Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48nvCgeBf-V63FKQodRoca2zLSA.roa
File: 48nvCgeBf-V63FKQodRoca2zLSA.roa (raw, json)
Hash identifier: SDt4SONjbNrb8V4LkswvJQUjfXZR8Z2yoDac7Qwyv2M=
Subject key identifier: E3:C9:EF:0A:07:81:7F:E5:7A:DC:52:90:A1:D4:68:71:AD:B3:2D:20
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019EEFD46FCF44ECA19402C1A1F68E41E131
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48nvCgeBf-V63FKQodRoca2zLSA.roa
Signing time: Mon 22 Jun 2026 14:55:37 +0000
ROA not before: Mon 22 Jun 2026 14:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48770
IP address blocks: 95.47.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:d4:6f:cf:44:ec:a1:94:02:c1:a1:f6:8e:41:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 22 14:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3c9ef0a07817fe57adc5290a1d46871adb32d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:0f:e1:c2:6d:d9:eb:1a:01:44:cd:20:ec:
eb:73:46:46:24:5e:24:37:03:81:af:23:52:47:51:
b6:b5:04:a1:4a:7f:18:1e:4f:7c:89:9b:3e:b4:a6:
ad:f4:cc:57:00:c6:c9:7f:12:a9:28:47:bb:77:ce:
c6:47:08:41:ee:6e:97:f4:2a:d5:6f:2d:7d:63:3f:
22:e4:8d:84:b1:06:8c:e3:fb:90:80:fe:10:8b:0b:
3c:0d:1d:86:32:e8:3d:fa:cc:5c:c3:22:7c:fd:a4:
67:d1:e2:11:85:43:37:59:b5:dd:07:58:9a:84:c3:
cd:df:9a:8c:ca:47:47:f7:0c:ec:4e:11:a0:4a:29:
da:e7:8a:26:e7:eb:14:28:45:df:8e:00:97:a5:c4:
44:f9:d4:e2:c9:85:dd:4f:fe:ac:09:eb:a9:47:2c:
47:35:43:7b:30:0a:7e:e6:7e:a2:d0:e7:fa:6b:4f:
c6:c7:dc:5d:37:0f:ee:37:94:96:ee:fe:6c:bb:c1:
7a:37:cd:58:30:57:47:0f:de:42:6c:d2:40:83:22:
c0:91:fb:8b:80:93:02:6a:64:a7:25:d6:8a:ba:67:
78:2e:b8:68:2e:1f:10:98:ab:d3:3e:16:de:13:a2:
a1:14:11:70:79:72:bc:a1:f7:84:cd:60:32:57:bc:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:EF:0A:07:81:7F:E5:7A:DC:52:90:A1:D4:68:71:AD:B3:2D:20
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48nvCgeBf-V63FKQodRoca2zLSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ed:ea:7b:9f:52:dd:1b:03:45:6a:34:0e:a0:91:63:78:81:
54:24:a8:9d:d4:63:8b:66:3e:4a:03:95:87:18:12:65:32:16:
0e:0d:3b:86:c3:a0:48:48:35:9e:91:5d:4f:c5:9e:ac:c8:9d:
b7:2a:fd:ee:19:bb:bb:97:2c:e1:00:52:07:2c:a6:f6:c9:f9:
56:28:72:88:0e:86:23:39:42:3d:5f:d1:92:ce:23:4d:3a:21:
18:1c:81:34:ef:62:12:85:02:94:4e:85:2c:a9:24:4f:14:f0:
99:9d:a2:79:9d:ad:c2:51:85:c0:0a:e5:95:b5:e4:60:b9:c5:
e8:3c:40:f8:a3:8e:15:ad:db:73:50:16:dd:ab:c0:b2:3f:88:
53:62:d5:a2:39:b3:71:96:72:9a:ac:fa:7c:b0:05:7c:ab:83:
a4:5f:b9:fd:dc:b7:2f:a6:f9:84:68:6a:27:7e:7d:a9:8b:20:
dc:b0:1b:4e:1d:d0:54:d8:8c:8e:c3:f2:04:eb:7e:92:9d:3e:
d6:c3:17:57:e7:03:c2:b5:e3:8f:b3:59:a5:78:7c:15:4f:b6:
62:83:e5:10:57:d4:2b:f3:1c:65:13:97:59:db:44:8a:4a:4d:
82:01:99:45:83:c4:06:94:2f:3f:90:d9:5a:8f:81:dd:86:85:
41:7a:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:06 2026 by rpki-client