Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8eSRY56ivoj5PMJbAEpCd7XTFLw.roa
File: 8eSRY56ivoj5PMJbAEpCd7XTFLw.roa (raw, json)
Hash identifier: Y+Fe7VR6p71IHtGPJcZTT8CUnj4YW5cc/AzcKvuJhU8=
Subject key identifier: F1:E4:91:63:9E:A2:BE:88:F9:3C:C2:5B:00:4A:42:77:B5:D3:14:BC
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A01DDF7BA6A58FF414ED552D0B8577E718
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8eSRY56ivoj5PMJbAEpCd7XTFLw.roa
Signing time: Thu 20 Aug 2026 06:33:00 +0000
ROA not before: Thu 20 Aug 2026 06:33:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 46.17.12.0/24 maxlen: 24
46.17.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:df:7b:a6:a5:8f:f4:14:ed:55:2d:0b:85:77:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Aug 20 06:33:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1e491639ea2be88f93cc25b004a4277b5d314bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:28:bd:6e:7c:4b:16:31:1b:f4:35:8c:4e:
8d:d6:7c:e1:f2:32:e7:8f:14:63:18:4f:ad:52:2a:
96:33:c9:69:3e:c4:23:d4:64:b8:da:74:d1:0f:ad:
64:d9:42:4c:0e:fe:82:71:32:33:64:9d:ee:df:cc:
ff:6b:92:ec:e1:47:69:f9:8e:cd:93:84:91:43:99:
26:f3:5b:80:73:a5:f4:52:03:c8:71:27:9c:bd:19:
fc:1f:3c:cc:5b:cf:80:53:c1:7c:59:2a:02:2f:35:
3a:b9:b0:52:a3:31:d2:f5:50:55:be:be:01:91:d3:
b8:30:bf:11:1b:3f:b9:0a:c4:01:f5:b6:55:6b:76:
f2:46:cb:b6:f8:02:b3:0e:87:2d:80:f4:56:01:13:
e7:be:4f:4c:e5:83:17:09:96:1f:53:73:8a:c1:0a:
3c:a3:cf:47:dc:f5:93:4b:50:e6:0e:ba:4f:99:d2:
b5:66:6d:5a:61:53:db:fa:c0:3d:e7:3c:2d:f5:f7:
3f:00:d0:41:c5:d6:c0:f1:63:2c:7a:82:af:38:55:
24:85:ed:0d:d6:b4:69:c5:4c:66:ac:d6:b9:20:72:
d2:15:f5:d3:d9:cc:96:e8:79:54:b0:41:f3:5d:de:
f3:2a:dc:87:ee:7b:a4:33:cf:d5:7c:89:92:9b:14:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:91:63:9E:A2:BE:88:F9:3C:C2:5B:00:4A:42:77:B5:D3:14:BC
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8eSRY56ivoj5PMJbAEpCd7XTFLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.12.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2f:6a:7f:38:02:f4:da:8c:4c:ec:b7:77:cc:94:fb:97:49:
3c:62:95:20:73:05:4a:55:61:21:5f:b6:d4:77:0c:ab:33:e9:
84:db:ec:80:88:a9:d7:fc:29:e5:42:ce:17:26:a6:1d:d4:0e:
7b:ea:13:78:38:93:24:b0:49:c5:f1:11:31:79:65:bb:3b:f9:
3e:4d:b4:6b:a0:99:ec:bf:fe:0c:39:f5:49:73:94:96:8c:51:
61:ed:cc:5d:bb:2a:f7:00:03:55:36:14:8f:24:73:5b:07:bd:
d6:f3:f1:2a:cd:5f:88:47:ad:5d:d0:fd:27:3f:58:d8:8a:13:
c1:92:86:97:ed:78:11:87:ae:51:17:72:f4:16:1c:a8:92:5b:
ac:be:78:78:19:0c:2b:dc:37:d6:9d:3d:79:b1:f7:e3:f5:c4:
6d:3a:13:ee:20:9c:b8:90:8e:24:72:7c:e2:b7:f5:be:9f:8f:
fc:25:7f:91:0d:bd:51:0a:5d:4d:78:1f:bb:2b:ce:5b:89:e1:
cb:d4:57:e0:8b:fb:1b:36:6d:ce:03:91:27:30:15:44:99:35:
a5:f6:ad:d2:ba:17:44:5f:bd:c5:0c:4b:69:80:25:89:fa:6b:
57:ed:d8:b9:3d:ec:27:73:9b:81:ca:64:b9:03:ef:f2:63:63:
6f:67:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:50 2026 by rpki-client