Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa
File: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (raw, json)
Hash identifier: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=
Subject key identifier: 2B:D5:A2:50:F9:F3:28:C9:34:91:39:F7:60:E0:00:78:6B:09:DC:42
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 019D7DC6E5A246DB5FED051A1D2ED69AC937
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa
Signing time: Sat 11 Apr 2026 18:21:20 +0000
ROA not before: Sat 11 Apr 2026 18:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216405
IP address blocks: 185.46.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:c6:e5:a2:46:db:5f:ed:05:1a:1d:2e:d6:9a:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Apr 11 18:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bd5a250f9f328c9349139f760e000786b09dc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:b3:37:9f:35:9a:0f:9d:29:d9:f4:6f:d5:
33:b1:c5:18:1b:2c:a6:1d:fe:47:31:7b:67:29:e4:
4c:de:2e:75:ca:3f:52:a6:39:02:79:ee:ae:41:db:
33:3e:af:5e:2c:e3:e9:f9:a4:fb:ef:ae:f5:f1:a4:
c9:1d:8c:57:86:e2:49:64:ba:0c:fd:8a:e8:c3:89:
db:b5:f2:3f:08:40:ff:3d:40:19:a5:53:e0:79:76:
53:07:64:3b:ee:4e:79:01:e8:6a:71:81:20:d1:16:
5c:d0:2d:19:e6:bc:dc:d7:b4:ce:59:7d:69:e0:30:
31:6c:8a:84:7c:1f:2b:bc:7b:37:27:30:6d:ad:f1:
64:4a:ec:dd:ef:57:0e:6e:d1:bd:59:fc:16:a1:c1:
83:e0:a3:40:c0:6b:bd:80:ae:e9:9d:fc:9e:49:1a:
ad:24:e7:a7:ce:5a:92:c2:74:b2:7c:f2:8c:34:f7:
50:de:08:1d:15:12:f0:cc:60:bd:a9:7f:b4:92:32:
e4:15:ba:3e:68:bb:81:4e:b9:82:21:fb:0a:d8:f2:
f2:08:0e:aa:54:b3:41:f5:a3:9a:91:27:7c:b9:66:
12:ac:8c:08:74:0c:ef:a9:60:4c:2e:4f:e1:22:18:
7e:e9:ba:e0:92:38:04:e1:03:01:ca:88:d8:31:4b:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:A2:50:F9:F3:28:C9:34:91:39:F7:60:E0:00:78:6B:09:DC:42
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:58:64:ae:2b:5e:8d:80:51:33:61:6f:1b:b9:d5:32:70:18:
69:f9:a0:95:43:7e:bf:db:4a:53:9a:8a:ed:f5:fe:e1:03:25:
f8:70:ef:9f:ed:6f:7c:c8:89:89:9b:60:09:4f:dd:5f:5d:d2:
c8:cb:df:59:1f:04:1f:05:5b:59:cd:e9:d4:36:80:1b:0b:10:
71:2d:ea:ca:79:67:06:cc:90:fd:4d:7b:c8:8a:27:8d:78:f2:
bc:53:20:df:3f:86:9e:37:1a:7d:98:8d:9f:e2:57:fb:27:98:
ef:93:b5:9d:42:c8:cf:38:6d:ea:f8:b5:26:67:5d:a1:2e:ce:
9c:60:3a:78:b0:c7:34:d5:27:92:1f:26:a1:de:c3:bc:6d:d2:
23:35:7e:46:62:28:3f:f1:05:93:8b:4b:fb:8b:24:00:50:ee:
c1:bb:e9:88:b3:2f:66:51:23:0b:a8:57:3f:c5:41:17:92:4a:
6e:47:24:f6:50:18:81:bd:3b:9e:33:45:5e:f9:7d:0c:3f:28:
05:a6:d6:1c:8e:5f:9e:f2:b1:6a:81:98:c4:19:c0:7f:59:2f:
06:7c:54:f0:6e:f4:ab:b6:a7:53:57:57:a3:40:60:f9:01:71:
bb:9f:b3:85:e3:17:74:a6:1e:79:1a:32:50:15:bc:20:33:ea:
97:32:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:13:35 2026 by rpki-client