Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8dBWTikeSwPQrxmOaOEevN3Ky5M.roa
File: 8dBWTikeSwPQrxmOaOEevN3Ky5M.roa (raw, json)
Hash identifier: LPQ/VxgH0ra1pTHuR48ftWH7EohOaNKkY/IoU3NZQmA=
Subject key identifier: F1:D0:56:4E:29:1E:4B:03:D0:AF:19:8E:68:E1:1E:BC:DD:CA:CB:93
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019F664E2B6212181EA3AE980B4999BEA7F0
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8dBWTikeSwPQrxmOaOEevN3Ky5M.roa
Signing time: Wed 15 Jul 2026 15:03:46 +0000
ROA not before: Wed 15 Jul 2026 15:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.205.32.0/24 maxlen: 24
185.205.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:4e:2b:62:12:18:1e:a3:ae:98:0b:49:99:be:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Jul 15 15:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1d0564e291e4b03d0af198e68e11ebcddcacb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:8f:4f:18:55:b3:4a:a4:7e:80:2f:db:02:
57:02:93:20:4b:0c:37:f5:d9:84:31:b5:d4:5b:b1:
e7:12:87:60:25:28:94:e3:2c:62:8c:a2:fe:19:cf:
04:04:ee:86:8f:94:5b:87:3d:a5:3a:2b:b1:bd:98:
93:92:72:8e:d9:66:db:0b:11:75:5f:94:47:f0:5e:
02:95:c5:a0:9d:cc:77:c8:85:0b:ce:fb:2d:1c:5d:
53:f3:8c:1e:b7:a6:00:4c:d8:89:04:2b:6d:d7:33:
84:2a:9b:8b:28:4f:cc:a2:8b:76:21:da:7f:e2:d3:
36:eb:a4:47:28:47:ed:90:ca:cb:69:96:be:ee:e1:
95:29:07:f4:3d:8c:ba:0c:bb:84:4f:c1:66:ae:5b:
19:60:fb:3c:b4:f8:6a:73:38:50:e2:a3:fa:0a:81:
f4:ed:4f:39:b2:8d:87:b3:7e:12:2a:52:e1:2c:43:
2d:8b:d8:93:6d:b9:f1:d2:18:a7:32:83:d7:61:83:
eb:af:f1:53:4f:ed:d1:37:f8:b0:7a:cb:a8:3b:e7:
fc:3f:4f:e6:9f:97:63:5f:b8:35:e6:3b:c4:12:f6:
9d:de:31:ae:4e:3b:ae:51:6a:f7:d3:43:d7:11:b8:
22:10:dc:51:60:d9:b4:7b:e3:95:b0:68:e9:a7:3b:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:56:4E:29:1E:4B:03:D0:AF:19:8E:68:E1:1E:BC:DD:CA:CB:93
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/8dBWTikeSwPQrxmOaOEevN3Ky5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.32.0/24
185.205.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d4:fa:16:a2:83:df:76:59:79:5c:15:73:0a:fb:eb:f1:79:
23:44:a6:7d:7d:64:38:4f:43:0c:9a:64:b7:ff:d3:1f:37:c2:
fb:e6:31:b8:27:aa:30:4f:3e:25:73:cb:d3:51:bd:76:a7:ba:
ea:79:14:b3:39:c4:89:85:42:81:10:42:30:9a:30:a7:8e:75:
df:12:58:8d:d1:40:d4:6b:44:a2:98:92:d1:84:cd:4f:35:a1:
5c:cd:71:7c:e0:a9:7c:de:53:11:e9:d9:6a:b0:f4:fd:09:f1:
19:a9:cf:72:f3:1d:48:7a:5e:60:68:ad:78:e0:c0:e3:cd:dc:
1f:86:71:96:0f:8b:af:3d:06:12:33:e8:fe:fa:4c:ce:fa:cb:
e0:18:32:b4:2a:69:af:44:ec:43:44:24:6e:82:e9:30:96:4b:
49:d2:d2:ce:ce:c2:14:c3:2b:fb:44:7a:c5:74:8f:b3:a9:fb:
19:57:c6:26:ad:2c:6d:fb:bf:2d:a2:70:71:d3:50:ce:99:9b:
23:95:35:80:f6:89:75:38:94:b9:a4:15:58:1e:2b:30:2f:5d:
fa:61:c2:49:9c:65:ff:e3:06:7a:2f:2c:f4:19:29:a8:5e:a1:
84:e1:cd:de:e3:e0:20:76:f9:37:dc:f8:ed:4e:23:b8:fb:c4:
5d:97:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:05 2026 by rpki-client