Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_-e2acJ6Xq8WB0tN7tYDNfM95sg.roa
File: _-e2acJ6Xq8WB0tN7tYDNfM95sg.roa (raw, json)
Hash identifier: a4O5IU2+8gJT00l+j2FDX2fk3biXFGWaQuDJP5h6xmU=
Subject key identifier: FF:E7:B6:69:C2:7A:5E:AF:16:07:4B:4D:EE:D6:03:35:F3:3D:E6:C8
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019F3D70658C6E34CDC949D7E0DEAFCB2C67
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_-e2acJ6Xq8WB0tN7tYDNfM95sg.roa
Signing time: Tue 07 Jul 2026 16:36:43 +0000
ROA not before: Tue 07 Jul 2026 16:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211273
IP address blocks: 46.8.100.0/24 maxlen: 32
46.8.101.0/24 maxlen: 32
46.8.102.0/24 maxlen: 32
46.8.103.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:70:65:8c:6e:34:cd:c9:49:d7:e0:de:af:cb:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 7 16:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe7b669c27a5eaf16074b4deed60335f33de6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:06:a9:d2:40:27:19:6f:f8:3a:9d:50:55:
e2:c8:5a:c8:9f:e3:18:47:7a:ea:2b:4f:79:1d:f7:
0c:44:f9:63:a3:2b:61:d5:59:c5:fa:3a:7a:8e:b7:
c9:68:08:9f:8f:5e:ab:8b:ec:bb:c9:9f:e6:65:4d:
ef:37:97:ce:05:9c:b4:da:df:96:21:93:c4:15:a4:
a3:09:8a:20:b3:a4:51:5f:eb:c8:24:71:19:6f:48:
76:08:a3:ca:c3:89:9a:da:d0:41:0f:99:80:b2:b5:
8d:e8:5d:0f:76:9b:23:fa:24:91:98:cf:07:ce:a4:
4b:66:10:63:e6:8b:4a:fb:f8:b7:c9:e9:3c:f7:ba:
d1:a1:3d:d0:3b:5b:48:05:e0:6b:04:d0:86:d8:12:
4b:62:a4:b6:19:cf:74:69:12:d9:f2:2d:6d:f8:8f:
98:65:71:d8:4d:41:92:55:8f:a0:ac:f9:92:c1:37:
d2:f6:70:f8:f0:67:07:da:b0:b4:ed:5e:e0:6d:a5:
eb:7b:74:16:b4:08:8c:6b:f6:95:38:66:cc:63:75:
ad:2c:65:b1:aa:4d:bb:d2:d9:a0:01:5c:06:c3:66:
45:9e:8d:6b:55:77:04:6f:bb:8b:ea:50:06:d0:8f:
39:01:f6:bf:79:e2:1d:ff:7f:49:ee:9c:c5:8d:1e:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:B6:69:C2:7A:5E:AF:16:07:4B:4D:EE:D6:03:35:F3:3D:E6:C8
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_-e2acJ6Xq8WB0tN7tYDNfM95sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
Signature Algorithm: sha256WithRSAEncryption
69:7e:cc:67:0d:10:0a:75:0a:05:41:60:3a:ad:61:8e:b2:2e:
b9:16:76:3c:33:54:93:26:37:3d:94:33:86:33:d2:59:54:c1:
40:23:a0:51:22:93:69:3e:1a:b1:54:66:d6:e7:c9:c2:e3:3e:
27:bd:37:4b:0a:96:61:be:06:80:67:c6:35:1f:dd:24:47:d0:
1e:96:f8:3f:b6:a2:64:b6:30:54:ac:48:29:c7:8e:5d:18:eb:
b8:22:58:81:e6:b5:12:11:fc:ca:c3:29:3d:d6:9e:84:bc:a2:
6b:78:d3:10:97:86:bc:2f:fa:ef:ca:78:38:ff:55:28:de:a2:
af:cb:b2:4a:19:a4:9a:85:29:3c:14:c4:7e:b3:40:df:fc:fc:
bc:c3:23:d3:48:3a:0b:08:da:7a:b3:f6:76:7b:70:f1:b7:97:
ad:7d:8a:9a:05:3a:cc:d6:16:74:46:59:d0:a3:0d:98:bf:95:
ea:7c:40:7c:ae:19:71:ff:dc:f4:1a:68:9f:49:ed:5f:ff:8c:
1f:e1:37:fc:84:90:f0:5d:85:85:1f:37:3c:07:70:6c:b7:d7:
c1:49:62:d3:1b:94:8e:76:59:61:13:31:14:c8:f6:bd:3f:59:
2e:2c:df:54:d1:c9:f7:01:bf:4c:21:05:1a:1f:f9:65:ee:9c:
95:bd:f6:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ89cGWMbjTNyUnX4N6vyyxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwNzA3MTYzNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmU3YjY2OWMyN2E1ZWFmMTYwNzRiNGRlZWQ2MDMzNWYzM2RlNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s4GqdJAJxlv+DqdUFXiyFrIn+MY
R3rqK095HfcMRPljoyth1VnF+jp6jrfJaAifj16ri+y7yZ/mZU3vN5fOBZy02t+W
IZPEFaSjCYogs6RRX+vIJHEZb0h2CKPKw4ma2tBBD5mAsrWN6F0Pdpsj+iSRmM8H
zqRLZhBj5otK+/i3yek897rRoT3QO1tIBeBrBNCG2BJLYqS2Gc90aRLZ8i1t+I+Y
ZXHYTUGSVY+grPmSwTfS9nD48GcH2rC07V7gbaXre3QWtAiMa/aVOGbMY3WtLGWx
qk270tmgAVwGw2ZFno1rVXcEb7uL6lAG0I85Afa/eeId/39J7pzFjR7NqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/ntmnCel6vFgdLTe7WAzXzPebIMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvXy1lMmFjSjZYcThXQjB0Tjd0WUROZk05NXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLghkMA0G
CSqGSIb3DQEBCwUAA4IBAQBpfsxnDRAKdQoFQWA6rWGOsi65FnY8M1STJjc9lDOG
M9JZVMFAI6BRIpNpPhqxVGbW58nC4z4nvTdLCpZhvgaAZ8Y1H90kR9Aelvg/tqJk
tjBUrEgpx45dGOu4IliB5rUSEfzKwyk91p6EvKJreNMQl4a8L/rvyng4/1Uo3qKv
y7JKGaSahSk8FMR+s0Df/Py8wyPTSDoLCNp6s/Z2e3Dxt5etfYqaBTrM1hZ0RlnQ
ow2Yv5XqfEB8rhlx/9z0GmifSe1f/4wf4Tf8hJDwXYWFHzc8B3Bst9fBSWLTG5SO
dllhEzEUyPa9P1kuLN9U0cn3Ab9MIQUaH/ll7pyVvfaK
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:54 2026 by rpki-client