Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/CG6YE3diFNDxAY_EfqmIVLlC8zk.roa
File: CG6YE3diFNDxAY_EfqmIVLlC8zk.roa (raw, json)
Hash identifier: mSZY3NosPIP9Kd5rgPCFUb3EI5OnSJu4ig3yx1dZcHc=
Subject key identifier: 08:6E:98:13:77:62:14:D0:F1:01:8F:C4:7E:A9:88:54:B9:42:F3:39
Certificate issuer: /CN=46c213b5b946ded98094ce412c22fffa207e4166
Certificate serial: 01A0C2FA147B06B68E348B1C22DF496B1331
Authority key identifier: 46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/CG6YE3diFNDxAY_EfqmIVLlC8zk.roa
Signing time: Mon 21 Sep 2026 07:59:24 +0000
ROA not before: Mon 21 Sep 2026 07:59:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 2a0c:d147:100::/44 maxlen: 44
2a0c:d147:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:14:7b:06:b6:8e:34:8b:1c:22:df:49:6b:13:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c213b5b946ded98094ce412c22fffa207e4166
Validity
Not Before: Sep 21 07:59:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=086e9813776214d0f1018fc47ea98854b942f339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:d7:3b:55:9b:af:ed:32:3e:be:10:64:a7:
e8:10:5c:fb:8e:57:c0:e3:0f:e1:15:7b:6c:6e:8a:
3d:13:37:25:f6:70:09:73:dd:61:71:78:5b:8f:e2:
3d:5a:5e:ff:e9:29:a2:89:d2:9c:69:53:01:82:ba:
06:17:bd:4e:ff:d7:03:e3:96:03:d5:24:ef:ac:8c:
24:d5:c2:07:e4:0e:e5:aa:1d:20:0d:7e:2b:61:64:
bb:8e:5b:2c:f2:81:ed:f7:cb:7b:b8:6d:54:dc:25:
4a:b8:38:84:47:54:81:44:8d:34:ae:89:ff:fa:e4:
ce:1c:29:c5:bd:c0:78:47:5d:cd:31:da:bc:fd:90:
b4:13:b9:07:a7:98:0f:d0:ca:8c:d9:44:9d:7b:4e:
0b:f3:82:ee:11:cb:f6:d0:71:61:d8:5d:0b:bf:4d:
2b:a6:4b:b6:44:5a:22:2e:2a:cb:25:34:ce:67:a3:
8f:34:e6:d5:3f:19:f1:10:cb:83:ad:4d:3c:2e:f6:
e1:2f:5d:41:cb:d2:95:89:32:54:ae:b5:97:94:ca:
24:51:6a:cc:3b:0a:e4:9c:3d:9b:fc:a2:a7:f2:e0:
b6:7a:9e:83:d2:0d:d1:23:4b:79:c3:f5:86:d5:a5:
a0:5f:cf:dd:24:b8:2f:f6:84:f3:8c:4b:4b:f1:e8:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:98:13:77:62:14:D0:F1:01:8F:C4:7E:A9:88:54:B9:42:F3:39
X509v3 Authority Key Identifier:
keyid:46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/CG6YE3diFNDxAY_EfqmIVLlC8zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d147:100::/43
Signature Algorithm: sha256WithRSAEncryption
55:17:9a:7e:4a:db:fb:8f:bd:d2:53:85:e8:5c:5f:50:0b:83:
fe:c9:51:d6:3a:66:1e:ce:99:08:3b:85:59:60:55:2b:2e:1e:
f9:c8:3b:90:d6:82:14:e9:7d:88:c7:5c:dc:9a:d1:0b:49:1a:
7f:ec:dd:5b:f7:22:7d:01:67:7c:53:ca:a3:a3:17:4e:1c:09:
cf:c9:a8:a0:66:1b:ca:b8:36:64:e5:7f:8f:bf:9a:53:db:b3:
68:6e:56:c9:8d:e7:9b:77:0d:8f:18:cd:c4:2a:ac:06:48:4f:
48:c8:18:31:14:23:66:f3:2e:85:90:8e:f4:04:1d:4c:50:30:
42:51:b6:fe:e9:ec:28:be:0a:81:c8:21:b5:27:1c:5a:60:a5:
f1:b4:84:78:ac:cf:81:03:a3:bd:db:63:a2:a5:af:0d:b9:7d:
68:3d:43:95:9c:07:66:96:99:02:d4:5c:c8:39:85:3d:e6:78:
d4:f2:77:a4:7a:64:ab:7c:19:0f:69:0f:52:35:05:5d:dc:51:
21:de:87:31:1e:b1:eb:5a:80:33:cb:95:cd:c3:79:d5:15:7e:
ba:fc:1f:7e:31:fd:b9:1f:71:2d:e0:d1:68:06:bc:6c:4b:91:
22:7d:c8:38:8f:d2:f2:4d:f9:06:9f:f9:d9:a6:b3:6f:3f:43:
b9:91:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:17 2026 by rpki-client