Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Rpb6LGU-1R85HDwVKbRm4Qdf_lk.roa
File: Rpb6LGU-1R85HDwVKbRm4Qdf_lk.roa (raw, json)
Hash identifier: 5GUGE7IYv+Hqhm/lVnKa++Si4aKidEvTnTt5U6AOn2Q=
Subject key identifier: 46:96:FA:2C:65:3E:D5:1F:39:1C:3C:15:29:B4:66:E1:07:5F:FE:59
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A06687F3344F4651199073D48B2B95E9F9
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Rpb6LGU-1R85HDwVKbRm4Qdf_lk.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 45.92.78.0/24 maxlen: 24
46.175.129.0/24 maxlen: 24
109.234.76.0/24 maxlen: 24
194.26.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f3:34:4f:46:51:19:90:73:d4:8b:2b:95:e9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4696fa2c653ed51f391c3c1529b466e1075ffe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:bc:44:60:0a:99:e8:f0:44:c0:2b:29:3d:
4d:70:0f:1f:ee:25:0b:d4:3e:d9:ae:fa:a7:c3:10:
6a:c5:b7:3d:d4:79:62:d8:46:83:c4:ef:0a:7b:89:
0b:7e:95:24:ca:7b:1c:1f:7c:c9:55:a4:36:85:61:
be:c1:7d:41:f0:59:5f:ff:a3:bb:ca:df:4d:a2:92:
81:8a:59:10:b9:ee:f7:91:cc:b8:c2:b5:ac:23:c3:
9d:16:b0:cb:87:6c:c4:e2:94:c7:c8:0e:34:60:bc:
f8:00:3e:1c:fb:d3:8c:79:d1:a1:d9:b8:fe:d8:67:
12:4b:4f:0e:dc:8e:08:6f:21:0a:de:d5:4d:2b:57:
37:d2:02:dc:47:99:f1:f6:29:9e:85:ac:75:35:e3:
e2:ec:ab:e9:fd:be:94:42:44:cd:43:cd:39:3e:bf:
f1:d5:90:8b:82:45:7d:9b:dd:d8:9f:ef:f9:3e:c4:
ab:58:b6:c3:bb:ed:08:30:f0:ae:e1:e3:bd:6c:61:
4e:c3:de:a0:68:20:5b:65:40:4d:01:48:81:32:b6:
51:8b:f9:aa:af:19:c4:fa:be:59:16:cb:e4:21:ac:
e3:cc:03:ac:11:81:c7:71:9a:ee:91:75:a3:26:8e:
57:3a:bb:05:5f:b1:84:27:7a:23:bc:ad:75:0e:04:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:FA:2C:65:3E:D5:1F:39:1C:3C:15:29:B4:66:E1:07:5F:FE:59
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Rpb6LGU-1R85HDwVKbRm4Qdf_lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.78.0/24
46.175.129.0/24
109.234.76.0/24
194.26.119.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:78:80:4e:bf:c2:2e:53:3c:a0:66:4f:ff:65:f5:2a:4e:9a:
77:28:76:8c:e6:c2:ff:84:ea:24:d1:bf:12:a5:80:cd:b2:d5:
88:4c:1f:ce:73:96:e9:4f:3c:5e:2e:c4:f1:46:f9:99:48:3e:
0e:b5:ec:b0:e6:c2:e7:71:47:a9:93:f6:a8:fc:2e:80:3e:ab:
b6:cb:68:95:bf:d6:c4:a0:7b:06:d8:a7:4b:6f:3c:56:61:81:
3b:11:1e:4b:5c:0b:73:ca:ce:70:d4:ea:97:4f:e5:18:d8:62:
0a:c4:3a:41:ff:55:f2:d5:26:86:3e:0a:c9:b6:45:d3:84:dc:
77:b3:48:18:8d:b7:58:57:02:e0:b3:f0:8d:c9:11:16:97:4d:
df:cf:77:57:4d:9f:da:78:8e:aa:34:ee:38:38:fe:79:8a:a1:
88:24:9e:5b:0e:e9:3a:09:7b:0c:a8:53:35:35:8b:62:a4:a9:
57:58:7b:80:39:ff:d0:24:e1:a5:9b:16:22:53:b9:2d:aa:60:
8d:84:0c:59:a9:0c:4b:c4:e5:a0:6d:90:b9:c0:dd:9c:c5:34:
46:ef:e1:96:7f:da:8e:8f:76:aa:dd:9f:45:4e:83:d0:d1:5f:
a1:81:50:01:7d:d8:66:20:2e:62:4b:10:fa:df:01:c5:55:b2:
fa:7e:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:28 2026 by rpki-client