Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/RraCU1FdSwDEnSWRlBmJqOVuy60.roa
File: RraCU1FdSwDEnSWRlBmJqOVuy60.roa (raw, json)
Hash identifier: jD/NC2CoShbQZPrlOSKzTC/IQPLhk6FCCUpGbDzt/Jw=
Subject key identifier: 46:B6:82:53:51:5D:4B:00:C4:9D:25:91:94:19:89:A8:E5:6E:CB:AD
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01A140921B46D07B7987DDBEDD988A6CCE4B
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/RraCU1FdSwDEnSWRlBmJqOVuy60.roa
Signing time: Thu 15 Oct 2026 17:17:59 +0000
ROA not before: Thu 15 Oct 2026 17:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42635
IP address blocks: 185.253.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:92:1b:46:d0:7b:79:87:dd:be:dd:98:8a:6c:ce:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 15 17:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b68253515d4b00c49d2591941989a8e56ecbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:cf:df:e0:3c:76:99:3e:1c:a8:80:63:32:
54:50:72:42:16:5a:ed:0e:53:62:16:bd:d5:b9:79:
64:98:23:2e:95:82:68:f6:0c:ec:22:73:af:1e:17:
f0:82:de:b1:33:2f:a6:10:ff:bd:b5:ee:a6:a7:cb:
9a:08:c3:2c:e2:30:de:1a:f9:85:9c:ed:30:a4:a4:
f2:96:2b:43:36:01:1f:a4:31:37:a1:40:8e:d8:64:
aa:db:ae:c0:49:e8:5f:31:41:e5:17:d7:ff:48:a7:
a2:58:fb:c3:96:db:41:01:ac:06:86:39:26:4f:fc:
29:7c:e4:da:8c:22:ec:b0:8c:21:fc:76:8d:a4:ed:
a1:a3:fc:3f:8d:1a:88:5b:38:a4:fc:37:5e:a7:db:
d1:a6:00:88:91:17:60:ee:6c:0e:5e:3d:da:3b:38:
a9:98:43:69:83:3c:f6:3c:e3:42:25:26:08:6d:0a:
ea:5d:80:61:19:c8:a0:21:5c:f9:6c:91:56:ad:43:
3d:bd:66:83:85:37:96:05:06:dd:4b:c4:27:c1:c8:
b5:0f:79:79:1c:0b:bc:09:14:e2:36:3a:0b:68:69:
30:8c:89:c7:62:1e:2c:e7:43:cd:7f:e7:26:00:27:
80:8e:db:06:67:df:f5:5e:11:45:f4:47:bd:3e:09:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B6:82:53:51:5D:4B:00:C4:9D:25:91:94:19:89:A8:E5:6E:CB:AD
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/RraCU1FdSwDEnSWRlBmJqOVuy60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.56.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ce:2c:7a:b0:cc:73:e8:7f:43:95:ae:8f:47:4a:b8:bc:41:
12:6f:12:d4:39:bd:67:14:fe:d5:b1:54:ed:43:35:31:9b:a3:
fd:58:0b:29:a4:10:de:a7:0f:cd:81:d7:dd:a3:98:3a:9a:aa:
11:c2:29:e8:09:bc:02:94:ba:4b:e8:63:1d:0e:43:fd:8b:de:
8f:f7:f3:63:b2:80:6a:58:0c:8b:bc:ed:ff:f6:3e:20:36:53:
02:e4:7b:ee:da:a7:61:f2:7f:1a:39:6b:0d:ca:7f:b2:53:3f:
08:32:6e:82:4e:03:df:3b:e1:4a:44:bb:18:67:79:01:37:89:
4f:bc:c4:c8:e2:87:a8:96:00:6b:91:76:e0:da:3c:42:20:85:
4d:da:81:bf:38:b4:92:8f:46:28:3a:31:ce:0a:95:ce:c0:d4:
0d:4a:69:96:4e:2e:c5:13:5b:3e:3c:e4:ef:2e:da:ef:d8:91:
d6:bb:bd:f9:70:d7:12:30:57:d8:94:28:bd:e9:93:6d:b4:c7:
93:25:a0:bf:7a:6c:37:03:f4:49:47:33:46:60:89:13:da:2a:
db:34:13:93:d4:40:02:ac:98:d1:d8:1d:f4:3c:c0:c0:2f:02:
db:62:4c:69:ae:d9:a8:c3:3d:33:71:c2:cb:4a:6b:65:6d:38:
57:ac:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:40:20 2026 by rpki-client