Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/rhdyAw8cgf05vzajT2FBLQ9vMv4.roa
File: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (raw, json)
Hash identifier: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=
Subject key identifier: AE:17:72:03:0F:1C:81:FD:39:BF:36:A3:4F:61:41:2D:0F:6F:32:FE
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019CB90743D604163C7F6ACE47522D2EE289
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/rhdyAw8cgf05vzajT2FBLQ9vMv4.roa
Signing time: Wed 04 Mar 2026 13:26:26 +0000
ROA not before: Wed 04 Mar 2026 13:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200949
IP address blocks: 185.46.239.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:07:43:d6:04:16:3c:7f:6a:ce:47:52:2d:2e:e2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Mar 4 13:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae1772030f1c81fd39bf36a34f61412d0f6f32fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:1e:19:fa:d8:b3:f0:e5:29:6d:44:c7:a3:
86:50:4d:fc:b0:30:10:c7:24:e3:98:fc:08:33:6e:
30:c1:1d:fd:dd:86:17:de:57:09:f9:8d:9a:f0:e3:
27:be:9d:e7:b5:67:e7:da:01:82:21:b3:6b:12:2a:
6c:40:9d:5e:c6:fb:70:7c:31:67:a9:7b:5a:9f:fe:
78:1d:a3:8b:0f:ec:8a:5e:11:4e:4e:dd:ed:42:dd:
8a:68:c1:95:7f:64:c6:1e:fe:df:3f:c6:43:23:9d:
65:c0:f8:17:db:de:db:42:19:be:6c:bd:f9:38:30:
63:00:8a:b7:c4:09:05:dc:d3:0c:b0:6c:19:d4:59:
c6:a6:a5:8b:d8:67:66:85:28:c0:15:bb:fc:eb:45:
fc:41:79:c9:94:16:02:61:5e:1d:15:a7:47:a3:3b:
e6:d4:ca:5d:7d:bb:1e:17:23:7b:ac:c1:00:a9:c8:
ca:82:87:fb:f2:08:3d:18:cd:d4:3c:38:5e:8f:b8:
82:dd:78:eb:9d:fd:4e:5a:6c:a3:13:b6:da:78:c4:
cb:dc:ad:a3:92:ef:56:97:5e:69:b9:01:7c:9c:11:
dd:5d:48:33:f1:c0:25:51:c5:2a:55:fd:fc:e2:ef:
d8:23:df:e7:1e:a1:3a:3d:f5:9f:87:d8:88:eb:37:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:72:03:0F:1C:81:FD:39:BF:36:A3:4F:61:41:2D:0F:6F:32:FE
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/rhdyAw8cgf05vzajT2FBLQ9vMv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.239.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b6:45:4a:e3:d0:99:29:3d:8a:b8:f0:a0:2a:8e:cc:6c:a3:
91:e4:66:16:43:64:79:02:ba:17:7c:f2:4c:c6:38:25:b8:98:
44:47:8a:98:37:d9:d3:ee:05:2d:76:b6:4d:62:51:4d:73:a2:
e6:e1:e8:26:c0:49:1d:5a:6a:ad:e7:56:f9:9b:8f:89:7f:94:
c2:8a:4c:65:53:7c:a2:d9:e5:cd:b6:a2:fe:c1:bc:7e:a1:fa:
c7:b6:22:c3:a3:3c:08:fc:09:21:c6:3e:6e:db:9e:16:97:7a:
4f:3c:6c:14:83:a1:83:b2:3f:22:43:81:0b:75:50:9b:10:b3:
6d:41:85:1e:d1:14:35:b7:90:0f:7c:44:fa:70:2b:ae:70:28:
b4:13:0b:83:da:4d:c4:c0:a2:9d:1b:bd:5f:d7:b1:37:e0:03:
43:37:0f:c6:90:8d:b6:a4:ab:0f:bb:27:04:a5:f9:a7:96:4d:
6d:5e:51:ac:08:cd:5f:c0:3b:f9:4b:a4:ec:d3:a5:d2:ae:6b:
c5:3d:e0:43:3f:28:34:fe:96:30:b0:67:f9:e0:d4:ec:17:31:
1a:48:eb:fe:bc:d2:86:21:73:6b:e0:8d:db:49:78:d7:bc:68:
6c:e9:ba:28:e0:05:79:15:3a:2f:a3:83:69:47:b5:e1:6f:6d:
c3:61:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:52:45 2026 by rpki-client