Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/p35C9ZV6N39esxEauWzz7rGEtFo.roa
File: p35C9ZV6N39esxEauWzz7rGEtFo.roa (raw, json)
Hash identifier: RDjo5E1buUUe1K1+aCg93KkPTbVXh8Coo56z6qS5TJM=
Subject key identifier: A7:7E:42:F5:95:7A:37:7F:5E:B3:11:1A:B9:6C:F3:EE:B1:84:B4:5A
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019FD7F2FF17E75F4C23E553C9A26A20AEB4
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/p35C9ZV6N39esxEauWzz7rGEtFo.roa
Signing time: Thu 06 Aug 2026 16:40:54 +0000
ROA not before: Thu 06 Aug 2026 16:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 46.149.142.0/24 maxlen: 24
46.149.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:f2:ff:17:e7:5f:4c:23:e5:53:c9:a2:6a:20:ae:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Aug 6 16:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a77e42f5957a377f5eb3111ab96cf3eeb184b45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:be:56:3c:de:c0:f8:41:35:25:a6:c1:f7:
7e:d7:dd:99:1e:10:78:cd:5d:6a:e1:5a:1f:d9:b7:
65:21:53:46:ed:fd:28:97:f5:2f:d8:eb:d2:8a:6e:
e9:ce:79:98:d1:41:a2:3d:92:53:e7:50:d4:18:40:
ad:36:31:24:57:91:66:09:47:21:91:13:aa:9a:65:
bd:64:0a:4d:55:01:4e:07:7e:f0:af:9d:d9:0b:b4:
38:41:23:f9:05:8c:ca:d2:ad:8e:c7:7f:4b:ec:ac:
0a:10:be:77:bf:46:e4:de:85:d8:9b:21:44:bf:37:
43:9f:69:93:2f:ef:33:50:92:79:a5:ef:66:f1:73:
0f:a3:b5:13:9b:e4:d9:3f:9e:ab:00:d0:8b:1c:31:
d1:e8:e3:48:20:44:c0:03:39:f6:45:87:0d:06:da:
57:06:74:04:4a:a7:1c:69:aa:46:c5:02:5f:04:08:
04:2f:f8:0f:ad:59:65:82:cf:a6:30:8e:fd:0d:0a:
b4:07:1b:ca:2e:45:8b:ce:7c:eb:7f:67:16:86:a2:
0d:21:e1:77:e2:bf:be:46:53:4c:0f:63:7b:9a:ad:
eb:27:fc:56:a5:6e:5f:58:96:13:0f:b3:8a:79:b7:
79:a9:85:e9:7a:32:91:a1:ec:03:63:f2:81:39:69:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:42:F5:95:7A:37:7F:5E:B3:11:1A:B9:6C:F3:EE:B1:84:B4:5A
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/p35C9ZV6N39esxEauWzz7rGEtFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:14:e5:47:30:24:8b:5b:fb:53:4c:2b:bc:fd:d4:ec:bc:9a:
24:33:2f:d5:f1:c5:0d:79:d7:3f:60:41:a6:35:89:97:3b:58:
f5:99:32:66:a4:4a:d9:f5:a9:65:45:2c:19:d3:1c:94:3e:6a:
b1:07:23:cb:bb:18:df:19:92:4d:62:82:27:2d:4c:c4:19:99:
3a:92:a8:e3:13:7c:62:6e:14:a0:43:00:d0:be:aa:5e:5a:22:
0a:bc:f7:4c:df:40:c2:da:0d:73:de:78:3a:55:e4:a7:28:d9:
78:1a:ec:fe:03:11:e0:31:d1:66:95:e0:41:b7:0f:59:9e:f4:
70:55:0d:06:65:aa:f6:bc:28:81:7d:c3:23:08:95:47:b5:f0:
8a:9c:ec:ae:70:78:d1:4f:ea:13:f2:c4:31:f1:d2:03:4f:fe:
52:63:af:00:b2:3e:23:53:40:aa:22:67:fe:6a:52:a4:d9:72:
a8:0a:a5:b4:51:63:03:5f:c3:b4:d7:a6:7a:cb:96:5a:61:d0:
0f:49:dc:00:47:2c:1c:aa:4c:20:68:90:23:28:d8:d7:cd:41:
55:13:02:f4:77:68:3d:64:bb:c8:1c:a5:86:2d:8f:3f:8d:77:
55:24:c7:bb:6a:0d:e4:e8:f5:a5:2e:15:65:ab:bf:84:7a:21:
8b:35:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 16:49:26 2026 by rpki-client