Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U_RTFM5Oj7b9VJQQnP-BECvDjhA.roa
File: U_RTFM5Oj7b9VJQQnP-BECvDjhA.roa (raw, json)
Hash identifier: LZyUvlBEVDWy7W7qqQyl0zg09VYoUFDVs9vq1dYi4bY=
Subject key identifier: 53:F4:53:14:CE:4E:8F:B6:FD:54:94:10:9C:FF:81:10:2B:C3:8E:10
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B5B0A7A19642E82F6486053B75B3A976
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U_RTFM5Oj7b9VJQQnP-BECvDjhA.roa
Signing time: Fri 18 Sep 2026 18:04:08 +0000
ROA not before: Fri 18 Sep 2026 18:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210162
IP address blocks: 46.34.18.0/23 maxlen: 23
82.109.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:b0:a7:a1:96:42:e8:2f:64:86:05:3b:75:b3:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 18:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f45314ce4e8fb6fd5494109cff81102bc38e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:e8:9a:49:09:bd:43:7a:00:0a:c8:f8:b9:
48:7b:d7:d4:dc:32:d7:b1:d3:75:83:02:0b:45:30:
90:17:02:a3:0b:be:ab:27:37:b1:f6:f6:4a:d4:45:
c6:7b:93:29:8e:f8:ed:9a:1a:48:81:00:7b:8f:d1:
a7:59:86:ea:0d:65:98:46:c1:b1:87:00:38:4b:cb:
dc:27:ef:7f:70:01:24:87:e6:b1:0c:47:4f:8a:4a:
4c:ca:15:cf:43:56:e2:1f:8f:14:82:50:26:a4:09:
bb:2f:41:91:0f:1b:18:ec:b6:3e:54:72:4b:6c:7b:
00:83:fc:74:58:f3:6e:e3:28:2c:16:68:8f:f3:4d:
29:98:62:c5:dc:20:f7:76:ff:fe:fe:d2:cf:92:04:
0c:7b:b2:74:51:93:21:2c:08:9e:21:b6:48:88:50:
56:c0:43:58:61:7e:66:52:08:1f:47:e8:5c:5a:f4:
b4:da:b9:f6:c8:d8:5c:56:5a:0b:cd:4a:7a:44:02:
52:ff:2b:07:93:97:c4:d1:0e:8a:b6:38:ac:09:e9:
e0:23:57:4b:6b:bb:b8:93:bc:56:48:b0:65:43:72:
f3:58:ac:49:b1:9d:06:15:55:fa:ae:dd:c3:47:39:
e8:98:87:2b:72:67:be:18:64:ef:9e:91:7d:e7:18:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F4:53:14:CE:4E:8F:B6:FD:54:94:10:9C:FF:81:10:2B:C3:8E:10
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U_RTFM5Oj7b9VJQQnP-BECvDjhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.18.0/23
82.109.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:fc:2f:8f:a1:69:03:9b:0f:0b:e8:3d:07:9a:e9:d4:c6:77:
e7:a6:63:fc:62:92:11:fa:16:74:e5:fd:44:fd:03:54:f5:0f:
f2:f4:50:dd:39:1e:af:be:fd:f4:45:53:37:1e:99:2f:f0:b4:
01:bd:4e:7f:b4:6c:aa:e6:ab:f9:f6:1a:30:9b:49:1f:04:e8:
c7:45:9d:bf:65:56:3f:f2:64:2b:1a:9b:dd:ff:d2:6a:ed:c4:
06:8c:23:ee:6d:e1:c8:1e:f0:51:30:88:ea:a3:f1:f7:1c:44:
ee:68:63:92:13:30:43:6a:4a:9e:88:f3:eb:e3:e9:b3:dd:23:
a3:86:8e:8a:7c:e9:cc:db:de:cf:3f:2e:6b:eb:5a:7f:3f:78:
fe:d7:99:0b:e5:28:50:11:f0:fa:bc:64:10:78:5e:b9:79:ab:
f8:1e:ea:8b:c2:ed:37:f9:b1:56:3a:96:2b:e0:1c:02:3e:ac:
99:79:0e:c9:f7:d2:ea:74:ad:4c:7f:79:d2:08:0e:7c:7b:7c:
31:cd:d1:15:4c:06:83:ec:33:b6:19:fb:55:65:49:5b:4d:fc:
e0:7a:dd:31:ce:3b:85:e1:a5:56:f6:24:62:ed:b5:5c:e7:48:
66:3e:58:da:ca:dc:f2:5a:83:db:66:08:ce:42:09:88:ae:0b:
e4:5d:a2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:53:17 2026 by rpki-client