Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/q4Cca3sE-zKf6HtcGsocUrAQM0o.roa
File: q4Cca3sE-zKf6HtcGsocUrAQM0o.roa (raw, json)
Hash identifier: W22Z+Cwog2SpVewzgsjNaqi66bmEVe85hPmA9Jeo6Lg=
Subject key identifier: AB:80:9C:6B:7B:04:FB:32:9F:E8:7B:5C:1A:CA:1C:52:B0:10:33:4A
Certificate issuer: /CN=26e89565a146ca594cfd3b49142777a19cb36ade
Certificate serial: 019EC4EAA15741D7833C74A9271E1ECC57DD
Authority key identifier: 26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/q4Cca3sE-zKf6HtcGsocUrAQM0o.roa
Signing time: Sun 14 Jun 2026 06:56:11 +0000
ROA not before: Sun 14 Jun 2026 06:56:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25091
IP address blocks: 46.174.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:ea:a1:57:41:d7:83:3c:74:a9:27:1e:1e:cc:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26e89565a146ca594cfd3b49142777a19cb36ade
Validity
Not Before: Jun 14 06:56:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab809c6b7b04fb329fe87b5c1aca1c52b010334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ff:5a:0b:17:31:44:ba:82:e6:c9:10:de:cb:
35:36:eb:e9:39:57:e5:f5:04:f7:ce:51:fa:63:7e:
bb:c6:c2:5b:75:ae:af:51:ba:30:72:a4:69:d0:d8:
d6:2e:c7:f8:5d:93:8d:4c:83:72:01:53:91:57:98:
d8:e9:5c:9b:88:bf:e9:63:45:24:dd:f9:4c:29:d3:
d1:22:82:c4:a4:c8:53:02:11:8c:2f:38:f4:63:f7:
c8:81:81:dc:1f:96:08:f5:d7:7e:3a:fd:be:6e:1b:
94:3c:8e:30:2c:02:71:d8:f9:a1:34:55:33:71:00:
1a:74:b2:22:3c:a5:6d:97:31:45:a5:f4:75:91:3d:
92:13:22:5a:9d:4f:69:1c:cf:64:55:76:a9:0f:16:
58:2d:20:47:ca:db:ff:ee:7e:2f:28:67:1a:a9:7b:
fb:b2:f3:b3:43:b5:8e:ec:7c:d1:99:43:55:6b:5d:
78:90:73:36:da:4e:4c:19:bb:4c:ed:eb:d5:a9:d6:
59:8c:1b:00:8e:95:23:4c:b7:8d:f4:5e:d3:d1:c1:
b3:80:b5:aa:38:9a:a2:7f:46:71:52:e4:82:52:22:
62:0f:3d:96:19:57:ae:70:0b:e5:0b:72:24:16:f4:
84:a4:01:34:2b:9c:14:b6:4b:4a:ef:95:e5:19:59:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:9C:6B:7B:04:FB:32:9F:E8:7B:5C:1A:CA:1C:52:B0:10:33:4A
X509v3 Authority Key Identifier:
keyid:26:E8:95:65:A1:46:CA:59:4C:FD:3B:49:14:27:77:A1:9C:B3:6A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JuiVZaFGyllM_TtJFCd3oZyzat4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/q4Cca3sE-zKf6HtcGsocUrAQM0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f79b1-4d13-4732-bd27-63882877ef16/1/JuiVZaFGyllM_TtJFCd3oZyzat4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:74:8a:38:67:db:26:6b:f3:db:20:40:2d:00:3b:d6:d5:cc:
b8:c8:b1:0c:2d:7e:dc:0b:0a:12:e6:8b:6b:78:18:84:8c:d8:
af:6c:60:d4:0f:01:bb:fa:f2:e4:14:7a:cf:8c:70:97:1b:2a:
e7:e9:8b:cc:56:2d:e0:b6:b5:1c:5a:76:60:87:1f:b2:32:b4:
01:95:17:b7:81:23:84:02:1b:2c:a1:68:9b:bc:3c:65:20:ab:
22:60:39:c5:5b:d5:a2:63:23:f1:0b:21:82:6f:66:d2:ad:c4:
ea:b5:66:4d:bb:1e:9f:f4:6f:e5:80:dd:10:b2:7e:75:6e:81:
e0:30:d7:fd:5a:cb:22:c3:49:8e:f4:3d:39:09:0a:b8:4b:86:
ae:be:8f:86:83:47:15:61:33:cc:20:51:66:5f:dc:99:2f:51:
5a:4e:73:65:61:c3:1f:ad:8c:1b:7d:42:7c:0d:7e:cc:da:04:
41:b3:6e:7e:b7:46:c4:0d:80:6d:df:c1:50:ad:0c:4a:a7:9b:
ed:53:e6:b9:b6:eb:9c:be:97:36:67:df:11:8e:13:eb:cf:a7:
42:0a:50:9e:9f:00:16:a2:90:13:e7:1d:56:70:24:26:8d:e3:
13:0b:fe:c2:9f:88:75:48:c2:58:53:a0:a4:77:b7:16:34:6b:
2a:b5:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:00:59 2026 by rpki-client