Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/foSOnmt17u33gfnRPRG4pNSpMq0.roa
File: foSOnmt17u33gfnRPRG4pNSpMq0.roa (raw, json)
Hash identifier: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=
Subject key identifier: 7E:84:8E:9E:6B:75:EE:ED:F7:81:F9:D1:3D:11:B8:A4:D4:A9:32:AD
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23687C29AC220BDE5C58F3AF6608EFCB
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/foSOnmt17u33gfnRPRG4pNSpMq0.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4445
IP address blocks: 46.190.128.0/17 maxlen: 24
47.73.173.0/24 maxlen: 24
47.73.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:29:ac:22:0b:de:5c:58:f3:af:66:08:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e848e9e6b75eeedf781f9d13d11b8a4d4a932ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:df:ff:29:a2:3c:f2:38:bf:ea:64:d0:dc:
b6:6a:f0:c5:80:2c:f4:01:37:15:78:b3:82:f8:16:
88:79:83:30:7c:07:08:a2:c1:fe:29:87:2c:a4:14:
fe:ce:79:ec:28:95:35:73:3e:aa:a9:33:1b:5a:60:
4c:b2:3e:3c:db:28:cd:13:9d:ea:55:9e:4e:f2:52:
9a:0d:a1:6b:16:68:d7:4c:7a:a6:f4:7b:a0:45:08:
12:ee:e9:4d:bf:5f:d8:75:17:60:02:ea:5d:45:82:
89:dd:fa:f3:e1:f6:40:b1:b5:ed:db:24:81:52:bd:
99:f6:5a:00:32:9f:0e:e0:f2:d3:27:80:66:c3:b3:
f5:f7:97:2e:04:4d:80:39:41:fa:f7:ef:4e:28:25:
d7:4c:12:22:cb:c0:5b:c0:37:3e:ee:9c:6c:d8:3e:
92:1f:6a:6d:46:9a:d5:39:e3:9a:34:55:90:7a:d3:
54:ca:04:e3:ba:41:61:f1:4c:4f:e9:ed:09:8e:41:
b5:a1:9d:39:4a:53:a1:66:8f:10:20:46:21:dd:aa:
0a:c9:9e:5e:fc:a5:75:2a:7f:bf:1c:dd:bc:c3:63:
d9:84:c9:35:a6:bf:09:aa:47:1a:38:6a:db:b3:6c:
8e:5a:d6:b7:22:78:6e:db:05:fd:a6:e3:57:a6:9f:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:8E:9E:6B:75:EE:ED:F7:81:F9:D1:3D:11:B8:A4:D4:A9:32:AD
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/foSOnmt17u33gfnRPRG4pNSpMq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.128.0/17
47.73.173.0/24
47.73.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0e:fd:56:88:22:e3:65:cf:24:b7:1b:d7:cb:de:dc:fe:6b:
36:eb:ba:31:7b:74:86:da:cc:cf:e3:2e:97:3d:d4:34:d0:6c:
77:8f:a0:83:a6:ac:6b:b7:7f:c0:39:33:4d:25:ed:9d:84:05:
44:2f:15:f3:1d:cc:69:fa:a3:6c:0a:f1:c8:df:8c:62:56:27:
3e:38:f6:a4:2c:1c:9d:e8:32:e0:a9:90:a7:f9:90:88:18:bc:
54:c1:22:27:24:f7:07:1a:95:95:ff:1a:69:77:e8:76:e0:9b:
09:16:f0:bb:1c:8a:2c:a2:a9:97:79:ee:ed:a8:b7:da:9b:d5:
3b:4f:54:6a:aa:85:6e:da:ac:47:5e:73:42:b3:53:d9:00:8b:
63:79:ff:2e:e3:4f:85:cb:8f:d6:d0:10:9e:ab:7d:bb:7a:1f:
0d:56:fd:44:63:dc:95:d1:d3:63:36:54:c2:e2:62:5e:f6:44:
a9:de:55:e1:e4:02:60:25:b1:bb:72:0c:8f:20:33:fb:90:b7:
ea:fc:a4:37:01:74:d7:d6:7a:23:35:47:0f:b2:56:ac:87:25:
fd:45:0c:3d:15:d6:41:21:18:21:be:ad:7e:ea:06:6a:c3:fb:
3e:22:cf:93:dc:24:b5:25:d3:38:f2:22:43:3b:ab:cc:fc:72:
c4:56:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:19 2026 by rpki-client