Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa
File: RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa (raw, json)
Hash identifier: NfGzv+ISe2v5iqjEcKNdZo4d+WrQJS0vL5wyjnXNlGQ=
Subject key identifier: 46:B1:B1:60:DD:A1:FC:DF:D5:C7:8E:5A:41:65:AF:16:AA:0C:DE:B0
Certificate issuer: /CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Certificate serial: 019F23682DF9CAC1A4E32D943613AD109BA2
Authority key identifier: CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15623
IP address blocks: 45.94.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2d:f9:ca:c1:a4:e3:2d:94:36:13:ad:10:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca202f644c4842e5f8d404e0689f81f52c154b51
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b1b160dda1fcdfd5c78e5a4165af16aa0cdeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:14:9a:19:27:ca:97:1d:72:6c:ef:e8:83:
39:98:18:32:9d:df:08:9c:be:69:b0:f6:73:56:bb:
09:79:63:50:54:a3:ab:e2:02:68:b9:13:c4:76:3c:
67:23:49:e3:46:e7:a2:5f:74:63:2a:c4:6c:61:01:
c3:78:2f:22:d1:08:a4:72:cb:bd:fe:aa:ff:5a:66:
d7:2a:59:37:cf:95:48:51:1e:0a:49:13:33:dc:2c:
72:5a:a4:3b:40:f5:36:7b:01:92:21:4a:33:38:26:
7d:d7:7a:e8:1d:24:43:39:c3:6f:4d:57:48:db:83:
3e:00:f3:78:c5:3b:54:41:96:6f:2f:cb:63:fd:08:
2c:df:e3:4d:9c:c6:0c:32:39:ef:8d:cb:7a:0c:75:
db:b4:90:a2:75:8a:aa:a7:b9:4f:a0:0c:15:ca:ed:
fc:ff:07:1c:d7:c5:c6:e1:9b:58:bd:25:a9:07:12:
77:34:58:db:c3:72:76:f2:2b:70:d3:06:cd:1e:85:
59:bd:8f:2c:61:c3:8b:e4:15:70:81:7f:9a:1c:2d:
4d:e2:98:bd:37:48:1e:28:a8:48:0d:18:ed:1f:7a:
e9:7f:dc:f6:14:79:fc:5f:b5:88:de:df:d0:57:4a:
05:71:90:69:ec:c6:54:ea:41:19:26:8a:68:d9:01:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:B1:60:DD:A1:FC:DF:D5:C7:8E:5A:41:65:AF:16:AA:0C:DE:B0
X509v3 Authority Key Identifier:
keyid:CA:20:2F:64:4C:48:42:E5:F8:D4:04:E0:68:9F:81:F5:2C:15:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiAvZExIQuX41ATgaJ-B9SwVS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/RrGxYN2h_N_Vx45aQWWvFqoM3rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/yiAvZExIQuX41ATgaJ-B9SwVS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.88.0/22
Signature Algorithm: sha256WithRSAEncryption
23:3f:cb:b8:2c:1e:cb:8f:5e:43:fe:12:8b:a4:45:0e:50:76:
5d:04:59:f3:98:28:85:15:71:a6:54:3b:ec:ff:9d:34:ee:a5:
f9:bc:69:d9:9c:bf:83:bb:6e:01:ae:06:ce:cc:9a:e2:c5:4f:
88:2e:6b:47:94:7c:0b:c6:6a:06:22:d6:da:a9:e0:0b:66:e5:
26:6d:19:ba:e6:d7:07:51:c3:d3:54:2e:3a:d2:93:a1:84:e6:
68:6a:b9:3d:81:c5:29:24:90:7a:8c:8c:b5:33:10:47:73:46:
c1:09:1e:bd:2a:60:7f:31:1d:52:ae:8c:e4:75:f3:c2:58:72:
90:3c:9e:1d:af:8c:79:f6:09:17:e9:58:a0:8d:ad:e3:17:98:
86:1a:02:d3:47:d4:84:21:9c:70:02:2e:c1:00:53:58:fd:0d:
46:fa:00:d4:55:6a:5e:83:7e:e5:ed:dd:9a:0f:51:59:60:ef:
05:39:23:e0:45:a3:4b:28:84:6c:7a:41:9e:a7:5d:ae:17:8d:
d3:33:11:0f:af:10:87:d1:60:77:6d:8b:f0:61:29:1d:6c:82:
4b:c1:27:f7:55:8e:62:09:8c:88:10:16:61:87:60:09:4b:f6:
97:06:04:db:3a:2a:21:10:b6:0e:c5:92:9d:02:e0:75:68:28:
08:6d:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:11 2026 by rpki-client