Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/iphFFiELv6xBcznUl33Uh-5jbZQ.roa
File: iphFFiELv6xBcznUl33Uh-5jbZQ.roa (raw, json)
Hash identifier: jkX2lE/80b0iANBbopkvd/aU0DEPtORcLex6/wv2csw=
Subject key identifier: 8A:98:45:16:21:0B:BF:AC:41:73:39:D4:97:7D:D4:87:EE:63:6D:94
Certificate issuer: /CN=9f949276e3a60b52fc46741d71d820afb5ee6060
Certificate serial: 019B78A3355355C8D5C5D9319B1D87E9148A
Authority key identifier: 9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/iphFFiELv6xBcznUl33Uh-5jbZQ.roa
Signing time: Thu 01 Jan 2026 08:18:40 +0000
ROA not before: Thu 01 Jan 2026 08:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202983
IP address blocks: 46.247.58.0/24 maxlen: 24
46.247.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:35:53:55:c8:d5:c5:d9:31:9b:1d:87:e9:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f949276e3a60b52fc46741d71d820afb5ee6060
Validity
Not Before: Jan 1 08:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a984516210bbfac417339d4977dd487ee636d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:2b:86:a2:fa:a1:b0:11:d0:64:43:7b:51:
ed:dc:00:a3:1a:14:8c:21:49:13:ff:2f:23:72:8d:
a3:ca:f3:09:7b:91:7b:a7:3f:c2:cb:4d:94:ac:95:
ca:0e:3a:e1:cc:c3:78:22:69:de:19:da:a8:31:5a:
9f:1b:a9:8e:6a:87:f8:46:bf:84:a7:48:a0:4b:d9:
9e:d4:a4:76:d8:f5:2a:0c:1c:a0:fb:27:54:f7:f2:
42:25:b8:fd:53:8c:13:34:24:d9:8e:92:af:c7:73:
ec:bf:89:2f:d1:15:f6:80:44:cc:82:1a:df:37:10:
87:cc:12:51:36:91:22:1e:29:06:84:08:36:c7:1c:
9b:18:56:57:60:99:ff:44:aa:c2:f9:7e:7a:bc:e8:
3b:b7:e5:5f:93:f8:13:e6:b0:a1:ba:ac:cd:2e:34:
4f:47:7e:7a:6d:31:20:0b:2b:6e:9c:f0:4f:87:b7:
f3:ec:5c:ab:f4:f3:42:5d:2e:10:eb:0b:60:ed:ce:
a0:0b:be:4e:79:ab:6d:60:27:6d:51:6a:5e:c7:59:
de:53:b0:bd:a0:17:1b:b2:76:a6:1c:b0:40:91:57:
9d:57:3a:d7:33:24:87:b5:ac:52:3f:69:d0:af:37:
57:bd:64:d9:0a:6c:41:da:df:96:fb:b8:be:e4:32:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:45:16:21:0B:BF:AC:41:73:39:D4:97:7D:D4:87:EE:63:6D:94
X509v3 Authority Key Identifier:
keyid:9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/iphFFiELv6xBcznUl33Uh-5jbZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.58.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:36:f0:98:94:82:67:6c:bd:5e:5a:a2:fe:4e:6e:e7:2a:58:
0d:3d:6a:19:0d:a0:8a:ac:f1:8b:9d:0a:b4:9c:c4:0d:f1:82:
cd:aa:44:7a:f3:4d:08:9c:29:35:b0:dc:78:88:f9:20:66:39:
15:25:87:21:5d:ef:2f:f6:db:b4:4e:2a:e7:6d:b7:8e:9c:64:
da:f2:ef:30:f8:a7:28:cc:24:3b:94:90:fe:50:c5:97:84:13:
2f:6a:6b:68:c1:c5:0f:6d:d3:16:c4:f0:d1:b2:fb:1b:1f:20:
e8:a6:2f:28:b3:4c:da:7c:4f:49:42:b8:e3:4d:99:fb:ea:a5:
a9:e1:da:d9:32:89:64:9c:77:ad:96:b9:20:2d:a3:3b:d0:5d:
0a:57:53:78:16:89:c1:df:94:80:9d:31:f1:be:0c:aa:10:42:
5c:01:29:75:af:42:45:92:42:f4:08:3c:98:f8:67:8f:59:0c:
cc:77:c5:9e:83:c8:05:44:c7:d2:6a:c3:8c:6c:2e:3d:f2:e8:
c8:01:36:ed:47:de:67:e8:d0:09:9f:5b:df:e0:02:65:fb:cb:
4b:93:76:7a:de:fa:e8:e5:32:4b:5d:9e:ac:da:31:51:8a:31:
97:f1:19:3c:05:04:e2:2f:bc:31:64:5e:26:ce:96:43:ab:ac:
2d:51:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:49 2026 by rpki-client