Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa
File: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (raw, json)
Hash identifier: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=
Subject key identifier: 73:6C:37:40:AA:0F:94:F1:F7:BC:1B:84:B6:77:E8:13:2B:FD:AC:DE
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685EF31A7035EB7C86839AD7EFEAA9
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57865
IP address blocks: 46.191.184.0/22 maxlen: 22
46.191.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:f3:1a:70:35:eb:7c:86:83:9a:d7:ef:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=736c3740aa0f94f1f7bc1b84b677e8132bfdacde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:d8:29:6e:66:6e:81:d4:3d:a7:a0:a0:94:
18:eb:66:78:e7:23:58:8b:c1:50:2e:c6:90:9e:eb:
94:f4:c2:c3:7f:79:97:32:70:65:49:97:09:7f:3d:
60:8f:19:e6:fd:7b:ad:5a:55:c5:a1:17:5c:26:f2:
67:2e:0b:45:18:13:c9:5b:6b:6d:e3:2c:57:bd:91:
c7:57:72:38:83:ff:94:05:e5:cd:7a:58:54:38:c6:
9f:0c:5b:1f:32:7b:8c:85:ba:1e:84:aa:46:f5:f0:
78:a7:de:97:ef:02:2e:2c:3c:65:53:b1:39:7a:7b:
90:dc:8e:94:5f:79:4b:a9:f1:4e:de:a2:51:6c:51:
8b:29:0b:a8:44:0c:03:0e:01:73:3f:37:6b:a7:19:
5f:1b:67:fc:5d:05:c5:ac:63:03:d9:8c:d0:32:b7:
94:49:09:13:6c:f7:e9:2b:e4:9e:2c:2f:c3:9c:c9:
3c:c2:24:42:b9:a0:ab:af:3c:fa:21:d3:fb:8e:50:
95:4f:fe:08:63:74:04:8b:d6:a1:b7:9e:a8:c6:59:
ab:bc:ae:70:af:a9:60:96:e0:df:46:12:09:8b:1f:
f2:e0:79:4f:16:d9:c9:36:e6:43:a0:82:ed:3a:f1:
e0:a0:6c:e2:94:5c:d1:e1:c6:57:6e:8f:48:2c:b8:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:37:40:AA:0F:94:F1:F7:BC:1B:84:B6:77:E8:13:2B:FD:AC:DE
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:aa:f1:eb:3d:94:00:9f:d1:d4:9b:6d:d1:19:e4:f6:97:af:
b2:e8:f2:37:64:d5:a2:d7:cf:b8:84:96:ac:45:ff:42:1e:20:
88:08:38:79:61:08:c4:a7:2d:eb:84:d9:f9:57:49:5a:b8:cf:
07:9c:b7:56:cb:7d:e7:ac:ee:ef:48:70:56:27:13:65:d8:2f:
26:10:5d:ac:41:95:90:be:ff:6c:6f:d2:91:59:73:55:04:82:
23:14:f4:3d:32:18:f9:ad:69:1d:03:40:06:8b:58:73:d6:e9:
4b:8b:89:d2:d9:ee:db:41:04:f6:e4:5a:e0:29:65:ee:c6:b5:
21:ee:2c:7d:7a:9e:44:38:5e:7a:ff:33:38:b6:74:25:c2:e2:
57:92:56:a1:fb:ad:6b:de:ac:13:11:d2:0a:55:4f:e5:96:97:
08:e7:51:df:26:33:96:45:7a:60:2f:ee:2d:3a:f0:2a:5b:97:
df:ad:54:82:21:f3:d7:69:20:a1:4a:65:45:7e:19:bf:34:86:
95:d5:63:99:19:08:b6:65:20:f7:4a:47:b5:97:5a:40:af:b9:
4d:26:ff:0d:d8:7d:b9:20:41:b0:bb:8b:37:5b:d1:ee:ae:15:
3d:eb:4e:e1:e0:bb:a0:66:a5:fa:a6:4c:16:5b:a8:0e:85:e8:
84:37:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:14 2026 by rpki-client