Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vYY70qMoAATYsahfxsYXCh1usKw.roa
File: vYY70qMoAATYsahfxsYXCh1usKw.roa (raw, json)
Hash identifier: UgWKhTRrEDLD5FjNLfoj5wmOgEPk+WtJOnjQzk2W4iY=
Subject key identifier: BD:86:3B:D2:A3:28:00:04:D8:B1:A8:5F:C6:C6:17:0A:1D:6E:B0:AC
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A1A69BEAAF6B277A4D668639BD0B86D20C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vYY70qMoAATYsahfxsYXCh1usKw.roa
Signing time: Wed 04 Nov 2026 12:49:58 +0000
ROA not before: Wed 04 Nov 2026 12:49:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199685
IP address blocks: 46.8.122.0/23 maxlen: 24
109.248.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:9b:ea:af:6b:27:7a:4d:66:86:39:bd:0b:86:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 4 12:49:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd863bd2a3280004d8b1a85fc6c6170a1d6eb0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:a7:2a:52:69:a5:47:bf:ab:48:f0:db:23:
b0:0e:52:1b:ca:09:12:f8:8a:92:55:68:b7:63:05:
9b:cb:ad:f2:7b:7a:a0:e5:0d:ee:06:96:ac:dd:a2:
bb:67:00:15:4c:bf:68:5d:89:69:b9:fa:e2:69:6e:
b3:82:21:0a:de:1b:0c:15:72:0b:e0:51:16:ab:71:
d4:53:e9:59:c0:e2:d9:88:d4:c9:dd:c3:ec:d9:4b:
5e:79:cf:00:03:de:b9:7a:61:60:b4:01:31:1f:8f:
c7:50:1a:51:96:a8:5d:cd:ac:15:2d:a3:65:33:5e:
5a:c1:65:dd:f2:1a:3b:11:ab:b7:a0:64:b1:7a:7c:
c2:ba:51:4a:69:f0:77:c0:5e:2c:2e:33:f8:42:d6:
e0:71:c9:ac:29:48:2f:61:b8:9c:26:9c:4a:3a:ea:
a2:7b:a2:87:b1:73:43:13:e9:cf:f4:7a:91:e2:ae:
dd:0a:86:23:1b:68:c1:b5:45:2b:30:ae:e9:62:a3:
f2:d6:7b:55:0f:93:ff:67:50:1f:51:98:94:b9:6e:
44:b0:40:37:f5:de:dd:1c:be:0f:f7:28:20:bb:8f:
31:6b:a6:14:8f:c6:83:15:05:56:d2:19:fc:9a:dd:
c7:1a:94:26:2d:50:6b:e3:89:0b:3d:f8:55:f4:8b:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:3B:D2:A3:28:00:04:D8:B1:A8:5F:C6:C6:17:0A:1D:6E:B0:AC
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vYY70qMoAATYsahfxsYXCh1usKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.122.0/23
109.248.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:63:39:1b:2f:2e:4c:f0:ec:13:5d:08:3a:e0:3f:de:66:4f:
84:b5:80:6e:dc:df:1d:47:3f:d5:ca:1e:32:78:2b:70:2f:85:
c2:77:9a:24:ce:92:b0:7d:47:43:56:28:05:1f:2b:75:44:ce:
f5:6f:96:2a:4f:6d:68:8f:7b:7b:49:1e:4e:4a:b2:11:2c:09:
ac:98:c4:1b:68:ca:fc:3f:53:da:b9:7d:78:ea:a7:db:9d:4d:
3e:c9:7f:0a:ec:09:6a:13:47:0e:68:69:39:78:57:15:02:c2:
73:df:56:2d:a0:e6:9f:29:8d:52:b6:c3:4b:7d:ab:c6:57:f1:
bb:46:94:eb:1e:cb:b0:44:78:37:73:55:f4:01:48:3a:76:df:
0e:0c:ac:f5:b1:09:62:6c:c3:ae:24:a1:bf:89:cc:a7:36:0f:
ea:c5:99:8e:2c:d6:54:3d:be:19:f1:b8:a1:67:89:87:5e:a6:
1f:5e:12:6a:eb:0e:c9:4a:68:99:d0:0b:80:f1:fb:b7:53:30:
4c:a7:b7:c8:06:26:ba:e5:13:a2:43:c7:35:76:81:8c:d0:5c:
bc:c7:f2:a8:91:13:10:65:fa:55:53:10:1b:ee:29:24:82:b4:
62:9a:e0:5c:b9:13:18:b3:8e:0a:54:46:4f:0b:76:01:3a:00:
05:a5:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:55 2026 by rpki-client