Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kHTjnucgQ1bKG3PRbGy6oqJPhyY.roa
File: kHTjnucgQ1bKG3PRbGy6oqJPhyY.roa (raw, json)
Hash identifier: hMBd2WJaqAJZaluVhsmluo1ww0NN5eq8hfy8FEdnoAY=
Subject key identifier: 90:74:E3:9E:E7:20:43:56:CA:1B:73:D1:6C:6C:BA:A2:A2:4F:87:26
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019F7F6D40A69ED8CB28B1AB3F1B6E69CA1B
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kHTjnucgQ1bKG3PRbGy6oqJPhyY.roa
Signing time: Mon 20 Jul 2026 12:08:14 +0000
ROA not before: Mon 20 Jul 2026 12:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 46.253.3.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:6d:40:a6:9e:d8:cb:28:b1:ab:3f:1b:6e:69:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jul 20 12:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9074e39ee7204356ca1b73d16c6cbaa2a24f8726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:e4:5f:40:6a:ae:2c:d2:e5:ee:5b:ec:ba:
d1:77:ef:db:0b:9e:ca:0e:22:3e:aa:16:af:1e:7b:
23:2e:8c:3f:3c:4e:bc:a8:88:e4:5a:f1:4c:03:2c:
41:a3:fa:bd:c3:20:e7:63:57:c3:34:3b:e0:98:83:
dd:09:f9:83:6c:72:28:9e:7d:24:14:09:96:20:03:
b2:92:d9:a6:e9:da:39:1a:7e:86:32:b8:4b:21:f7:
2b:9a:71:dd:b9:b3:95:a9:14:bc:8f:bf:00:d9:72:
df:a2:87:7d:7c:05:6e:f6:fe:a6:4d:18:10:6a:6a:
13:18:88:93:bf:6a:64:94:8d:71:58:75:af:35:93:
5d:b2:cf:2f:3b:a6:8e:10:2c:23:69:13:c4:df:5c:
c7:a3:67:6e:ae:02:de:aa:65:1d:22:9d:c8:41:f3:
33:65:ea:1f:2c:8d:3a:12:5f:e9:d4:e0:ce:29:8d:
46:93:7d:1f:dd:5f:08:08:52:94:dd:e5:f1:3f:75:
df:0d:ac:fe:83:0c:4a:f2:bf:59:e9:b9:39:e3:b1:
ed:96:bf:8e:b7:0a:73:cb:f6:05:73:58:b1:0b:5b:
8b:68:d3:a0:8a:96:23:ed:08:51:0a:20:d5:96:e0:
d9:52:aa:7b:bf:e1:eb:58:61:ff:f5:bf:07:34:2b:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:E3:9E:E7:20:43:56:CA:1B:73:D1:6C:6C:BA:A2:A2:4F:87:26
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/kHTjnucgQ1bKG3PRbGy6oqJPhyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.3.0/24
46.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:07:9b:eb:9c:37:aa:a5:77:22:8b:99:00:64:9a:cf:db:5b:
a2:83:95:3c:ba:0f:d7:c0:a1:eb:76:4d:76:59:7a:7d:90:be:
ae:fb:a5:a8:9c:c0:4b:29:7f:50:7c:4f:10:75:d1:4b:ce:2b:
8f:2f:a5:4a:da:51:c4:80:c1:89:09:20:7d:d4:4c:e3:58:fe:
12:29:71:8b:e0:e2:7c:f3:ea:e7:4b:c9:25:68:79:7c:9f:59:
43:bd:54:fe:ca:62:39:bf:05:65:10:22:93:62:61:05:d4:5a:
a6:ba:25:d9:f4:d2:28:c4:8d:b6:2f:3c:f2:2c:3b:64:72:ac:
a3:b0:9f:12:cb:f7:4b:28:76:9d:99:9d:5d:8e:25:72:a4:f8:
90:5f:08:fd:71:8b:cf:9c:16:78:45:df:ef:49:f5:bb:f5:e3:
eb:70:7a:85:67:42:aa:6c:9c:73:9f:53:77:92:14:8e:fc:5f:
23:3e:be:7e:ab:72:4f:63:ad:ec:b4:65:49:92:10:78:97:67:
45:4a:5d:1c:49:ef:22:aa:ba:95:3b:82:84:02:b0:d7:09:fa:
ee:c1:ab:24:61:68:c9:42:a7:6c:25:d5:44:38:4c:c6:24:f3:
72:fc:d7:19:e2:72:6f:ad:b7:c2:f7:44:6f:76:38:81:86:99:
f3:5e:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:25 2026 by rpki-client