Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/H-0NxZFEaGa8rFT4NFetgL2z2UA.roa
File: H-0NxZFEaGa8rFT4NFetgL2z2UA.roa (raw, json)
Hash identifier: NRoCKBMwAWFMC5bm7a5BdM9O6QlKUkaHpt27axnPwYg=
Subject key identifier: 1F:ED:0D:C5:91:44:68:66:BC:AC:54:F8:34:57:AD:80:BD:B3:D9:40
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019E33E921D0593299818CA0D35102DD9770
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/H-0NxZFEaGa8rFT4NFetgL2z2UA.roa
Signing time: Sun 17 May 2026 03:09:36 +0000
ROA not before: Sun 17 May 2026 03:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42439
IP address blocks: 46.249.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:e9:21:d0:59:32:99:81:8c:a0:d3:51:02:dd:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 17 03:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fed0dc591446866bcac54f83457ad80bdb3d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:3d:a1:85:a4:24:b4:e5:ef:e2:f4:51:76:
ea:dc:59:2c:7c:3c:a4:70:04:ab:6f:ce:8e:88:48:
85:a7:e6:f4:83:53:4e:d8:1d:7a:28:72:f0:12:8a:
8f:c3:a7:58:2e:af:a8:ce:6e:85:79:0a:3e:1e:60:
2a:ca:3a:1a:ad:f7:5a:15:df:5c:a4:7e:7f:5b:c6:
a0:17:d5:6a:01:fb:d1:43:37:70:f5:b7:ee:de:4f:
51:55:48:01:1c:0f:a2:9a:97:e6:82:21:a9:0b:b1:
77:57:b8:80:0c:94:58:b1:62:54:70:3f:11:5f:b6:
22:dd:1d:51:67:af:3e:8a:42:f0:0b:dd:cc:0f:2c:
ff:99:48:f7:aa:87:c0:5a:18:58:24:6f:d0:21:ee:
9e:b2:a8:20:9a:81:65:d7:fc:83:78:81:d5:01:10:
fa:05:0c:0e:45:a1:0f:eb:93:e7:d9:9f:19:a8:1d:
f4:2d:00:d1:31:29:82:39:b6:46:e0:48:a1:91:d9:
11:33:7d:9c:fa:3c:30:12:f0:4e:6c:22:0c:7f:25:
88:a1:b9:58:64:0a:14:55:24:85:dc:ba:6c:1e:a0:
8c:df:3a:bc:fa:fb:8d:8b:e4:62:b7:8a:3e:83:23:
c5:4a:15:a6:d3:48:9a:68:49:d6:c9:f7:4c:4d:34:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:0D:C5:91:44:68:66:BC:AC:54:F8:34:57:AD:80:BD:B3:D9:40
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/H-0NxZFEaGa8rFT4NFetgL2z2UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
79:47:1e:71:b2:64:3d:19:f2:75:26:58:09:f7:1d:58:56:ec:
ea:c3:d1:1a:d7:c6:30:9b:66:a5:d0:a4:25:cc:3e:fd:2b:bb:
7f:86:20:aa:1a:87:9c:6c:7e:eb:f3:6f:e2:f4:cc:9f:42:3b:
08:94:73:40:61:b0:56:50:08:62:84:b2:98:60:47:57:6d:e3:
77:67:94:c5:2e:ce:4d:1f:2a:bb:0d:28:ce:a1:23:7d:8c:1f:
98:37:73:87:1f:ec:c4:fa:d9:d6:a8:77:91:21:6e:ef:6b:d8:
7e:00:d4:70:f9:ad:04:a1:b0:d2:82:62:44:a8:00:fb:7e:44:
3a:2a:54:57:f6:82:cc:ad:4a:19:bd:b1:69:9b:ba:b9:e3:66:
78:30:4c:e6:50:56:5d:63:85:f6:14:1b:d1:f2:ce:be:7e:66:
10:77:c2:d1:e5:94:c2:30:b2:05:6e:d8:16:d8:ed:a4:5e:8f:
e3:c0:c3:a8:39:9a:a0:52:ae:5f:db:8d:05:81:f2:e9:dc:9f:
bc:04:4d:c2:d8:86:58:a5:1e:f4:12:50:01:1b:4d:c6:8e:b8:
86:66:fc:80:c1:2a:b1:df:17:b1:ec:d9:40:8f:db:89:a8:19:
60:1e:97:95:0b:da:71:99:bb:d3:ec:8f:6b:a8:3d:ff:f5:a0:
4a:5e:3f:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4z6SHQWTKZgYyg01EC3ZdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjYwNTE3MDMwOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmVkMGRjNTkxNDQ2ODY2YmNhYzU0ZjgzNDU3YWQ4MGJkYjNkOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1U9oYWkJLTl7+L0UXbq3FksfDyk
cASrb86OiEiFp+b0g1NO2B16KHLwEoqPw6dYLq+ozm6FeQo+HmAqyjoarfdaFd9c
pH5/W8agF9VqAfvRQzdw9bfu3k9RVUgBHA+impfmgiGpC7F3V7iADJRYsWJUcD8R
X7Yi3R1RZ68+ikLwC93MDyz/mUj3qofAWhhYJG/QIe6esqggmoFl1/yDeIHVARD6
BQwORaEP65Pn2Z8ZqB30LQDRMSmCObZG4EihkdkRM32c+jwwEvBObCIMfyWIoblY
ZAoUVSSF3LpsHqCM3zq8+vuNi+Rit4o+gyPFShWm00iaaEnWyfdMTTQssQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/tDcWRRGhmvKxU+DRXrYC9s9lAMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvSC0wTnhaRkVhR2E4ckZUNE5GZXRnTDJ6MlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvluMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Rx5xsmQ9GfJ1JlgJ9x1YVuzqw9Ea18Ywm2al0KQl
zD79K7t/hiCqGoecbH7r82/i9MyfQjsIlHNAYbBWUAhihLKYYEdXbeN3Z5TFLs5N
Hyq7DSjOoSN9jB+YN3OHH+zE+tnWqHeRIW7va9h+ANRw+a0EobDSgmJEqAD7fkQ6
KlRX9oLMrUoZvbFpm7q542Z4MEzmUFZdY4X2FBvR8s6+fmYQd8LR5ZTCMLIFbtgW
2O2kXo/jwMOoOZqgUq5f240FgfLp3J+8BE3C2IZYpR70ElABG03GjriGZvyAwSqx
3xex7NlAj9uJqBlgHpeVC9pxmbvT7I9rqD3/9aBKXj+j
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:52 2026 by rpki-client