Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uz1T87fnxsJwAsa3YzRO8MavApI.roa
File: uz1T87fnxsJwAsa3YzRO8MavApI.roa (raw, json)
Hash identifier: ZB1WL6hC+zU1ftAWrO6I1ctvnX9xjTuhp8CxM9R4HUM=
Subject key identifier: BB:3D:53:F3:B7:E7:C6:C2:70:02:C6:B7:63:34:4E:F0:C6:AF:02:92
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A0CD23C09147A9EB218B107915725F3200
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uz1T87fnxsJwAsa3YzRO8MavApI.roa
Signing time: Wed 23 Sep 2026 07:21:07 +0000
ROA not before: Wed 23 Sep 2026 07:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142019
IP address blocks: 46.249.104.0/24 maxlen: 24
46.249.105.0/24 maxlen: 24
46.249.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:23:c0:91:47:a9:eb:21:8b:10:79:15:72:5f:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 23 07:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb3d53f3b7e7c6c27002c6b763344ef0c6af0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:67:03:aa:84:36:32:9c:0a:ab:21:37:75:
c5:05:d2:f5:d4:5d:c2:b8:d2:3d:e9:a9:a0:6d:b9:
36:1c:ab:e5:7f:71:10:a7:1a:11:2e:ff:bb:64:5a:
fc:37:17:58:43:b5:0f:21:45:5f:27:ff:86:b6:29:
c0:b2:6c:2c:81:15:07:fd:eb:fb:7a:7f:a9:0b:3e:
9c:00:6c:26:c5:02:56:06:4c:58:8e:ba:7a:ae:07:
04:8a:f3:e3:6b:79:02:e4:60:5a:28:8e:3e:a1:fe:
67:d5:50:01:ee:00:36:b2:90:40:71:4d:86:11:3e:
15:84:d3:58:c1:60:3f:24:78:fe:d6:0e:d5:cf:61:
a8:50:36:21:07:28:88:8b:89:5d:18:b3:20:49:81:
bb:b0:64:df:9c:cc:ff:7b:24:9e:64:8f:3a:82:2a:
27:ee:c5:49:a2:90:d8:e6:31:63:8a:f8:af:b2:bf:
eb:83:ad:e8:5d:55:34:ea:f6:c2:a2:22:e2:0b:b8:
0c:59:6c:a5:43:e8:0d:10:f7:40:47:28:f0:aa:3f:
7b:46:c2:1a:e9:b9:a5:c7:5b:85:44:d5:57:24:25:
ed:b5:a1:6d:8c:4e:73:82:f1:fc:5b:99:4a:d7:92:
5c:f9:9f:4d:f3:14:da:2a:a4:f1:d1:0d:50:92:2c:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:53:F3:B7:E7:C6:C2:70:02:C6:B7:63:34:4E:F0:C6:AF:02:92
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uz1T87fnxsJwAsa3YzRO8MavApI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0-46.249.106.255
Signature Algorithm: sha256WithRSAEncryption
71:13:45:d2:d3:3d:df:5e:64:87:61:c3:39:d5:85:ba:3e:46:
a6:61:51:84:89:22:7e:98:05:35:28:f5:4d:16:c3:25:f9:db:
54:cb:47:bf:d3:7b:7b:70:ef:e0:a5:c0:05:ba:71:b6:55:20:
10:e6:3a:fd:94:e6:34:34:ff:12:e7:89:fa:4f:60:a9:20:b5:
34:7a:84:be:d2:89:f7:5d:e4:eb:b6:c0:a5:d6:f5:f0:85:b6:
46:60:30:69:51:00:98:4f:8f:76:ea:7d:ac:0e:ba:dc:fb:87:
48:fe:bd:43:dc:ac:1d:a3:43:b0:2c:fd:c5:37:a8:f2:97:c7:
32:d3:96:5f:97:26:dd:a5:52:9a:a9:7f:64:fa:46:b7:27:e3:
99:80:34:94:8e:3c:d5:ff:b7:50:cb:c7:71:e7:c4:2c:74:1c:
4e:7c:52:a2:96:78:d3:c2:6e:e1:71:72:1d:6e:18:e3:3b:e9:
59:b9:91:20:62:ed:57:63:0c:3a:34:36:a1:7b:2c:ac:c0:b7:
dd:a3:46:a6:58:f1:ee:66:a0:c6:05:ff:dc:d8:6d:33:c1:d6:
84:4a:64:a2:62:c6:70:cd:97:78:92:28:9d:fe:71:e4:f7:c2:
1d:b9:2f:7c:2b:b9:85:e3:7a:83:f0:25:71:8a:6b:5c:58:a1:
a6:4d:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:18 2026 by rpki-client