Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/hDgGBDl_1VlfUNCZCCkO5PENEqo.roa
File: hDgGBDl_1VlfUNCZCCkO5PENEqo.roa (raw, json)
Hash identifier: gRiO9A/6R495B/vZKUWFHQ5wB+uYLtNnBUABWXbDczQ=
Subject key identifier: 84:38:06:04:39:7F:D5:59:5F:50:D0:99:08:29:0E:E4:F1:0D:12:AA
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 019EDC5342F6F99FFA7B82E7B71A56D75D76
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/hDgGBDl_1VlfUNCZCCkO5PENEqo.roa
Signing time: Thu 18 Jun 2026 20:01:44 +0000
ROA not before: Thu 18 Jun 2026 20:01:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398436
IP address blocks: 46.18.0.0/24 maxlen: 24
46.18.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:53:42:f6:f9:9f:fa:7b:82:e7:b7:1a:56:d7:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Jun 18 20:01:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84380604397fd5595f50d09908290ee4f10d12aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:17:79:9d:01:9f:94:a5:cd:ae:c8:cf:81:
c3:16:83:17:0f:61:78:b0:a7:8d:71:f6:72:2a:99:
98:b5:01:85:1a:35:cd:c0:d1:0b:18:27:ac:10:18:
8a:e3:20:8f:72:f4:33:07:2e:ef:04:52:8d:70:e2:
5f:18:65:b7:82:bd:ca:54:a3:9f:15:ca:51:ad:96:
1b:1f:93:c5:31:12:6e:f4:95:e1:36:2e:0d:9a:6a:
ab:03:18:21:07:ff:4f:ef:9e:3f:41:03:df:4b:99:
43:4e:24:4f:8d:0e:2c:e4:03:8c:b2:fb:a9:16:d6:
a7:45:22:fa:40:99:30:d1:f8:b1:fb:65:6b:f7:84:
97:00:a2:b8:2c:ba:89:77:8d:d7:f5:74:9a:9f:68:
0f:de:12:f3:1b:1a:ee:c5:54:47:d4:30:ab:4b:bc:
ef:45:6c:ae:88:1e:6a:ea:5a:66:33:4a:81:84:88:
00:92:28:c9:22:a4:37:ce:ea:2a:4d:12:59:e2:6a:
8f:2e:d2:40:d2:05:c7:d1:c3:8f:6c:b8:eb:03:9e:
68:8b:69:21:2e:4d:8a:e8:4f:b4:51:b5:11:c2:f1:
61:66:01:6b:0a:03:64:17:f3:b6:3d:b2:66:86:66:
07:df:34:92:1d:79:f2:89:77:e3:1e:6a:60:36:3c:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:06:04:39:7F:D5:59:5F:50:D0:99:08:29:0E:E4:F1:0D:12:AA
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/hDgGBDl_1VlfUNCZCCkO5PENEqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.0.0/24
46.18.3.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b2:4b:02:a2:43:ae:9c:1e:70:c6:45:97:60:74:f7:bd:4a:
9d:af:f2:0d:df:06:b3:ba:fe:9b:e8:32:20:2b:0a:ba:8a:a6:
14:5d:aa:e3:1f:8e:42:bf:83:bd:ff:0d:71:fd:2e:1f:a6:3e:
45:1c:4b:23:fa:bc:42:8c:51:47:99:28:f5:58:cf:2e:49:4a:
a8:f7:ad:ba:19:ef:db:e6:7c:97:14:45:e6:a2:40:53:5c:80:
ef:fb:eb:5c:e7:e6:95:8e:e6:86:a9:20:ce:66:98:34:8e:3c:
58:cb:43:18:21:4d:72:9c:36:51:65:94:63:cc:59:04:18:1e:
dc:49:e1:db:19:f5:5a:4d:4d:ac:ef:68:b0:21:d4:1b:83:93:
c6:0d:4c:d1:6e:ac:d9:59:72:ef:32:98:4b:fa:6c:6f:66:f3:
e5:8e:37:23:fd:1c:b0:25:dc:2b:e3:fe:db:96:84:0b:e9:9a:
2d:c9:63:7d:a8:55:73:15:2b:eb:8a:b3:96:6c:b3:b2:05:75:
a8:6c:59:23:a4:79:4f:46:0f:70:c9:d5:0b:c5:19:a2:4c:ef:
e5:af:52:15:72:4f:d7:02:37:19:b3:e8:68:ae:28:94:2c:ce:
2f:c0:61:18:34:bb:26:92:fc:b0:be:58:4a:7c:8c:f0:17:56:
f9:f2:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:04:08 2026 by rpki-client