Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa
File: kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa (raw, json)
Hash identifier: cR+B2aSbgK9oYsX7XVgQQUC65hAlxi75/D9//6oPh48=
Subject key identifier: 91:22:74:2B:D9:A0:31:67:CF:1D:28:D7:98:5D:69:4C:89:3D:93:58
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F1D24461BA5F2C830555D8C7A8E9F50F5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa
Signing time: Wed 01 Jul 2026 10:05:44 +0000
ROA not before: Wed 01 Jul 2026 10:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213732
IP address blocks: 46.38.146.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:24:46:1b:a5:f2:c8:30:55:5d:8c:7a:8e:9f:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 10:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9122742bd9a03167cf1d28d7985d694c893d9358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:6a:98:fc:e8:27:7d:2e:fd:58:53:c7:81:
62:57:cd:e1:54:1f:0e:cf:00:6a:27:35:1b:81:c2:
1e:b1:4b:72:08:61:16:98:1e:44:36:ef:7e:10:d1:
bd:7f:94:b0:ab:4f:0d:39:dc:12:c3:d3:62:20:cf:
3d:78:39:10:ce:ab:b7:3a:a1:e3:98:0f:e1:e9:63:
42:a1:3f:de:b6:8a:8b:d0:a7:88:1c:23:0f:bf:f4:
74:d7:c2:cb:62:77:f6:16:a8:a8:66:04:c6:12:cb:
22:60:77:18:4c:2d:1a:db:97:fa:8d:c8:61:67:32:
7c:f0:8b:8b:8e:7e:b9:c4:14:f6:ce:4b:eb:47:b3:
e7:66:bb:0f:b9:0e:bb:fe:ce:69:8e:0d:74:98:5a:
21:ee:9b:8f:0f:e1:53:ce:e9:a2:79:d6:98:4f:2c:
cd:ea:0d:fd:83:03:f9:8d:a9:8c:c9:13:07:5e:79:
cf:fa:85:d1:95:64:3b:6f:e3:df:cd:99:29:32:44:
1b:49:97:d9:15:09:76:14:cd:b8:b0:67:01:46:8e:
fe:fe:4b:81:14:21:9a:52:98:5d:b5:36:34:7d:26:
48:8a:c9:63:92:0d:59:d9:9f:3c:17:78:1d:2d:f8:
f3:0c:2e:aa:74:77:fe:4a:c8:bd:bc:39:96:8c:49:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:74:2B:D9:A0:31:67:CF:1D:28:D7:98:5D:69:4C:89:3D:93:58
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/kSJ0K9mgMWfPHSjXmF1pTIk9k1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:15:7f:99:1e:08:1a:f4:b2:6b:cf:67:8b:03:d4:ea:d1:85:
cd:b3:6c:44:92:72:73:9e:ba:7a:36:fd:40:70:91:68:d0:33:
70:70:bb:e3:88:a2:f4:cb:80:79:de:9e:99:ee:07:80:0d:a7:
1c:b7:e4:73:30:b8:3b:b6:9a:fd:5d:fb:44:a7:66:c2:cb:6c:
ae:9d:e5:9b:36:01:af:f3:87:28:c3:63:45:d6:10:ad:ff:ed:
d1:e2:78:15:61:2c:9d:7a:55:0d:4c:81:2d:68:13:2c:4a:a4:
70:af:55:fe:aa:7e:df:61:af:bd:fa:d6:1a:37:88:30:22:d2:
c2:ea:15:74:69:fb:3c:40:0e:c4:3b:e6:d2:01:24:57:e2:bb:
18:9e:fc:a5:c4:c8:a3:f8:53:66:ca:40:1b:db:a4:32:1f:69:
9b:76:85:98:0f:02:51:36:ee:92:ca:dc:a1:2e:ca:30:18:d7:
22:31:a3:d8:8d:5e:68:20:6c:15:fd:78:b2:04:32:ae:f9:d3:
f8:e5:f2:96:79:96:c1:ba:7b:85:a4:80:70:d1:e3:67:c4:dc:
d6:47:57:4c:5e:93:ce:2b:83:10:42:d8:87:c3:b0:e4:ac:7e:
84:de:95:51:2c:b4:d1:03:33:b7:5b:c3:95:91:b9:75:eb:28:
1e:bb:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:24 2026 by rpki-client