Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa
File: Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa (raw, json)
Hash identifier: VPXWtkcRoqenTFTGsnbFju9ExWbFs0kC7hYX+4JSVX8=
Subject key identifier: 2A:BD:5A:E2:76:E4:83:04:1D:A1:4A:FE:7C:E1:6A:3C:15:EE:C0:74
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019DCA2D68BD7426B4C37518EFE96E352A9D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa
Signing time: Sun 26 Apr 2026 14:24:26 +0000
ROA not before: Sun 26 Apr 2026 14:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 46.38.146.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:2d:68:bd:74:26:b4:c3:75:18:ef:e9:6e:35:2a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 26 14:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2abd5ae276e483041da14afe7ce16a3c15eec074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:24:a1:74:70:eb:75:fa:54:54:91:8a:7b:
51:a3:f2:05:b3:33:33:2c:01:76:bf:2a:64:45:da:
eb:cf:c4:e1:e8:4a:37:2d:c5:20:cf:cc:fe:63:7e:
8e:44:15:0e:1d:5d:3a:a4:8b:04:bb:55:71:68:1a:
47:2f:06:77:2f:9e:f6:a0:59:40:f3:b2:af:2d:36:
39:90:0a:e0:46:85:23:39:40:de:b0:7d:ee:9c:44:
e7:75:67:91:3a:ff:04:ec:77:c5:c0:12:e2:15:ce:
65:85:44:1d:a6:e8:1e:d4:31:da:f1:13:06:9e:86:
8d:9a:ee:df:3c:10:15:8e:81:d8:d1:39:33:e6:12:
9c:bd:55:b8:0c:bd:54:e1:e4:66:b9:20:8c:8b:22:
39:ca:b7:20:73:7c:9d:49:5a:43:8d:a5:2d:90:12:
3b:14:db:38:66:e0:3d:b7:35:ec:55:80:77:f3:bf:
c9:79:19:95:b0:1e:b4:a4:d1:36:ee:c3:25:76:31:
3f:18:14:ac:25:80:c1:bd:ae:23:e2:08:d7:6f:8a:
a9:63:6f:ec:bf:b4:4f:84:e8:49:75:e5:b7:ec:8c:
ea:46:11:5c:2b:b4:8b:70:f3:9b:6a:87:98:e2:eb:
a3:c8:00:37:44:f7:f4:a7:82:57:46:53:cb:5e:66:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:5A:E2:76:E4:83:04:1D:A1:4A:FE:7C:E1:6A:3C:15:EE:C0:74
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Kr1a4nbkgwQdoUr-fOFqPBXuwHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2e:5f:e2:c4:0b:67:37:bf:7d:cb:8a:45:8d:7a:79:1c:c9:
5e:ef:4a:ec:a8:82:5c:5d:18:bd:25:37:37:69:75:e7:3e:8c:
c9:04:a0:7b:19:93:18:88:22:1d:bc:bc:c3:94:49:69:1a:68:
ab:e5:7e:50:4d:02:79:a1:ac:f7:8f:25:76:6a:4a:60:25:3c:
db:91:3c:a5:66:84:4f:ce:af:fd:80:b9:fc:bd:5d:11:03:13:
10:0f:6d:04:5a:66:a1:03:fa:0c:04:5e:21:5d:74:4f:0e:c3:
da:02:f3:23:b1:69:28:da:d3:5a:a4:56:34:fd:11:38:e6:01:
a2:8d:c3:95:1e:4d:26:b8:e6:e8:ad:cb:3a:98:e4:ce:bd:b9:
3e:28:1e:38:c1:0f:55:18:ab:d3:67:9c:81:a2:bd:a3:5f:1c:
88:b0:65:2f:55:1c:48:e8:ca:03:5d:f0:e0:c3:ed:de:af:c7:
c2:40:64:2b:f2:31:f4:3f:96:d9:c9:f3:40:2b:32:45:d0:4d:
47:2b:44:21:02:11:37:40:40:68:75:6e:ea:3d:44:71:ae:e4:
12:b2:c2:8e:9f:bb:44:3a:f5:30:68:cd:be:53:1a:15:57:5b:
6d:58:15:04:1c:07:64:2d:2c:0b:53:7d:ad:ca:1f:8e:3e:2f:
04:3d:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:00:43 2026 by rpki-client