22 maxlen: 22
2a05:9cc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:95:5c:3b:3c:7b:de:7f:d2:b5:63:78:a4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3826779df784e6e22d738c1eb33506ea0e48ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:fa:aa:8a:7c:ad:37:ed:e5:0a:95:dc:4e:
8c:7f:61:d9:8b:68:99:30:ad:74:2e:7a:92:71:d9:
f8:6b:62:21:a6:6f:dd:a9:ee:f2:44:53:bb:3b:c3:
6b:6b:cf:38:f7:e1:7b:0f:f1:1c:e6:6f:3b:ec:35:
3f:cd:78:e9:1a:4f:6f:7f:ee:81:f9:e1:d4:75:56:
13:cc:a1:5a:64:2f:67:a5:8e:5a:2f:7b:d8:94:95:
c2:ab:c8:b7:b4:0b:70:5d:0c:87:05:d3:51:be:ce:
58:b9:95:b9:90:d6:ec:c4:27:f1:af:8c:95:df:56:
39:1b:c1:85:6b:d7:d2:9e:24:e9:9f:3c:3e:76:aa:
8d:89:0d:56:1e:ea:15:6c:df:83:d7:36:99:e3:f6:
a5:cc:b1:c0:a0:78:63:ca:a4:97:c9:ac:6b:01:1c:
e5:76:c5:f9:c1:f0:3e:52:3e:bb:bf:43:bf:9e:d8:
81:e3:d7:dd:da:20:5f:ec:4c:d4:56:1d:d4:04:f9:
98:d2:b3:49:ac:f8:71:a0:8b:3b:90:26:a6:ba:3d:
7b:c1:70:0c:70:70:62:82:14:8d:18:9d:38:2a:2e:
14:ec:7b:db:9b:1d:31:ae:e1:bb:41:cd:ea:ef:75:
16:c9:39:34:03:5a:31:47:8d:18:41:fd:17:5c:be:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:67:79:DF:78:4E:6E:22:D7:38:C1:EB:33:50:6E:A0:E4:8F:F1
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/04Jned94Tm4i1zjB6zNQbqDkj_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.192.0/18
46.230.128.0/19
91.149.0.0/19
91.149.48.0/20
93.179.0.0/19
178.72.32.0/19
185.83.164.0/22
IPv6:
2a05:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:4e:62:aa:f0:b9:0a:5b:a1:f2:05:eb:0f:96:58:53:98:ed:
3d:be:3b:5a:0a:58:b4:db:a9:b0:30:58:6f:19:a4:e2:00:d4:
c3:b6:e8:fc:97:5e:a7:56:14:1a:cf:70:78:d7:14:1c:da:e8:
9f:b9:f9:23:6a:c3:07:31:65:8b:c5:0e:23:9e:68:c0:7d:e8:
70:01:0b:ef:68:56:a8:4b:11:f1:0a:d9:c3:35:63:af:13:e4:
54:8a:94:ab:0f:0f:fd:97:c5:2f:00:eb:d5:66:12:db:84:b5:
d6:b0:23:17:c0:ba:d3:e2:3c:af:89:ad:5f:4c:d2:12:e4:3a:
a2:fd:98:f9:aa:3c:50:f2:f7:9a:58:8e:bf:7a:37:b0:d8:83:
0c:53:86:dc:90:5c:06:d9:b6:98:b4:65:27:e5:86:63:4a:93:
96:6a:dc:ad:6b:f8:d8:76:4e:c2:8f:13:bb:76:7e:60:b3:82:
28:22:cf:f7:e4:00:79:80:41:f5:36:09:44:2b:e7:70:94:3e:
74:3b:d8:90:a5:d2:0c:db:0b:ed:54:3d:9c:95:93:88:7c:5c:
79:6d:d3:ad:1d:4d:d7:40:8b:1b:0f:cb:a4:c3:90:b8:70:f2:
a8:1d:34:e8:3b:62:28:6d:6a:a8:69:69:e5:b2:d2:3f:da:5b:
ba:ae:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:48 2026 by rpki-client