Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CSmKTNAvawh8XsEkgkrFERa_yiY.roa
File: CSmKTNAvawh8XsEkgkrFERa_yiY.roa (raw, json)
Hash identifier: uAIJ9ALdwfJ9g4zl3CS6Ug1EGzr6MThwz4GVhjHfCeo=
Subject key identifier: 09:29:8A:4C:D0:2F:6B:08:7C:5E:C1:24:82:4A:C5:11:16:BF:CA:26
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019FDC43E37D9D7836A7A80CEFDC194F61D7
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CSmKTNAvawh8XsEkgkrFERa_yiY.roa
Signing time: Fri 07 Aug 2026 12:47:44 +0000
ROA not before: Fri 07 Aug 2026 12:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200566
IP address blocks: 46.20.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:43:e3:7d:9d:78:36:a7:a8:0c:ef:dc:19:4f:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 7 12:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09298a4cd02f6b087c5ec124824ac51116bfca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:28:36:47:c2:35:85:e1:c4:a1:2a:14:79:
39:55:28:54:f5:fe:ee:43:c0:ff:ec:3c:90:5c:e7:
68:5f:d4:e7:67:93:bf:23:a9:e5:88:82:96:cb:0f:
8d:1b:2b:1a:e7:5f:89:93:86:72:0a:2d:47:41:03:
bf:af:34:90:98:44:96:a4:b4:16:54:8a:d1:4b:27:
c5:54:64:90:97:0e:14:3a:a0:6d:41:ed:0c:97:52:
b6:0a:b3:e2:f6:a7:c7:e2:a5:2b:1f:10:d4:f4:a7:
60:f6:83:d7:02:47:2d:4e:09:0c:60:64:66:42:c5:
a1:6b:2e:fc:cc:26:fb:99:fe:88:67:6c:43:91:11:
4f:31:2d:4e:26:b9:dd:35:6f:04:b6:e6:c4:0b:d5:
88:0b:47:a3:7d:5e:f6:be:79:99:b1:55:c9:78:88:
8d:29:6d:ad:e0:4c:c6:72:f5:dd:1e:b5:31:64:3a:
2f:19:bb:c0:c4:a8:70:17:03:83:3f:70:d0:62:59:
a6:c4:e4:7f:14:96:50:a2:a4:2d:94:db:fe:8e:ae:
e9:3f:30:78:55:42:da:0a:04:60:68:2f:44:45:e7:
d1:53:81:63:c2:a8:b4:7a:46:5c:92:27:d1:3d:b6:
38:cd:34:bc:a4:c4:a5:7c:fc:ca:19:fa:a5:b5:6b:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:8A:4C:D0:2F:6B:08:7C:5E:C1:24:82:4A:C5:11:16:BF:CA:26
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/CSmKTNAvawh8XsEkgkrFERa_yiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f6:86:58:72:27:03:fb:80:62:e2:81:22:27:9f:31:5f:05:
02:60:ca:be:62:9c:35:85:5e:7a:b2:66:4a:a5:ec:75:49:18:
e0:8d:ff:35:e9:96:ce:7a:18:7e:f0:87:de:0b:b6:e0:ab:b5:
15:b4:4f:3c:50:1c:08:99:24:b1:53:84:7d:03:cb:c7:77:7c:
d3:84:a5:2e:4e:73:04:db:e0:49:2a:0f:d9:3f:27:60:94:db:
d7:8f:27:3a:27:4d:b6:9e:90:52:ef:d8:16:96:68:33:9b:30:
97:06:e6:24:af:37:66:6a:e0:fa:6a:6b:d4:55:2c:08:02:ae:
26:4b:8d:d2:41:60:b9:73:0e:9d:e2:47:7a:05:96:58:1b:6d:
df:f9:3d:5c:80:45:68:cb:4d:09:ad:8e:72:3c:13:5f:d6:e5:
fb:6e:1d:4c:f9:21:cf:5f:11:28:5e:ff:12:d1:74:bb:c9:39:
c4:5a:a7:45:ad:01:e3:4d:18:20:cb:49:2d:4d:09:53:b3:38:
ee:74:33:29:f2:3a:5b:50:c3:3a:57:5a:9f:e5:0c:30:98:0c:
cf:e0:7f:33:2a:f7:d4:d9:35:a8:35:ad:d3:08:5b:69:27:d7:
2c:75:a9:61:9e:13:62:f5:c4:ec:28:89:6e:e5:f7:d6:8f:c2:
11:7b:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:50 2026 by rpki-client