Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/peIOlV3OfBEMu-qBfSwFNIMmyUg.roa
File: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (raw, json)
Hash identifier: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=
Subject key identifier: A5:E2:0E:95:5D:CE:7C:11:0C:BB:EA:81:7D:2C:05:34:83:26:C9:48
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0199C8F75CA37368E571F02D21F1B9F23361
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/peIOlV3OfBEMu-qBfSwFNIMmyUg.roa
Signing time: Thu 09 Oct 2025 12:34:38 +0000
ROA not before: Thu 09 Oct 2025 12:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 46.34.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:f7:5c:a3:73:68:e5:71:f0:2d:21:f1:b9:f2:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 9 12:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5e20e955dce7c110cbbea817d2c05348326c948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:6e:16:e5:75:10:b4:e1:c1:96:08:a1:71:
58:30:7d:b8:e9:b6:c5:dd:c2:02:ea:11:6c:4d:f0:
3c:f6:5e:fb:06:84:38:b2:06:f5:a8:ce:1a:04:ac:
d7:92:d6:db:4f:98:c8:c2:95:8c:c0:95:9a:4e:fb:
2b:f7:f1:2a:be:19:64:a8:72:0e:8a:f8:c0:64:c2:
10:2e:64:a2:df:e0:52:2d:aa:0c:34:d2:f8:61:48:
96:c4:1b:01:84:87:fa:65:6a:79:bf:59:42:ef:9e:
34:8d:e9:4d:28:12:54:ee:f2:e8:8b:d9:b7:2a:30:
cd:e4:b1:db:17:5f:b9:dc:29:22:c6:4d:fe:ce:08:
31:37:58:39:d9:f4:ce:d9:d6:6e:55:81:98:04:e1:
1b:58:8a:71:1b:af:b2:44:d2:b9:9e:70:67:7a:73:
37:49:6b:5c:46:bc:02:ad:aa:5d:c9:c1:d6:3c:e4:
91:9a:07:49:c7:52:ef:67:74:e9:30:9d:bd:a8:b7:
9b:81:b3:0e:77:c2:89:3b:60:f0:92:c4:6d:e4:72:
1f:f2:cc:ee:86:d8:bf:4a:bb:b5:85:06:fc:dc:5c:
02:cc:88:5a:91:e7:ce:a3:a9:0e:f2:e8:d5:4e:12:
b2:4d:b2:b2:3e:59:c1:4d:1b:31:ab:45:e7:d0:77:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:0E:95:5D:CE:7C:11:0C:BB:EA:81:7D:2C:05:34:83:26:C9:48
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/peIOlV3OfBEMu-qBfSwFNIMmyUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d5:a5:08:80:ee:e2:4d:b7:4e:37:06:fb:85:ad:db:b5:8e:
50:0a:4e:c9:5b:40:31:b9:4c:1a:2b:e0:19:8e:e7:d5:16:1a:
43:fe:35:11:09:8c:f7:81:51:39:2c:f9:a7:c8:99:5d:10:6d:
95:58:1e:f1:aa:7a:66:9f:df:13:02:d9:8c:d2:b5:fe:d0:4b:
40:21:2b:36:d5:bf:56:2e:8e:28:95:67:6a:e8:87:60:eb:fa:
74:bf:bc:c4:8f:89:71:75:d4:96:df:71:f6:ad:17:00:e4:7b:
83:a2:f2:95:2f:1c:31:bd:08:8a:06:c0:ca:cb:20:67:6b:04:
f0:1b:ec:29:f5:f6:b3:4a:9b:c0:fe:b2:01:d2:4e:73:52:e7:
91:52:02:d7:b8:3c:4d:70:06:c5:b1:02:fb:e2:a0:d7:6c:44:
96:ef:4d:0c:fd:3e:7e:87:ef:53:7c:f9:59:7c:c1:00:41:31:
26:9c:3a:1c:ec:80:bc:7b:7c:c6:4e:c3:38:52:63:5b:ef:0c:
24:b1:80:f5:80:ed:f4:32:cf:de:1d:19:e2:7c:d3:a0:d6:37:
3b:51:b1:3b:47:25:59:f6:43:df:b9:9e:3d:24:41:4c:2d:8d:
f4:ef:9f:89:11:9c:50:4b:cc:c3:e6:32:ef:de:2b:36:ce:25:
48:c4:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:54 2025 by rpki-client