Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iHs4a8hi68pU7k-DjIePGD_Y3MA.roa
File: iHs4a8hi68pU7k-DjIePGD_Y3MA.roa (raw, json)
Hash identifier: n1zS0FqknI6X/rHtDOgJmh6ruyzJVLkzWfkLarz4Ohg=
Subject key identifier: 88:7B:38:6B:C8:62:EB:CA:54:EE:4F:83:8C:87:8F:18:3F:D8:DC:C0
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F6351A8FB0260292337AB1856E519A301
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iHs4a8hi68pU7k-DjIePGD_Y3MA.roa
Signing time: Wed 15 Jul 2026 01:08:43 +0000
ROA not before: Wed 15 Jul 2026 01:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 46.232.234.0/23 maxlen: 23
195.123.4.0/24 maxlen: 24
195.123.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:63:51:a8:fb:02:60:29:23:37:ab:18:56:e5:19:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 15 01:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=887b386bc862ebca54ee4f838c878f183fd8dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:76:b8:c8:b6:b1:93:56:6c:b8:42:74:62:
2b:b0:06:d6:ab:bc:ca:4c:8a:cb:b9:fa:96:30:d0:
cd:19:59:db:78:a7:83:b6:9b:10:1d:9b:c5:79:d3:
1b:23:0a:6b:a3:78:ab:85:7b:be:01:bb:5a:29:ba:
35:28:84:a9:c3:d1:8b:26:a1:18:f6:ce:f1:46:23:
16:36:ab:30:1f:20:0d:25:6d:2f:70:2d:fc:e4:52:
11:2f:4f:4b:f0:39:b4:d6:b3:c8:e9:aa:91:21:ca:
a5:05:d0:f3:3b:c8:d1:8a:79:d2:1b:63:85:6a:f3:
dd:48:d0:38:64:67:87:6d:12:ed:17:a6:33:46:03:
a9:85:8e:1a:3e:8c:7a:e0:c4:69:3b:af:dd:1f:30:
77:1c:dc:77:5f:56:f9:76:3c:6a:ea:c3:c8:c8:79:
fa:ae:06:54:5e:e8:af:e2:6f:d5:0a:de:68:ed:2e:
6f:66:8e:90:99:cb:0f:62:d8:02:1a:dc:2d:c0:4e:
53:81:c9:0d:1c:e6:c6:8a:f8:38:92:73:d8:62:fc:
d3:16:ad:ca:24:bb:81:d0:d4:75:c8:c3:11:3c:6d:
43:67:eb:d3:97:2d:89:b6:08:34:69:70:d6:5b:c5:
12:ff:0b:6c:38:8d:76:51:eb:ad:ae:9e:c7:dd:46:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:38:6B:C8:62:EB:CA:54:EE:4F:83:8C:87:8F:18:3F:D8:DC:C0
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/iHs4a8hi68pU7k-DjIePGD_Y3MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.234.0/23
195.123.4.0/24
195.123.188.0/24
Signature Algorithm: sha256WithRSAEncryption
63:47:54:8f:50:ec:ad:0b:43:ad:d8:c5:99:98:7e:c2:a7:4e:
99:35:5b:73:5b:e3:76:31:22:6c:74:41:d8:b4:4d:44:76:9b:
cb:4b:f4:14:6e:12:16:a4:8b:f5:ee:7d:c1:14:f5:49:d5:43:
41:6e:08:22:85:8c:e7:45:9d:b4:ae:b5:08:f0:7b:71:f7:8e:
6f:a8:fe:dd:6e:57:d1:c5:43:0e:22:38:d6:7b:23:ae:93:7d:
32:60:07:af:41:6a:fe:e3:d1:f6:54:1b:ae:26:ab:88:ca:82:
a7:3d:64:d5:2c:f0:b1:ff:2f:89:5f:b0:38:76:a3:e8:80:cf:
7e:38:58:33:df:5e:cf:9e:35:70:6d:3d:9e:cc:9a:e2:5c:a7:
85:08:ce:d0:f2:5b:b1:58:c3:91:e0:5d:86:40:a5:1b:d7:f8:
7d:4f:05:4a:50:cb:d3:7f:8c:59:1e:40:65:94:5a:8f:c3:1f:
be:dd:3f:8f:f5:01:ff:b5:6e:52:d2:fb:c9:21:68:1b:f1:5a:
30:91:86:26:73:3e:48:85:57:18:ee:5b:bc:65:21:6b:5c:ad:
d0:67:47:d7:c3:94:c0:94:23:cb:8a:76:fc:ca:60:73:a8:b4:
41:12:6c:cb:9f:0e:e2:b6:0a:3b:89:90:50:4b:de:f3:a2:97:
b2:96:b9:01
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9jUaj7AmApIzerGFblGaMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjYwNzE1MDEwODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODdiMzg2YmM4NjJlYmNhNTRlZTRmODM4Yzg3OGYxODNmZDhkY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HB2uMi2sZNWbLhCdGIrsAbWq7zK
TIrLufqWMNDNGVnbeKeDtpsQHZvFedMbIwpro3irhXu+AbtaKbo1KISpw9GLJqEY
9s7xRiMWNqswHyANJW0vcC385FIRL09L8Dm01rPI6aqRIcqlBdDzO8jRinnSG2OF
avPdSNA4ZGeHbRLtF6YzRgOphY4aPox64MRpO6/dHzB3HNx3X1b5djxq6sPIyHn6
rgZUXuiv4m/VCt5o7S5vZo6QmcsPYtgCGtwtwE5TgckNHObGivg4knPYYvzTFq3K
JLuB0NR1yMMRPG1DZ+vTly2Jtgg0aXDWW8US/wtsOI12Ueutrp7H3UbeNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIh7OGvIYuvKVO5Pg4yHjxg/2NzAMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvaUhzNGE4aGk2OHBVN2stRGpJZVBHRF9ZM01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLujqAwQA
w3sEAwQAw3u8MA0GCSqGSIb3DQEBCwUAA4IBAQBjR1SPUOytC0Ot2MWZmH7Cp06Z
NVtzW+N2MSJsdEHYtE1EdpvLS/QUbhIWpIv17n3BFPVJ1UNBbggihYznRZ20rrUI
8Htx945vqP7dblfRxUMOIjjWeyOuk30yYAevQWr+49H2VBuuJquIyoKnPWTVLPCx
/y+JX7A4dqPogM9+OFgz317PnjVwbT2ezJriXKeFCM7Q8luxWMOR4F2GQKUb1/h9
TwVKUMvTf4xZHkBllFqPwx++3T+P9QH/tW5S0vvJIWgb8VowkYYmcz5IhVcY7lu8
ZSFrXK3QZ0fXw5TAlCPLinb8ymBzqLRBEmzLnw7itgo7iZBQS97zopeylrkB
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:13 2026 by rpki-client