Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/994y6tFXvFBpHL8D6OuIQSpj77Y.roa
File: 994y6tFXvFBpHL8D6OuIQSpj77Y.roa (raw, json)
Hash identifier: Z1LSSQTeTjnWURwtsyyc+qhcfiuOXxLKc+tq8rcXxgU=
Subject key identifier: F7:DE:32:EA:D1:57:BC:50:69:1C:BF:03:E8:EB:88:41:2A:63:EF:B6
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019F6A934EEA61A1008DF9FDDBDD1969EFCA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/994y6tFXvFBpHL8D6OuIQSpj77Y.roa
Signing time: Thu 16 Jul 2026 10:57:46 +0000
ROA not before: Thu 16 Jul 2026 10:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57304
IP address blocks: 46.8.177.0/24 maxlen: 24
109.248.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:93:4e:ea:61:a1:00:8d:f9:fd:db:dd:19:69:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 16 10:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7de32ead157bc50691cbf03e8eb88412a63efb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:bb:d1:b5:18:82:a8:ab:44:b4:68:c4:72:
8b:d1:33:03:11:dd:fe:48:49:68:c9:57:64:82:8e:
99:1c:ac:1d:18:5e:8b:b3:5b:60:74:67:9f:c1:a7:
2c:c1:94:12:12:00:36:3f:a5:44:51:4f:f0:74:e2:
d4:4b:91:81:b8:e8:4f:a5:0a:c1:3d:b3:03:7f:8f:
df:b5:bd:5f:6f:11:8f:de:e3:63:2a:11:69:64:c7:
6e:d4:5b:9b:13:94:da:d5:14:5d:49:e4:d6:16:74:
8b:08:7b:42:97:81:50:f3:00:af:49:1c:f1:65:24:
65:fe:d4:2b:66:8e:9f:55:6e:a1:5d:b2:8d:2f:90:
74:78:c3:25:9f:7f:91:2d:e1:c4:2a:8d:6c:61:b3:
ed:45:02:3f:95:65:09:c4:5c:0d:f9:b9:39:13:0e:
80:ad:f8:8f:3c:c5:71:29:09:5b:5a:5a:6f:f5:8c:
6c:a8:ac:81:a4:67:32:2e:22:c0:34:de:6e:12:ef:
54:7f:cc:08:13:82:9d:4e:ec:38:7e:24:43:48:9d:
3c:bd:61:b3:59:80:a4:3f:4d:6c:95:f9:3a:30:76:
41:84:37:10:23:ba:12:38:48:f6:23:83:91:40:49:
39:9b:8e:3c:60:8b:75:c0:3b:62:4c:7d:2b:a2:4c:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:32:EA:D1:57:BC:50:69:1C:BF:03:E8:EB:88:41:2A:63:EF:B6
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/994y6tFXvFBpHL8D6OuIQSpj77Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.177.0/24
109.248.196.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0c:a6:29:74:00:08:74:f1:9d:89:cd:81:d0:8d:88:59:d4:
85:f1:23:30:6a:e6:ec:74:ed:c6:0d:4f:38:49:8a:be:b9:76:
a0:d9:53:d2:cc:fd:b8:e3:e7:f9:78:06:89:f1:51:73:15:a6:
b6:d0:dc:10:69:5e:f4:7b:fa:4e:fc:f2:5b:6d:e5:66:e2:d3:
7b:2d:7a:2a:ea:0d:69:ec:12:b0:e8:2d:ba:5a:a3:3c:55:a9:
83:5a:19:13:f8:42:c8:9f:da:2b:d1:ad:9e:13:5f:a4:b3:4b:
04:35:44:d4:0d:8d:f4:08:23:0f:99:fa:a3:05:4c:e8:19:ba:
b8:1f:9c:61:10:cd:9a:fb:7b:33:97:b3:b0:fd:2a:fc:ac:a7:
e0:64:fc:98:41:13:02:3d:fe:bc:19:4b:b7:7b:92:01:8f:52:
21:82:40:00:8d:c1:d2:aa:4e:fd:4c:53:43:e4:f0:9c:22:00:
90:07:03:06:9a:45:73:ce:de:5e:67:fc:26:99:0c:91:8c:0f:
34:3d:71:91:2e:d1:5e:d2:be:74:29:a8:41:f6:90:f5:b8:b2:
5b:63:69:77:33:71:3d:4e:8a:21:46:e6:7d:4f:af:c2:7e:ed:
7a:8b:15:11:14:7c:b1:dd:97:8b:67:07:f6:d1:12:be:55:d4:
ac:20:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:57 2026 by rpki-client