Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa
File: PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa (raw, json)
Hash identifier: xH29u4bjzu1wjXHSI6AzFo4CKDsCw4Lu39FOZp62TT4=
Subject key identifier: 3C:8F:A2:C9:F8:23:A8:EB:1C:90:D2:E8:6A:A7:7C:BF:F9:95:F0:0A
Certificate issuer: /CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Certificate serial: 019F8F27BDEC0A0B883BCEFEC23DD6EAF6FE
Authority key identifier: 30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa
Signing time: Thu 23 Jul 2026 13:26:14 +0000
ROA not before: Thu 23 Jul 2026 13:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35228
IP address blocks: 46.233.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:27:bd:ec:0a:0b:88:3b:ce:fe:c2:3d:d6:ea:f6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a9c957d2091d24e0dfe5f66c97be4aa1f93084
Validity
Not Before: Jul 23 13:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c8fa2c9f823a8eb1c90d2e86aa77cbff995f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:d5:a2:24:7b:90:57:b0:86:17:f8:b3:c7:
41:c1:13:d5:7e:9d:d7:7c:0b:21:2e:41:9e:17:3f:
b7:6c:91:4e:0b:40:e8:d4:15:c1:5e:a2:16:7e:32:
0c:8f:2a:2a:95:7c:59:aa:8d:5e:89:4f:a5:0e:4d:
99:9e:90:bc:6d:50:a4:a0:00:0b:ea:e7:53:15:3f:
df:0a:7a:72:1f:a4:24:35:08:07:47:60:17:70:75:
67:65:b8:52:e4:9d:62:25:a4:89:80:f1:30:5d:1e:
db:13:80:6e:ef:81:1a:47:dc:98:7d:e6:0b:c8:e5:
3b:57:0f:5d:d7:79:25:26:97:1f:5f:6e:aa:b6:24:
5f:a0:58:f4:30:0c:ff:95:55:8c:b2:5a:22:61:0e:
1c:ae:d8:df:34:ba:00:1d:28:d2:31:c8:ba:0d:7f:
8f:6e:04:dd:0f:fe:d2:43:fe:85:70:10:6d:09:1d:
87:d3:78:fb:68:31:f4:e5:ef:f7:5b:9d:74:a5:e3:
81:da:a0:20:46:34:a7:6a:11:59:0a:d1:4a:0e:60:
0a:34:b1:8a:2c:97:21:b1:0f:fa:a3:02:1f:39:99:
3b:f4:ae:0e:84:ea:66:12:13:8b:39:60:90:20:8b:
54:03:e2:0e:b3:4d:c6:4b:8d:2b:73:94:4f:a8:97:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:A2:C9:F8:23:A8:EB:1C:90:D2:E8:6A:A7:7C:BF:F9:95:F0:0A
X509v3 Authority Key Identifier:
keyid:30:A9:C9:57:D2:09:1D:24:E0:DF:E5:F6:6C:97:BE:4A:A1:F9:30:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/PI-iyfgjqOsckNLoaqd8v_mV8Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/812a15-c6e4-416a-b09d-84bf31de8413/1/MKnJV9IJHSTg3-X2bJe-SqH5MIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:5b:91:e8:df:2b:99:3d:23:d2:c3:39:a4:2a:22:31:52:74:
f3:58:c6:08:01:cc:9b:c7:17:65:ea:2a:2f:04:b1:f8:92:62:
f5:97:5e:0d:98:d5:44:ec:18:0b:e0:fc:e6:06:00:bb:0a:19:
8c:4c:6d:8b:3b:8c:29:c8:e4:2f:3f:37:42:2c:47:22:21:95:
ea:ca:5f:96:94:c6:2d:5d:8d:51:1b:70:1a:dd:de:42:db:06:
2a:7b:11:64:80:b9:78:ff:6f:a7:8f:cf:56:0f:e2:04:71:5e:
01:a3:90:ad:d3:f9:1a:4f:6a:f0:c7:7a:2f:a2:52:ac:54:fe:
31:85:33:05:92:3d:ea:62:7f:3b:ff:bd:e6:e7:e7:08:b6:cc:
ce:cd:6c:8a:3c:93:68:e8:11:43:9d:df:23:d7:28:9f:0b:4b:
84:1d:fc:b2:27:ec:3d:fa:82:2d:ee:b2:aa:be:e9:cd:af:e2:
2f:a3:b1:3d:7c:6f:ed:dc:35:5f:7c:3f:b8:05:a7:6e:47:87:
fc:fc:da:05:09:fc:2b:f1:ad:f9:dc:7e:70:d8:7d:18:d1:34:
da:29:9c:bf:11:ff:41:4f:d8:d2:52:4d:3b:cd:7a:a4:c9:3d:
9a:1a:03:0f:0e:c2:f8:93:96:f9:85:58:c7:0f:cc:ce:ed:82:
3e:ca:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:13:18 2026 by rpki-client