Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/RnSc6gSUeDQDtCWXcClmqxy0TiY.roa
File: RnSc6gSUeDQDtCWXcClmqxy0TiY.roa (raw, json)
Hash identifier: +n8JNrN3miwL2GACthuyyp7bhT+soPbrQhQAhrWLdUU=
Subject key identifier: 46:74:9C:EA:04:94:78:34:03:B4:25:97:70:29:66:AB:1C:B4:4E:26
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01A07CB1777DF9F78316084CBB8982F7CF0E
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/RnSc6gSUeDQDtCWXcClmqxy0TiY.roa
Signing time: Mon 07 Sep 2026 16:26:40 +0000
ROA not before: Mon 07 Sep 2026 16:26:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202761
IP address blocks: 193.218.176.0/22 maxlen: 24
212.48.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:b1:77:7d:f9:f7:83:16:08:4c:bb:89:82:f7:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Sep 7 16:26:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46749cea0494783403b42597702966ab1cb44e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:4e:ac:07:c3:0a:3f:3d:3f:6e:aa:52:19:
98:60:6a:13:60:e0:10:ec:d7:24:3f:5d:8e:f5:11:
3f:54:69:a0:aa:1f:e6:3d:b6:a0:42:d3:2a:b5:7c:
25:61:ea:99:36:66:e6:f3:f4:1b:6a:d2:0d:b9:b8:
5a:99:71:dc:1f:50:d7:80:a9:2d:a5:96:d5:1f:09:
66:ad:ce:9f:40:8f:50:03:e0:aa:71:f1:83:23:f1:
4b:9b:db:73:82:62:24:56:f2:74:dc:b8:04:ef:e1:
3c:3d:79:f6:15:14:98:cb:6d:8b:f9:cb:d6:d0:0b:
af:81:f3:f6:c5:9f:44:3a:40:d3:9b:9c:7b:e4:a2:
62:b7:7d:25:08:fd:27:cf:87:2d:4a:c6:02:cd:94:
d8:1b:86:be:86:03:43:34:01:f8:0c:c8:be:64:24:
55:31:4c:cc:d6:00:b8:85:e6:32:89:1d:87:50:61:
a3:66:f2:56:d8:8b:dc:e3:5c:45:f7:6d:c5:a2:52:
10:62:cd:45:01:27:17:c3:28:df:b4:b8:dd:be:e7:
a1:79:ff:de:c7:2f:9c:e1:34:2e:58:f0:56:51:ac:
57:71:47:f2:60:43:9c:0a:e7:c3:fb:59:14:95:08:
05:1f:f6:22:20:2e:51:f0:3b:a2:a4:f6:a6:4f:3d:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:9C:EA:04:94:78:34:03:B4:25:97:70:29:66:AB:1C:B4:4E:26
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/RnSc6gSUeDQDtCWXcClmqxy0TiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.176.0/22
212.48.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:91:78:a7:0e:0b:48:40:a5:ad:e4:d7:4d:a9:fd:bd:ff:d8:
60:be:a0:52:1d:c7:bc:4c:d6:03:33:4a:a2:39:70:5c:19:78:
26:e0:fe:47:8d:e9:d5:ba:a9:93:27:30:bc:ac:9a:0d:b4:ed:
95:d0:1f:5e:88:b0:eb:6a:cb:f0:d9:6a:56:ae:77:f5:a1:13:
84:96:b3:ca:fe:8d:bb:cd:30:ce:61:5a:4f:76:a6:d1:9f:30:
2b:14:b5:cc:1e:86:5b:ac:95:e5:d2:f7:53:88:4f:cf:a0:52:
dc:c9:9a:cb:de:20:6f:3d:72:55:ce:be:84:d6:ab:26:a2:38:
34:1f:50:4c:73:56:cb:67:7c:3f:f2:29:b6:48:bb:8f:b2:29:
b5:ab:13:4a:e4:40:13:6f:28:47:a7:31:f6:d3:84:65:96:44:
a0:9f:0f:02:28:de:54:4e:9c:65:11:1f:9e:2c:e9:ef:6c:69:
24:ff:67:c3:55:21:9e:37:c3:03:21:47:9c:32:2c:ec:65:f3:
03:a0:90:3d:d9:d5:73:c2:bd:9a:cd:52:19:8a:de:c1:04:54:
09:22:eb:40:99:cb:70:20:79:02:a1:05:16:cc:e7:e9:02:db:
ba:78:f4:47:a1:98:47:d6:b3:3b:c2:51:48:e9:4b:fd:37:dc:
82:61:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:45:23 2026 by rpki-client