Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2cv6TwhyIM25gjtqt58_3mErWc.roa
File: F2cv6TwhyIM25gjtqt58_3mErWc.roa (raw, json)
Hash identifier: BtD1pfvw4GMBlzVjE81FgnlmdXecGPNGwAwUv1QQ1EI=
Subject key identifier: 17:67:2F:E9:3C:21:C8:83:36:E6:08:ED:AA:DE:7C:FF:79:84:AD:67
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F3BA3E4D5A238402EAB1BCB2FAC56689E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2cv6TwhyIM25gjtqt58_3mErWc.roa
Signing time: Tue 07 Jul 2026 08:13:44 +0000
ROA not before: Tue 07 Jul 2026 08:13:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204629
IP address blocks: 94.198.46.0/24 maxlen: 24
2a0a:e9c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:a3:e4:d5:a2:38:40:2e:ab:1b:cb:2f:ac:56:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 7 08:13:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17672fe93c21c88336e608edaade7cff7984ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:64:e5:65:b5:f2:90:57:5c:e9:45:9e:5c:
02:a9:5a:34:e9:3f:f8:7c:84:71:bb:33:8a:cf:24:
62:7f:21:ed:aa:e6:e1:17:e6:d8:61:3f:ef:6e:a6:
4f:69:3c:02:6a:af:c6:94:de:85:6b:96:8f:15:6c:
0e:bf:0d:db:b5:72:a0:22:c4:26:0f:39:0d:fe:6d:
39:9d:cf:f3:82:69:03:58:31:66:b8:1d:d6:26:c2:
8b:6e:34:19:b6:8b:d6:36:28:61:52:bc:65:c9:b9:
0f:74:9b:1a:ce:45:c6:3e:2b:4a:48:4a:f9:05:01:
44:0b:79:2d:c4:50:9c:ba:d6:42:32:b4:9e:0b:8e:
d8:44:66:94:be:62:e6:3a:7c:1a:ec:7a:b5:ed:4e:
c4:93:cb:0b:fa:85:96:63:a4:61:1b:7b:ed:ba:a6:
3f:4c:fb:8b:f1:ac:4d:17:5e:d3:a8:2f:e2:1e:09:
7f:03:c3:ad:47:c7:aa:6e:33:3f:b3:f8:71:6b:c3:
70:68:27:78:a7:eb:89:e7:9d:54:4a:33:96:41:be:
1f:a3:35:57:9a:5f:4a:1e:1c:c9:7c:98:cf:12:27:
97:c7:4c:4c:14:e0:e4:62:e7:2e:fc:5f:d5:3c:f7:
64:ea:04:95:f8:41:f4:27:02:5e:7e:2a:9f:31:75:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:67:2F:E9:3C:21:C8:83:36:E6:08:ED:AA:DE:7C:FF:79:84:AD:67
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/F2cv6TwhyIM25gjtqt58_3mErWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.46.0/24
IPv6:
2a0a:e9c5::/32
Signature Algorithm: sha256WithRSAEncryption
56:dc:31:49:66:7e:55:a8:dd:93:5a:c4:b4:a8:10:10:f7:b0:
53:8b:32:e7:4a:b9:67:28:58:61:ac:28:33:7c:06:54:b0:16:
67:00:08:f9:f8:51:2b:f8:51:51:27:f0:cd:a3:ad:36:d6:98:
27:9d:a1:93:1b:3d:3f:ac:3d:9a:cc:bc:af:4d:0f:c5:f4:f0:
ff:e9:36:bc:f4:72:8b:b3:35:1d:17:7e:ba:e3:47:50:15:6c:
1e:b4:3b:95:37:29:73:d0:0b:79:0f:41:84:b5:32:6e:5f:66:
92:5c:97:9f:a9:4a:d5:a7:97:45:0e:2a:82:c2:69:eb:19:3f:
b4:79:da:94:c8:6c:b6:ca:cf:5b:d2:02:07:1b:db:6f:3e:67:
2e:d2:76:d0:28:3e:45:e4:79:b6:f3:55:94:dd:cc:f5:d1:aa:
99:25:ae:fb:ec:27:17:ab:73:b4:1e:be:69:b6:9d:07:47:e8:
65:4f:23:13:50:46:d0:33:81:35:ec:1a:91:ce:8a:ca:19:8a:
f2:af:4a:66:d3:22:b8:61:39:b1:d3:9c:9f:5f:a0:8d:81:d0:
7d:47:7f:0b:33:43:97:a6:6e:1d:a1:42:30:19:e4:91:33:89:
be:74:3b:5e:5c:c4:af:46:07:57:8c:ef:be:b6:52:f5:89:27:
4b:e3:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:24 2026 by rpki-client