Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g3K1cOZJPgaSq5yDjLjJ2ZrnreQ.roa
File: g3K1cOZJPgaSq5yDjLjJ2ZrnreQ.roa (raw, json)
Hash identifier: 82yWaMcY6zJAqZ1mwlGEsLKSGhvaCyMx/4Z/dPyexm8=
Subject key identifier: 83:72:B5:70:E6:49:3E:06:92:AB:9C:83:8C:B8:C9:D9:9A:E7:AD:E4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01A101D9745008B389B7B6D2E41869294660
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g3K1cOZJPgaSq5yDjLjJ2ZrnreQ.roa
Signing time: Sat 03 Oct 2026 12:59:50 +0000
ROA not before: Sat 03 Oct 2026 12:59:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219202
IP address blocks: 147.45.46.0/24 maxlen: 24
193.233.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:d9:74:50:08:b3:89:b7:b6:d2:e4:18:69:29:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 3 12:59:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8372b570e6493e0692ab9c838cb8c9d99ae7ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:fd:9c:f6:f9:f9:b6:3a:e4:b6:cb:fe:47:
d6:de:a0:86:48:4d:b6:37:45:d8:12:93:e0:a1:77:
80:cd:80:84:f1:ee:01:a9:52:cc:55:7c:e5:51:e3:
d4:40:f9:71:74:7d:3f:02:47:e2:ec:97:21:7c:66:
e0:5c:4c:b8:2b:ad:29:d0:7c:0c:f0:5f:a0:df:2d:
6f:ad:15:53:07:85:04:c2:51:47:6a:de:40:b5:31:
33:d4:7e:d3:22:a1:29:e1:14:fa:ac:44:54:4f:21:
9a:88:c7:5b:2e:93:6a:3f:14:89:89:a3:67:2b:0c:
a2:1b:ba:d1:81:a6:75:52:59:bb:10:72:95:8c:16:
a2:1b:24:59:2b:e2:f5:82:04:27:73:05:04:70:5f:
72:1b:2f:e9:06:ba:68:3c:e2:10:c8:79:bd:fd:bd:
33:60:d6:14:11:c0:05:15:a1:4e:c8:a7:08:9e:4a:
af:83:97:f8:94:0f:7c:21:cd:8c:c1:eb:4c:e7:8b:
77:77:da:99:40:38:83:bf:40:f3:9f:34:37:b7:4b:
a3:e7:fc:fb:8e:ed:7c:bf:9e:07:15:fe:96:91:76:
fa:7c:9d:25:88:e3:21:37:35:93:28:b6:31:10:92:
4f:2d:6f:5d:7b:b3:d2:bd:90:69:24:cd:fb:75:2f:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:72:B5:70:E6:49:3E:06:92:AB:9C:83:8C:B8:C9:D9:9A:E7:AD:E4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g3K1cOZJPgaSq5yDjLjJ2ZrnreQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.46.0/24
193.233.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:09:ff:9e:c3:d0:86:a1:e7:2f:73:53:01:95:54:fe:de:f1:
b2:ec:93:d8:18:b6:fb:3e:6f:d3:ad:01:97:82:95:5a:55:3e:
d3:3b:58:10:d4:55:13:05:1c:af:74:ff:a9:04:da:2f:18:9f:
5f:dc:88:17:80:33:b2:f1:0d:8c:ed:c4:71:a9:f5:a5:13:1e:
61:c5:47:a4:16:28:6c:86:03:08:20:10:68:cb:61:5d:0c:f8:
99:95:dd:75:f5:d1:0d:7f:98:c3:2b:95:dd:24:0f:87:25:39:
10:cc:aa:45:8b:ac:b7:06:08:0e:4a:f6:33:d4:43:bc:bf:9a:
6f:0c:66:62:49:b2:b4:09:d9:08:dc:87:b7:56:d1:47:47:0a:
6e:f6:aa:e1:64:54:10:e8:f7:1e:c2:db:93:b8:a4:0b:30:9d:
e8:6d:41:a8:10:9c:0b:08:ee:2c:0b:d3:f9:21:29:d1:33:6f:
6e:03:10:61:38:6c:db:2f:c5:1f:0c:48:0f:0f:91:b7:75:d2:
97:44:14:fe:e3:2a:75:bb:35:91:f4:14:6e:08:31:bb:4e:51:
3f:ef:59:1d:e5:61:34:1e:b2:3f:34:a1:11:38:f0:27:0c:11:
72:0d:c7:10:8a:f3:a3:32:71:8c:f5:c7:77:61:a8:49:a5:a7:
5b:fb:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:36 2026 by rpki-client