Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Y46iRFIh7hhr7JrL86hwviSctHA.roa
File: Y46iRFIh7hhr7JrL86hwviSctHA.roa (raw, json)
Hash identifier: MPKiccPtmIqYDLsjFEhKY8T6goX0sDcpQEBYAYou0EI=
Subject key identifier: 63:8E:A2:44:52:21:EE:18:6B:EC:9A:CB:F3:A8:70:BE:24:9C:B4:70
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A17D28C3BB89038C8ADA29E4BD9D7A295E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Y46iRFIh7hhr7JrL86hwviSctHA.roa
Signing time: Tue 27 Oct 2026 11:39:45 +0000
ROA not before: Tue 27 Oct 2026 11:39:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197182
IP address blocks: 91.148.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:28:c3:bb:89:03:8c:8a:da:29:e4:bd:9d:7a:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 27 11:39:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=638ea2445221ee186bec9acbf3a870be249cb470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:66:e4:9e:4b:0f:ba:6a:22:fb:7f:02:3e:
fc:ba:7d:3b:0e:d0:1b:7b:3e:d5:40:0e:2d:ef:af:
05:5a:5b:f2:87:a5:bf:34:ae:fb:a7:f1:13:9a:c9:
7f:ba:03:3e:e0:56:31:06:a4:d7:8a:56:fa:f0:91:
83:55:2d:dd:58:3e:34:ea:78:96:4a:13:8f:61:c9:
03:1c:7c:a5:0d:36:c6:95:5c:7b:a1:49:b0:ae:57:
32:b5:30:6e:a1:21:f0:90:7e:b9:84:93:45:d7:90:
d9:29:c2:20:fb:44:7c:7b:bf:2e:79:44:1d:4d:2a:
0b:b0:b8:cc:a9:49:de:f7:4e:6d:f7:a2:e1:f4:1f:
aa:39:4f:cb:bc:e7:09:f6:64:99:f5:f4:40:13:0e:
fb:b4:a9:3c:2c:95:bf:43:5f:18:33:e0:7f:64:a7:
46:3c:ec:52:ba:fe:1e:9f:5a:06:45:8c:d0:51:33:
b9:40:b2:98:35:66:77:34:07:cb:46:8c:61:2d:a5:
51:5d:72:83:83:80:8d:46:ee:03:f7:74:97:01:2e:
41:8d:36:5d:7f:89:3e:59:90:5f:90:37:ad:99:09:
61:c3:cf:17:51:a2:2b:3c:dc:34:74:e6:fd:f5:6f:
9a:65:c6:d1:b2:bc:a3:31:23:fb:df:63:17:6e:9d:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:A2:44:52:21:EE:18:6B:EC:9A:CB:F3:A8:70:BE:24:9C:B4:70
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Y46iRFIh7hhr7JrL86hwviSctHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d2:2e:8c:59:61:a2:58:fc:6f:28:e9:7d:83:5d:2a:a3:c6:
67:5c:e9:f8:5b:4b:63:17:a3:0d:ba:bc:c0:de:a6:e4:bb:13:
dc:e1:b9:69:5d:57:2f:e1:b1:dc:5c:2d:0d:89:1a:2b:d4:44:
bf:9d:b2:0c:8e:82:a8:71:c7:50:e9:7f:9f:6a:e7:1d:01:97:
d6:f9:18:7e:9d:14:3b:45:fe:39:4f:78:50:26:16:a8:94:51:
98:21:de:a2:d7:f3:84:f1:c2:e4:67:ba:76:9b:9e:ff:7d:68:
ab:87:d4:0e:97:18:8e:eb:49:22:56:39:e6:b7:bc:53:18:a8:
df:4d:c2:48:4a:3c:a1:31:72:9c:b4:95:d1:cc:02:8f:5f:84:
f8:25:f0:dd:32:5d:58:de:a9:6a:9f:ed:e0:bf:50:ad:ea:74:
47:d5:8b:1e:c7:e1:85:60:9d:bc:82:96:94:c4:eb:08:c1:f9:
1e:f6:43:1b:a6:a3:97:6b:1a:43:44:6b:f5:28:3d:3c:3e:88:
73:30:ac:19:96:c8:92:b9:a0:af:94:76:5b:b7:a5:41:ca:6f:
66:04:e8:1a:1b:28:9b:6b:14:91:98:86:63:b1:e4:f4:3d:28:
79:a1:34:dd:c0:da:a2:c0:62:92:35:56:1b:f2:f7:9d:1a:3c:
fd:74:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:58 2026 by rpki-client