Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/445_B6mounV6l_KgaT23sDOzn7c.roa
File: 445_B6mounV6l_KgaT23sDOzn7c.roa (raw, json)
Hash identifier: pLt3ZbZq95HZoYyAyEgsBQ7x6LjxMg/oOKs/eJgW2hY=
Subject key identifier: E3:8E:7F:07:A9:A8:BA:75:7A:97:F2:A0:69:3D:B7:B0:33:B3:9F:B7
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F22FAB22F4F0BC74037A23D563124757A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/445_B6mounV6l_KgaT23sDOzn7c.roa
Signing time: Thu 02 Jul 2026 13:18:02 +0000
ROA not before: Thu 02 Jul 2026 13:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 213.247.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:fa:b2:2f:4f:0b:c7:40:37:a2:3d:56:31:24:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 2 13:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e38e7f07a9a8ba757a97f2a0693db7b033b39fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:51:8e:0b:42:08:83:e1:e0:c8:f0:ac:16:
02:4a:8e:d2:13:83:aa:14:8e:17:f7:d9:f4:0f:a5:
37:f7:23:d0:b1:1f:d1:23:cf:de:24:9f:21:1e:76:
31:fc:64:25:49:9c:fd:63:be:cf:a9:ed:24:d5:19:
65:8b:51:89:7c:e8:7f:44:9e:6a:38:d9:f4:09:d2:
25:c6:7a:b1:2a:57:11:03:04:b3:1a:19:21:52:10:
06:c6:4d:50:c7:c3:6b:87:ad:1d:58:ee:07:b6:e7:
e8:44:21:e8:09:49:68:59:1a:7f:ec:53:99:10:55:
a5:e3:f1:13:51:97:c7:95:38:6a:22:ca:b1:8d:9f:
cf:46:13:a7:33:0f:ff:3e:bd:9f:bf:b5:4d:a1:31:
d7:0e:f9:e6:24:0b:ca:3d:20:3b:8b:f3:de:40:6f:
42:15:be:2f:96:7a:00:90:6e:8b:73:12:fa:32:46:
3d:45:ac:a2:ae:11:e3:b4:c3:d3:2a:be:a5:a4:ee:
f3:ed:1c:69:3e:bd:71:aa:04:e8:bc:e4:47:2e:6f:
90:e9:12:f4:a3:a5:f2:7e:ad:db:21:78:32:b8:b1:
58:2a:e4:f0:35:6a:83:6b:ab:42:7d:93:a0:ce:2f:
24:c8:2a:e1:61:2c:1d:23:6a:21:6f:44:65:7d:92:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:7F:07:A9:A8:BA:75:7A:97:F2:A0:69:3D:B7:B0:33:B3:9F:B7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/445_B6mounV6l_KgaT23sDOzn7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.247.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:58:1c:e4:f0:ab:4c:96:75:59:ec:cd:82:dd:0d:96:e5:0d:
ff:30:f1:b3:fe:16:d8:ce:0f:34:d6:da:44:24:b3:17:0b:69:
06:0d:3e:2a:03:fb:88:e4:0a:4d:38:34:89:34:db:3d:fe:1c:
79:0d:9a:1d:30:9f:32:90:2d:20:8f:25:4e:74:a4:f4:69:30:
a6:d1:90:a0:bd:9c:5e:3f:7f:5e:1f:05:af:f0:0f:9a:db:69:
37:0b:bc:51:c4:8f:60:6a:9d:63:d1:d0:2b:59:96:74:27:64:
6f:8d:86:11:42:68:59:9c:04:94:85:05:8e:46:83:f1:54:68:
23:55:d9:0a:c4:65:1f:15:f5:a8:37:a6:88:70:71:9b:f7:89:
49:64:8e:af:60:7b:63:f2:2b:62:2a:cf:59:ea:46:c2:fb:f8:
a5:c6:4b:e9:e9:55:27:47:e3:95:bb:71:5e:f8:c2:f8:c8:ab:
ec:81:1e:35:2e:56:40:12:b3:c4:42:ef:46:71:2d:23:7c:4d:
32:d7:24:9a:39:c0:66:72:93:4b:94:9d:12:60:f5:06:6f:19:
69:dc:13:d7:89:de:c4:47:86:9b:6a:3b:71:d8:2d:25:34:46:
61:6a:d4:a4:63:c6:03:68:f3:c5:a4:bd:1d:55:37:7a:f0:07:
3a:d5:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client