Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/IuJcF4mH2-0BSlT6G6AhKea-qcA.roa
File: IuJcF4mH2-0BSlT6G6AhKea-qcA.roa (raw, json)
Hash identifier: T022zetJkpJSmZy29rCTHnD8e/gW5HPSAFMOxFPo87E=
Subject key identifier: 22:E2:5C:17:89:87:DB:ED:01:4A:54:FA:1B:A0:21:29:E6:BE:A9:C0
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019CF6E06FAD03768B964434A2338DFC9ADD
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/IuJcF4mH2-0BSlT6G6AhKea-qcA.roa
Signing time: Mon 16 Mar 2026 13:40:29 +0000
ROA not before: Mon 16 Mar 2026 13:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213565
IP address blocks: 46.255.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:e0:6f:ad:03:76:8b:96:44:34:a2:33:8d:fc:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Mar 16 13:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22e25c178987dbed014a54fa1ba02129e6bea9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:4a:0f:17:2b:6f:44:f9:26:87:64:b9:7c:
0a:ce:00:60:11:a0:80:fb:31:32:4d:dc:1f:fa:da:
20:57:56:33:0e:85:dc:8f:2c:17:3b:4c:8c:ff:53:
a5:ab:48:52:21:2a:09:c1:f7:17:c6:68:3b:62:ad:
6a:87:b9:b0:d9:f0:c1:83:76:93:e2:95:57:17:3c:
3e:08:a5:4d:6d:11:fc:ad:e6:1a:65:7a:62:55:b6:
3f:20:d7:ed:11:42:3e:2c:b8:fb:d9:f9:ba:82:39:
a2:18:f5:b4:2e:8f:e3:77:a6:0a:e4:a6:7f:12:33:
77:84:a2:14:a8:8c:16:6b:64:c8:7d:9d:98:8b:ac:
da:41:9a:21:b9:3b:e2:86:6b:49:49:42:4a:a4:7b:
c7:14:3b:b3:dd:11:a7:e5:46:31:54:fe:c3:36:4b:
6f:20:83:2e:b5:66:6c:9c:25:f2:a8:da:62:2d:7f:
b9:14:52:51:d8:d6:cb:44:52:e9:e7:4f:1c:3b:48:
f5:82:79:23:e3:b9:31:ce:b3:37:37:91:c3:f9:fd:
bf:bc:f2:fe:72:72:5c:46:7e:8c:42:33:a0:90:4a:
89:09:3d:98:9c:82:2b:cb:c4:6e:55:ca:d2:b9:38:
62:e8:ff:f3:05:3e:9c:26:3f:46:3d:18:51:54:d0:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:5C:17:89:87:DB:ED:01:4A:54:FA:1B:A0:21:29:E6:BE:A9:C0
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/IuJcF4mH2-0BSlT6G6AhKea-qcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
80:09:4d:05:63:47:a2:bd:cf:06:72:33:db:0b:2a:1b:04:84:
ae:ce:6f:51:5d:a9:1f:dd:f5:52:8c:7e:46:2d:6a:18:0a:1c:
bc:2a:4b:b1:49:74:20:54:20:5d:64:f9:0e:c3:69:00:09:c4:
99:bb:4b:d8:f8:6b:97:fb:46:e6:b7:1e:64:a1:9e:78:96:83:
4e:cf:8d:38:93:00:f7:ca:3d:13:0e:37:ff:22:fe:99:da:20:
39:7d:aa:70:e0:98:c3:3d:17:a0:07:b9:47:9f:28:1b:51:29:
0c:90:db:88:03:70:6d:42:e5:11:52:27:cb:40:58:4f:63:5c:
23:af:c1:20:cc:cf:c6:6f:c9:1b:87:3b:e5:ae:56:63:d2:1b:
fd:09:ea:65:5d:63:12:c6:c6:fd:53:04:30:84:94:c7:71:2d:
c7:6e:8e:df:67:2d:86:01:54:02:d7:4a:ff:7d:18:7a:54:a2:
ac:3f:66:8f:59:e5:8c:4f:85:aa:c0:18:aa:11:c5:8c:10:26:
ee:a1:09:8b:a9:64:20:e0:ef:4e:2b:76:1c:61:33:2f:c3:42:
a7:80:ae:0d:d0:35:8f:2a:db:13:a6:0c:64:16:82:02:3e:2d:
b3:a8:d8:2f:9b:1f:e8:7e:a0:95:c6:a6:e2:8b:18:56:26:d3:
31:4c:0c:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZz24G+tA3aLlkQ0ojON/JrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni
M2I2NTUwHhcNMjYwMzE2MTM0MDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmUyNWMxNzg5ODdkYmVkMDE0YTU0ZmExYmEwMjEyOWU2YmVhOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuChKDxcrb0T5JodkuXwKzgBgEaCA
+zEyTdwf+togV1YzDoXcjywXO0yM/1Olq0hSISoJwfcXxmg7Yq1qh7mw2fDBg3aT
4pVXFzw+CKVNbRH8reYaZXpiVbY/INftEUI+LLj72fm6gjmiGPW0Lo/jd6YK5KZ/
EjN3hKIUqIwWa2TIfZ2Yi6zaQZohuTvihmtJSUJKpHvHFDuz3RGn5UYxVP7DNktv
IIMutWZsnCXyqNpiLX+5FFJR2NbLRFLp508cO0j1gnkj47kxzrM3N5HD+f2/vPL+
cnJcRn6MQjOgkEqJCT2YnIIry8RuVcrSuThi6P/zBT6cJj9GPRhRVNDDvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLiXBeJh9vtAUpU+hugISnmvqnAMB8GA1UdIwQY
MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt
ZjViYjI4NDNjODllLzEvSXVKY0Y0bUgyLTBCU2xUNkc2QWhLZWEtcWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll
LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv9OMA0G
CSqGSIb3DQEBCwUAA4IBAQCACU0FY0eivc8GcjPbCyobBISuzm9RXakf3fVSjH5G
LWoYChy8KkuxSXQgVCBdZPkOw2kACcSZu0vY+GuX+0bmtx5koZ54loNOz404kwD3
yj0TDjf/Iv6Z2iA5fapw4JjDPRegB7lHnygbUSkMkNuIA3BtQuURUifLQFhPY1wj
r8EgzM/Gb8kbhzvlrlZj0hv9CeplXWMSxsb9UwQwhJTHcS3Hbo7fZy2GAVQC10r/
fRh6VKKsP2aPWeWMT4WqwBiqEcWMECbuoQmLqWQg4O9OK3YcYTMvw0KngK4N0DWP
KtsTpgxkFoICPi2zqNgvmx/ofqCVxqbiixhWJtMxTAxS
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:40:46 2026 by rpki-client