Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/F46yJZ1_ZtncXoXA1gqtcgSgxks.roa
File: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (raw, json)
Hash identifier: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=
Subject key identifier: 17:8E:B2:25:9D:7F:66:D9:DC:5E:85:C0:D6:0A:AD:72:04:A0:C6:4B
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019F8A15D94CD4F547BF67733F8C1306D871
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/F46yJZ1_ZtncXoXA1gqtcgSgxks.roa
Signing time: Wed 22 Jul 2026 13:48:35 +0000
ROA not before: Wed 22 Jul 2026 13:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202538
IP address blocks: 212.79.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:15:d9:4c:d4:f5:47:bf:67:73:3f:8c:13:06:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jul 22 13:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178eb2259d7f66d9dc5e85c0d60aad7204a0c64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:b1:bd:a0:4a:fa:ea:45:21:6d:52:4b:8d:
0c:78:5a:c2:f4:12:c2:38:30:a6:f6:6a:e3:73:c4:
ce:b4:57:3a:09:fe:69:ad:15:9f:9f:78:e5:ba:29:
db:05:67:0b:4a:38:ed:0c:1c:0c:60:8c:ad:e2:76:
9c:8a:d4:ac:27:90:55:05:21:40:22:81:8b:b4:86:
62:ff:33:b7:66:5a:bc:32:24:bb:c6:de:e5:fc:91:
8d:c0:3c:63:ff:b2:f7:7a:99:50:cb:6c:02:9d:57:
6e:dd:8d:eb:aa:c0:48:fb:dd:3c:fb:4e:2e:4a:8d:
fe:0f:af:88:35:a9:83:92:67:38:1f:64:69:2e:ca:
db:2a:53:4a:05:89:0d:97:e4:37:f0:9f:5a:85:60:
ec:10:9b:f0:68:67:aa:01:fa:86:f6:24:6f:ae:62:
95:8f:33:a5:c0:68:0b:db:a5:f8:5e:4e:0d:e6:75:
84:a1:76:65:ff:0f:8b:24:ff:d2:2f:73:a8:07:e8:
2c:af:a5:e2:34:e1:1f:65:2f:ca:3f:2c:74:c1:e9:
2d:35:51:03:c1:f5:39:61:09:4d:dc:79:85:f8:f6:
25:8d:20:30:41:17:3a:e7:29:5b:58:78:e8:33:92:
75:5e:51:03:6f:c6:82:3d:ad:39:13:90:4b:8e:31:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:B2:25:9D:7F:66:D9:DC:5E:85:C0:D6:0A:AD:72:04:A0:C6:4B
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/F46yJZ1_ZtncXoXA1gqtcgSgxks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.79.122.0/24
Signature Algorithm: sha256WithRSAEncryption
06:31:c3:69:76:e6:4e:ec:1b:85:1f:c1:eb:2b:5e:24:fe:ec:
a5:b0:de:1d:8e:a9:c6:4a:51:3b:33:07:36:27:13:82:31:67:
b1:0b:48:1f:93:12:65:58:ef:bb:31:f7:8f:06:bf:7c:d1:b5:
b1:d8:4c:5e:89:bb:5c:8b:d1:ae:cd:38:02:0d:8d:56:5a:12:
9f:2c:ba:3d:30:47:84:31:ed:90:36:2a:c4:e1:ca:6d:13:e8:
3a:e5:f6:74:dc:43:67:a5:8f:ed:06:42:26:b0:53:e0:51:94:
c3:8e:b9:ba:0a:a2:35:a9:ac:32:3d:56:d4:2b:a8:f4:51:c0:
f6:ea:bc:39:b1:29:b1:ed:7c:f4:88:26:b4:fc:28:75:06:f5:
1a:6d:58:a5:0c:fb:b8:5e:f9:21:7d:5f:d6:20:dd:9e:fc:97:
fe:ab:35:46:35:5d:b2:35:2a:23:26:81:95:99:30:47:46:3e:
79:bf:05:92:bf:b4:71:4f:de:4c:90:35:bb:5b:f8:51:2a:8d:
a3:80:73:1c:03:09:d9:46:0c:86:6f:f0:3f:d7:6c:38:77:4d:
96:07:52:54:81:f6:71:e6:eb:dd:ea:06:1a:42:da:79:f5:9c:
f4:99:9d:3d:a7:3c:c0:f6:99:29:a0:ce:fe:77:8a:e2:22:54:
27:4f:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:14 2026 by rpki-client