Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/z8-jZ6GEYWB36iWch_lS2Ng67fY.roa
File: z8-jZ6GEYWB36iWch_lS2Ng67fY.roa (raw, json)
Hash identifier: yx8hHTeCfxMAeOhZaT2aDvKAVBwGFHT70QKtAa1LDlw=
Subject key identifier: CF:CF:A3:67:A1:84:61:60:77:EA:25:9C:87:F9:52:D8:D8:3A:ED:F6
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019E90B0401410D481435381A2D5E2187355
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/z8-jZ6GEYWB36iWch_lS2Ng67fY.roa
Signing time: Thu 04 Jun 2026 03:32:10 +0000
ROA not before: Thu 04 Jun 2026 03:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200277
IP address blocks: 46.249.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:b0:40:14:10:d4:81:43:53:81:a2:d5:e2:18:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 4 03:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfcfa367a184616077ea259c87f952d8d83aedf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:11:e9:91:27:e4:7a:3a:7d:06:14:62:e5:
42:b9:48:52:86:56:d3:3a:87:10:7e:c3:57:ca:15:
e3:3f:3a:59:3b:aa:6c:e0:06:9c:c5:62:b0:fc:cc:
72:50:01:ee:1a:bf:50:9c:d5:26:e1:75:50:4b:07:
04:11:6e:3f:68:b1:7b:b6:35:5b:48:ce:2f:e0:8b:
49:dd:f8:87:ab:4c:ab:80:4a:f5:15:96:9b:e0:ba:
85:43:1a:39:60:7c:84:04:be:11:f6:5e:60:38:73:
51:b0:14:79:d4:40:3b:21:27:f4:f0:8e:f6:88:3a:
df:92:49:5e:a9:b9:35:82:c9:74:dd:11:07:e5:31:
a9:dc:fd:42:ae:94:cc:58:bd:26:ab:06:d7:29:f2:
7b:9b:73:82:5e:53:18:af:64:f4:40:fb:d2:de:27:
b6:02:60:93:a0:58:67:0e:8b:21:f1:6e:ce:25:f1:
94:99:76:95:63:27:67:4b:63:91:23:78:c4:c1:bc:
b7:aa:e8:2b:c1:ac:75:9d:29:c1:43:83:6e:ac:1f:
c7:56:88:76:1b:df:3c:77:13:ba:16:05:04:8f:09:
97:5e:c2:0a:b4:93:76:a8:ad:58:ee:64:10:0e:56:
ab:14:45:9c:73:30:18:06:3a:c7:bc:75:03:d3:4c:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:A3:67:A1:84:61:60:77:EA:25:9C:87:F9:52:D8:D8:3A:ED:F6
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/z8-jZ6GEYWB36iWch_lS2Ng67fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
62:82:12:cb:37:5a:0b:4b:0f:6b:22:15:3d:a9:7b:16:d9:ab:
17:56:bf:ac:88:a2:85:55:29:c6:92:7f:e3:90:56:21:84:7e:
63:b1:eb:4c:5f:f5:7a:b1:75:4c:ef:57:b4:80:3e:5c:cb:d9:
39:aa:8d:a7:ce:a3:ce:f6:f2:90:be:da:a5:72:f2:d4:d9:f5:
2c:d4:0a:52:4d:d1:a7:98:25:01:99:d7:4a:aa:8c:ce:1a:07:
5f:8b:69:47:02:71:c8:04:97:03:4b:bc:cd:f9:d8:55:55:9c:
78:36:09:35:98:f7:26:c9:f5:2b:2c:69:ea:2d:8d:bb:42:8c:
54:20:16:8e:e3:06:81:8b:62:84:85:a0:dc:55:5c:1d:0a:ed:
12:c4:4e:7b:92:61:47:23:98:8b:32:96:8f:02:08:54:db:46:
e6:30:4e:75:36:b9:34:f1:be:51:12:98:8e:2f:81:66:8e:1e:
0f:af:49:a3:73:86:1b:33:89:a3:0d:81:3e:9c:e6:5c:96:80:
ea:05:ed:bf:23:74:21:64:c9:4e:4c:e7:43:37:b0:ba:62:b0:
6a:fe:75:40:9b:fc:f3:6b:ac:57:c2:4b:bf:91:11:22:8c:8d:
96:9d:4a:5c:8f:d8:c5:20:f3:ba:0e:b2:1e:39:7d:37:e6:d3:
ea:b7:98:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6QsEAUENSBQ1OBotXiGHNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjYwNjA0MDMzMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmNmYTM2N2ExODQ2MTYwNzdlYTI1OWM4N2Y5NTJkOGQ4M2FlZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KkR6ZEn5Ho6fQYUYuVCuUhShlbT
OocQfsNXyhXjPzpZO6ps4AacxWKw/MxyUAHuGr9QnNUm4XVQSwcEEW4/aLF7tjVb
SM4v4ItJ3fiHq0yrgEr1FZab4LqFQxo5YHyEBL4R9l5gOHNRsBR51EA7ISf08I72
iDrfkkleqbk1gsl03REH5TGp3P1CrpTMWL0mqwbXKfJ7m3OCXlMYr2T0QPvS3ie2
AmCToFhnDosh8W7OJfGUmXaVYydnS2ORI3jEwby3qugrwax1nSnBQ4NurB/HVoh2
G988dxO6FgUEjwmXXsIKtJN2qK1Y7mQQDlarFEWcczAYBjrHvHUD00wmzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/Po2ehhGFgd+olnIf5UtjYOu32MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvejgtalo2R0VZV0IzNmlXY2hfbFMyTmc2N2ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvluMA0G
CSqGSIb3DQEBCwUAA4IBAQBighLLN1oLSw9rIhU9qXsW2asXVr+siKKFVSnGkn/j
kFYhhH5jsetMX/V6sXVM71e0gD5cy9k5qo2nzqPO9vKQvtqlcvLU2fUs1ApSTdGn
mCUBmddKqozOGgdfi2lHAnHIBJcDS7zN+dhVVZx4Ngk1mPcmyfUrLGnqLY27QoxU
IBaO4waBi2KEhaDcVVwdCu0SxE57kmFHI5iLMpaPAghU20bmME51Nrk08b5REpiO
L4Fmjh4Pr0mjc4YbM4mjDYE+nOZcloDqBe2/I3QhZMlOTOdDN7C6YrBq/nVAm/zz
a6xXwku/kREijI2WnUpcj9jFIPO6DrIeOX035tPqt5if
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:13 2026 by rpki-client