Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/o1UYE1jV5PblyZO2iNZ4-raUgSI.roa
File: o1UYE1jV5PblyZO2iNZ4-raUgSI.roa (raw, json)
Hash identifier: 27dqGZSaERzz4YwOJ962/KtMY8HRkVITXFCH3q2fZyY=
Subject key identifier: A3:55:18:13:58:D5:E4:F6:E5:C9:93:B6:88:D6:78:FA:B6:94:81:22
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019ED11B20E9887CE28FC92510566E0A58D8
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/o1UYE1jV5PblyZO2iNZ4-raUgSI.roa
Signing time: Tue 16 Jun 2026 15:44:36 +0000
ROA not before: Tue 16 Jun 2026 15:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 46.20.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:1b:20:e9:88:7c:e2:8f:c9:25:10:56:6e:0a:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 16 15:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a355181358d5e4f6e5c993b688d678fab6948122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:6a:65:90:3a:6a:1c:a4:c6:26:91:6d:68:
5f:1e:f2:88:d2:cc:eb:af:20:43:38:a1:8e:7e:f6:
ea:af:f8:97:48:1d:73:97:28:e0:79:31:0c:7b:22:
2f:0d:57:ac:36:55:af:73:0c:a8:7c:df:33:b5:1d:
d8:81:7b:0f:c8:e7:22:61:76:1a:31:aa:52:b8:b0:
3f:5b:5c:af:8e:01:a8:5b:81:f5:95:f3:6b:18:4e:
60:f5:56:c7:59:97:ef:06:b3:c4:80:9f:d0:38:96:
de:4e:96:29:18:0e:03:6a:aa:cc:aa:cc:db:a5:03:
7e:92:77:28:11:f6:28:b3:d1:86:a0:75:64:42:db:
b9:e2:a5:66:2f:88:dc:ca:57:6c:24:8a:af:4f:55:
ea:08:de:48:cf:d3:d3:72:38:a3:c5:65:42:34:09:
99:b4:77:67:f6:0c:b3:ab:67:bd:97:bf:08:0a:aa:
06:a5:10:c8:a5:6f:92:54:4f:71:25:82:a7:85:a5:
48:f6:3a:71:52:ad:84:3f:f6:c2:92:83:6e:5c:db:
4d:a8:11:d0:91:55:e3:75:c0:b6:9a:f5:58:34:9a:
ae:57:0d:e5:03:61:34:c0:67:92:38:72:7e:de:0c:
8a:8d:34:f1:f0:c0:e1:90:3c:1c:16:31:6b:b2:a7:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:18:13:58:D5:E4:F6:E5:C9:93:B6:88:D6:78:FA:B6:94:81:22
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/o1UYE1jV5PblyZO2iNZ4-raUgSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.110.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fb:26:c5:ae:11:41:f9:b1:2c:5f:70:c0:0c:51:dc:a3:55:
c9:cc:79:26:62:b6:3e:96:c7:11:cb:c6:36:5a:e0:42:ad:eb:
27:95:61:5c:3d:ca:f7:74:b2:19:4d:5c:6b:3c:c8:82:c5:62:
97:a1:bf:e6:ff:b7:a3:71:1f:d1:b0:bf:8d:8b:f2:d2:d7:9e:
da:32:ec:df:d8:58:33:43:96:37:d5:dd:e9:f2:76:6b:fd:86:
db:d8:e9:5e:3d:10:b2:40:ed:c1:13:a5:c7:54:6f:89:9c:89:
9c:9f:f8:86:2a:80:a7:11:3e:da:ca:42:84:86:be:a2:d4:d4:
f9:ff:18:91:a0:60:5a:84:66:ac:29:bd:15:ec:34:6f:df:a6:
55:6a:d7:8e:28:a6:cb:cd:34:a4:10:3a:39:10:c5:1d:42:d7:
eb:fd:46:ac:fd:8f:f5:a1:29:a2:85:74:a1:39:88:d4:3a:87:
ae:cb:43:e0:99:c8:cf:27:fb:10:d9:c8:50:a0:53:02:a8:b1:
f4:3a:24:0b:d0:5e:2d:15:b7:04:fa:90:ec:26:40:af:7e:f4:
00:66:1f:ef:a4:d8:2f:04:cc:85:81:4e:ff:3c:3a:0b:f5:0d:
bc:0e:54:c3:19:df:fc:45:7b:73:fa:54:d8:9a:b9:1c:0a:23:
c1:ad:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:20 2026 by rpki-client