Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RsfzpEXT2vj0cg46sJVf_3DWbVo.roa
File: RsfzpEXT2vj0cg46sJVf_3DWbVo.roa (raw, json)
Hash identifier: yVruGt7gIY2jOGcOjS6rsZANdfw1f5ENHRVWvcze1vg=
Subject key identifier: 46:C7:F3:A4:45:D3:DA:F8:F4:72:0E:3A:B0:95:5F:FF:70:D6:6D:5A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A1D58211BEE57C5E330F7DFB5915FE5BA0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RsfzpEXT2vj0cg46sJVf_3DWbVo.roa
Signing time: Fri 13 Nov 2026 15:23:53 +0000
ROA not before: Fri 13 Nov 2026 15:23:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 188.119.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:82:11:be:e5:7c:5e:33:0f:7d:fb:59:15:fe:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 13 15:23:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c7f3a445d3daf8f4720e3ab0955fff70d66d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:9d:07:f8:85:47:8f:a6:f8:80:b1:2e:d0:
d6:35:c7:55:2c:5b:f5:4f:a2:d8:2d:fa:bd:ac:8b:
89:b6:a7:be:4c:b3:1b:48:36:53:2c:07:a1:54:b6:
62:56:d0:82:89:ad:c0:9e:5f:b9:78:17:ec:09:5a:
84:a6:1b:0c:51:c4:61:bf:1b:1e:ae:6d:bf:64:5b:
c4:80:ac:d2:e8:21:51:55:b1:4b:1e:3f:df:a4:ca:
bb:4b:57:ef:7f:92:07:bf:b3:b0:11:2b:17:84:d4:
6b:5d:4c:c8:d1:a3:4b:ea:96:19:07:6e:aa:4c:3c:
42:a9:a3:52:17:3f:fd:b9:9e:40:c1:4f:9d:4a:fd:
3d:0f:3a:e7:81:68:52:0e:27:9c:ba:21:33:85:51:
f8:35:bd:de:64:83:bd:fb:e7:89:59:9c:9f:f4:11:
21:ad:83:0c:02:85:98:05:85:d5:ca:55:8d:d2:4d:
a5:bd:cb:5c:b8:04:84:13:9c:a7:4a:e8:52:5b:98:
3b:0c:e3:e9:95:c4:60:50:0e:05:b4:84:86:15:80:
30:2a:54:b5:23:95:b6:a6:06:c9:87:b9:69:f2:e5:
7f:b3:71:9a:37:fa:c2:ea:86:59:ea:90:e0:26:5c:
6c:b5:d4:83:e4:b9:46:6f:f5:9d:3c:a9:97:0c:8e:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:F3:A4:45:D3:DA:F8:F4:72:0E:3A:B0:95:5F:FF:70:D6:6D:5A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RsfzpEXT2vj0cg46sJVf_3DWbVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b2:b2:e1:28:66:a4:b8:64:70:63:78:53:c3:91:7f:f9:04:
65:a0:dc:0d:e1:e0:63:c8:1c:12:f9:82:a3:eb:4c:1b:5d:fc:
fe:bd:a2:58:c3:ce:ec:39:f0:4a:e5:5f:2b:41:96:f1:70:e3:
f2:08:81:b6:9b:49:b7:2c:12:e1:96:24:21:70:5c:c6:be:9d:
12:de:f2:4f:14:15:f2:e2:23:45:6b:e0:1c:46:73:02:84:6c:
50:64:55:ef:eb:33:60:89:c9:e5:7c:44:e1:15:29:fb:67:5b:
66:66:50:38:c0:d9:a9:4f:27:2a:70:44:12:40:85:af:9f:f9:
07:0e:67:46:c3:99:82:51:b2:01:86:9e:38:be:35:b2:48:3c:
a4:bd:fe:92:05:de:22:e8:90:63:92:71:ed:c5:0c:77:6d:0a:
57:db:53:65:fc:6d:2a:b2:e9:a0:1f:0b:7e:f8:f9:d4:26:45:
7b:f1:b6:32:06:c4:5c:04:a9:8a:18:69:b8:26:75:cb:94:64:
16:4b:28:4a:16:07:db:32:0c:f1:11:5b:51:a3:3f:0b:7b:28:
24:ec:22:c6:4f:d4:ae:06:77:38:1e:90:ec:43:bf:64:d2:1d:
bd:27:b6:97:60:c5:06:75:aa:36:21:94:85:bb:0e:c7:e1:bf:
d2:79:28:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:48 2026 by rpki-client