Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/2aebBdfjlcEOfPEnz1CbGB6UMXY.roa
File: 2aebBdfjlcEOfPEnz1CbGB6UMXY.roa (raw, json)
Hash identifier: hoSvnnXRgMnwRgO2uR/oKk1ZIyYfTYyT4pOAzqlvbH8=
Subject key identifier: D9:A7:9B:05:D7:E3:95:C1:0E:7C:F1:27:CF:50:9B:18:1E:94:31:76
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 01A15AC30A5D23CACB9C238E43953E9FB058
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/2aebBdfjlcEOfPEnz1CbGB6UMXY.roa
Signing time: Tue 20 Oct 2026 19:21:33 +0000
ROA not before: Tue 20 Oct 2026 19:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57304
IP address blocks: 46.46.188.0/23 maxlen: 23
87.245.192.0/20 maxlen: 20
139.45.224.0/19 maxlen: 19
185.134.72.0/22 maxlen: 22
2a02:2d9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:c3:0a:5d:23:ca:cb:9c:23:8e:43:95:3e:9f:b0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Oct 20 19:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9a79b05d7e395c10e7cf127cf509b181e943176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:b3:07:e9:e4:15:44:dc:55:9e:2b:b0:80:
5d:46:ca:c3:a7:84:c9:2c:9c:f6:8f:5a:fe:3b:11:
ab:d3:8d:e9:6d:df:c2:b4:93:93:54:8a:19:30:b0:
5a:e5:52:f7:70:9f:3a:06:f8:ad:4b:a8:e5:ed:5c:
b1:6d:57:ba:11:b9:85:2d:38:f5:f4:33:5f:18:22:
88:9e:1b:20:f3:7a:9f:81:9e:99:01:c5:99:09:5d:
bb:5f:f5:c3:dd:c3:6b:88:da:da:a8:36:04:0b:66:
83:0d:4e:c9:20:07:16:be:46:84:c7:6f:09:6d:ae:
47:c6:c8:7c:72:f7:a3:bf:ac:e7:98:61:57:d1:d7:
1a:6d:16:5c:56:12:e3:c5:a2:83:bc:ff:6a:07:5e:
2b:31:74:63:a8:4f:ba:ab:5f:4a:af:47:fe:33:2a:
6a:4a:85:b7:a1:8b:5c:92:48:07:17:5a:f1:8b:e8:
93:14:70:ad:32:2c:1b:d5:fd:8d:8a:1e:ba:1a:10:
0f:f9:31:b7:16:43:6c:5d:4c:c1:c7:75:d5:a6:63:
23:f0:a1:98:f7:79:69:d9:8d:b5:cd:a2:16:20:15:
70:26:5d:66:13:cc:66:0e:38:09:61:fe:59:1c:b6:
b6:d2:78:b7:61:ad:bf:86:bd:3b:75:fd:6d:2d:ee:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:9B:05:D7:E3:95:C1:0E:7C:F1:27:CF:50:9B:18:1E:94:31:76
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/2aebBdfjlcEOfPEnz1CbGB6UMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.188.0/23
87.245.192.0/20
139.45.224.0/19
185.134.72.0/22
IPv6:
2a02:2d9::/32
Signature Algorithm: sha256WithRSAEncryption
53:12:b5:86:33:f6:c4:29:5a:e9:f4:ba:0c:04:e3:14:1c:10:
da:d3:21:f0:6d:ff:3d:5a:bf:70:d1:26:fd:dc:52:25:59:6e:
aa:ee:2c:20:71:0c:ec:95:d7:b0:48:ee:a5:11:64:d4:c5:e2:
44:41:69:df:61:0e:02:a2:2c:b3:54:13:f4:fb:4a:8a:b9:b5:
08:b7:63:7b:17:da:5c:5b:e9:10:07:cc:86:c7:82:6f:cb:b0:
27:2f:6b:4b:27:e1:48:c0:74:9b:e6:f7:d5:c9:43:65:97:ba:
a6:ee:94:66:b6:75:ad:d8:aa:3a:14:11:3b:67:f2:7a:c0:2f:
eb:c1:a7:42:d3:73:bf:db:1d:25:ff:93:c0:49:0d:5c:e3:bf:
ab:0f:e5:e6:c4:5b:33:3b:a9:0f:81:c3:f3:d3:a9:ff:20:03:
0d:67:d3:83:62:ed:6a:63:79:d0:5e:17:eb:8f:a6:52:17:32:
00:7d:40:42:41:a0:16:19:51:3b:35:08:49:6c:f6:21:94:3b:
7d:3a:2b:30:b0:c9:45:9a:5f:98:c8:72:89:3b:74:79:ce:e6:
c9:da:b0:ce:cc:31:b6:3e:07:88:c5:53:d0:45:3d:79:7a:53:
c0:1c:9b:d3:21:3c:de:95:79:96:9e:97:47:51:78:3a:bd:71:
74:d0:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:29:53 2026 by rpki-client