Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/RsP_gS1vytto8pfh2Gzkt62DfV4.roa
File: RsP_gS1vytto8pfh2Gzkt62DfV4.roa (raw, json)
Hash identifier: IYrRFRNaEdhBsiJ0PMSo3hJajBTuq2V0KAMCQzbvIPA=
Subject key identifier: 46:C3:FF:81:2D:6F:CA:DB:68:F2:97:E1:D8:6C:E4:B7:AD:83:7D:5E
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01A0389164ACF6C1E97B6410E7955A721F59
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/RsP_gS1vytto8pfh2Gzkt62DfV4.roa
Signing time: Tue 25 Aug 2026 10:57:27 +0000
ROA not before: Tue 25 Aug 2026 10:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 2.58.56.0/24 maxlen: 24
194.26.192.0/24 maxlen: 24
2a12:a800:1::/48 maxlen: 48
2a12:a800:3::/48 maxlen: 48
2a12:a800:4::/48 maxlen: 48
2a12:a800:5::/48 maxlen: 48
2a12:a800:6::/48 maxlen: 48
2a12:a800:7::/48 maxlen: 48
2a12:a800:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:91:64:ac:f6:c1:e9:7b:64:10:e7:95:5a:72:1f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Aug 25 10:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c3ff812d6fcadb68f297e1d86ce4b7ad837d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:8e:75:e0:a7:68:ea:f0:98:5c:08:f5:86:
4e:2c:de:df:eb:15:10:71:f3:ce:42:31:78:a9:da:
bb:02:06:03:91:1e:ff:84:30:4b:78:94:83:ab:44:
51:c8:bc:77:36:16:5c:c9:3c:8f:34:ea:0b:70:94:
d4:bf:0b:b1:54:8a:7f:7a:a9:18:1c:fe:62:0d:58:
1e:8e:18:39:d2:dc:98:1f:e9:8a:ac:06:35:f7:c5:
c6:89:b7:4c:f8:8a:eb:9c:91:b7:26:89:dd:1c:db:
a6:dd:1e:24:82:c6:9b:1d:bb:8f:29:48:f7:48:f8:
f9:bc:cb:a4:49:f9:53:7e:98:d1:c4:a9:e3:ab:15:
62:2c:ef:bc:9b:ee:d2:cd:a2:16:a8:2f:27:c5:87:
e3:82:a3:77:fe:fe:82:34:db:d6:3b:46:53:b8:99:
25:7a:d0:13:57:4a:17:4b:dd:01:2b:bc:b7:c4:99:
d5:c6:f5:c0:ed:cd:86:25:6b:56:56:46:46:f8:95:
51:f7:41:7e:63:0a:89:00:76:4c:ff:75:b5:3e:34:
98:84:a4:3d:6c:7f:71:15:00:99:24:b5:e9:d1:cd:
b4:b1:07:f5:45:d9:14:98:f6:4d:2e:3e:42:8b:09:
80:af:24:cf:8d:43:c8:55:20:92:43:3c:ef:5e:aa:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:FF:81:2D:6F:CA:DB:68:F2:97:E1:D8:6C:E4:B7:AD:83:7D:5E
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/RsP_gS1vytto8pfh2Gzkt62DfV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.56.0/24
194.26.192.0/24
IPv6:
2a12:a800:1::/48
2a12:a800:3::-2a12:a800:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:2d:f8:76:a4:80:cb:b8:fa:b8:b9:34:68:94:08:ef:72:ec:
1d:9a:07:06:e7:ce:0a:73:60:5b:40:58:2c:dc:65:7b:2b:65:
37:1e:11:c6:82:ee:d9:dc:d9:d1:f2:fa:17:ba:66:ca:62:a4:
c0:65:7c:4f:b0:99:bc:be:b4:16:86:af:27:15:48:10:80:7b:
09:4d:7d:00:25:60:ca:61:4b:f9:8c:e5:e1:18:f3:8c:9f:89:
1c:5f:31:35:12:73:1d:bd:b6:ad:5f:d3:0a:4f:65:84:9a:5e:
c4:d1:b9:bf:1c:c4:0f:8b:d0:38:49:bf:66:e0:35:45:39:d5:
48:3e:24:76:66:7d:a5:5e:6b:69:5b:68:76:cb:aa:36:38:80:
ac:d4:65:60:ad:5b:80:27:c7:9e:55:69:8b:81:35:cc:92:99:
39:47:dc:06:57:f0:91:b6:f0:c0:6f:04:71:bc:79:e9:df:34:
6d:52:9e:91:92:8b:1f:bf:43:51:0b:d5:92:51:bc:12:cc:8d:
ad:63:2f:62:31:27:94:1a:3d:b8:9b:ae:dd:4c:77:99:f3:04:
a6:cd:53:23:a9:e3:65:8d:1d:cf:74:b7:f2:91:e4:90:12:82:
9b:90:6c:ef:e9:43:d5:f6:61:d5:2d:c6:3e:4b:bb:83:3e:34:
1f:cc:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:44 2026 by rpki-client