Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/cHAv-hR4aTG77AYkITXkfyjkv7w.roa
File: cHAv-hR4aTG77AYkITXkfyjkv7w.roa (raw, json)
Hash identifier: Thgd06WEq033xim/iur0tbIXmRSvmjPC3WOYOjzBIpY=
Subject key identifier: 70:70:2F:FA:14:78:69:31:BB:EC:06:24:21:35:E4:7F:28:E4:BF:BC
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019F0DE71858301256DA756427210736D990
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/cHAv-hR4aTG77AYkITXkfyjkv7w.roa
Signing time: Sun 28 Jun 2026 11:04:36 +0000
ROA not before: Sun 28 Jun 2026 11:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200449
IP address blocks: 46.174.140.0/24 maxlen: 24
46.174.141.0/24 maxlen: 24
192.34.200.0/24 maxlen: 24
192.34.201.0/24 maxlen: 24
192.34.202.0/24 maxlen: 24
192.34.203.0/24 maxlen: 24
192.34.204.0/24 maxlen: 24
192.34.205.0/24 maxlen: 24
192.34.206.0/24 maxlen: 24
192.34.207.0/24 maxlen: 24
2a06:3341::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:e7:18:58:30:12:56:da:75:64:27:21:07:36:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jun 28 11:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70702ffa14786931bbec06242135e47f28e4bfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:bb:cb:f7:5d:d4:1c:d8:d3:e2:9b:de:82:
ba:04:6a:98:af:5f:60:4c:ae:43:30:4d:d6:0c:73:
75:7c:49:11:2a:48:27:c5:ca:53:19:3e:51:7f:c7:
3c:47:6f:8a:bc:39:1f:6c:1b:b6:6a:eb:98:2a:47:
aa:37:cc:cd:4e:e4:0d:48:5a:b2:90:ff:7b:ba:32:
88:18:b7:45:72:c0:da:36:79:ea:20:66:05:b7:40:
e3:cf:f5:b0:da:49:f5:67:9a:d0:a5:61:d9:d2:84:
89:a6:3e:8a:b8:55:ac:e6:67:f9:63:26:dc:74:a3:
5e:32:47:a7:cb:fa:e6:76:0d:c8:de:23:e4:59:66:
af:cb:b4:f7:09:f6:d2:27:a1:a0:82:b3:94:dd:c1:
07:a8:b4:79:85:e1:f8:49:45:00:61:04:b4:1e:4c:
7f:16:42:31:59:64:38:f8:31:62:84:a4:fd:c8:0d:
d4:65:4e:38:8e:e6:3d:b2:e0:75:12:eb:7e:65:52:
41:c7:20:5d:2b:b4:49:ef:a3:d2:3e:28:27:29:aa:
48:2c:7a:65:76:16:5e:17:a3:08:6b:ca:ce:b0:bf:
f3:59:ee:e6:55:e1:fc:7b:fb:68:23:ac:42:1d:1c:
f6:ff:94:cb:21:de:95:5d:0b:e8:74:ea:07:e0:fc:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:2F:FA:14:78:69:31:BB:EC:06:24:21:35:E4:7F:28:E4:BF:BC
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/cHAv-hR4aTG77AYkITXkfyjkv7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.140.0/23
192.34.200.0/21
IPv6:
2a06:3341::/32
Signature Algorithm: sha256WithRSAEncryption
50:7e:bb:2e:13:63:78:7d:26:5e:8a:32:e0:c6:2c:a4:92:a3:
42:d5:43:b3:53:d1:87:3f:c9:b2:6d:a7:56:d1:4d:5f:0c:df:
d1:6e:a6:9f:9a:c9:7a:8f:0c:f7:c7:41:b7:aa:30:21:29:c8:
c0:bb:48:78:ee:f2:30:f0:07:54:b1:d5:34:c8:c7:bd:cc:ee:
25:1d:e3:39:f1:1c:c4:8c:99:62:aa:dc:9a:01:29:21:9c:a1:
60:87:34:90:ac:73:ef:46:1b:2b:1c:a3:ab:b1:28:c8:b0:fd:
9a:6c:6a:40:6c:d9:e2:e3:5b:ad:95:b3:2b:7e:d9:fd:c6:40:
be:d3:05:82:9d:f8:2f:33:1d:cd:09:af:cb:aa:df:83:f5:2d:
f9:bc:a0:36:c8:bd:cd:fe:6e:c9:d4:4c:92:84:f3:ae:f5:5e:
ca:98:66:6c:dd:84:0a:d1:14:c1:37:37:71:4e:04:40:08:6a:
ca:e8:e8:28:fa:90:18:c2:34:c6:95:5f:1b:70:38:62:ae:36:
02:70:a4:46:0a:17:66:71:c1:35:e7:e6:ad:11:bc:a8:ff:5f:
15:4e:b0:20:42:b1:17:8c:3f:d5:52:53:39:d2:83:fc:7f:c1:
2a:41:a5:4b:47:f6:9f:0f:a0:85:06:ba:3a:58:9c:3b:4b:3f:
7f:a4:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:34 2026 by rpki-client