Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T9Fajrgh3_fNXfQ6y0az6d1d9CI.roa
File: T9Fajrgh3_fNXfQ6y0az6d1d9CI.roa (raw, json)
Hash identifier: PW4S9dlkikoqG8HZLPk5OVwLLoAwFTwAKPF/qiNoZlU=
Subject key identifier: 4F:D1:5A:8E:B8:21:DF:F7:CD:5D:F4:3A:CB:46:B3:E9:DD:5D:F4:22
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019EE2C430636599C6CF7712D8C94A71E656
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T9Fajrgh3_fNXfQ6y0az6d1d9CI.roa
Signing time: Sat 20 Jun 2026 02:02:48 +0000
ROA not before: Sat 20 Jun 2026 02:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199685
IP address blocks: 46.8.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:c4:30:63:65:99:c6:cf:77:12:d8:c9:4a:71:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 20 02:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd15a8eb821dff7cd5df43acb46b3e9dd5df422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2a:96:23:3b:1c:76:9c:f1:78:0d:65:44:bc:
1b:0b:34:d6:61:74:3c:28:e0:fe:cc:f2:56:92:63:
92:47:93:a6:83:0c:69:65:5d:ef:2a:e5:b2:a2:59:
59:a5:57:c9:23:84:08:44:b1:1a:05:42:ae:3c:1a:
7d:8f:d1:46:1c:05:66:94:1b:a2:1b:3f:6a:43:4b:
39:12:8a:ec:b9:38:5c:0d:36:59:94:ad:9e:84:5a:
91:77:d8:23:00:62:9a:25:71:be:3c:05:50:b5:a8:
fe:88:c9:a8:32:cd:ba:94:f9:0f:bf:6a:a1:3e:ed:
f2:d0:77:2a:44:67:3a:ec:df:eb:01:ac:bc:4a:ec:
6b:d1:d3:3d:7e:6f:dd:d9:dd:42:56:26:f6:3c:99:
90:da:a8:b8:1f:d3:0e:37:d7:9b:5a:40:89:93:e4:
60:f6:7c:db:ea:ff:b6:bc:87:1e:38:0b:eb:9a:fb:
d7:b0:00:f1:72:8d:0b:0d:53:45:5c:17:c4:ce:fb:
57:9a:a6:c2:c1:4e:d1:57:2d:07:eb:77:76:76:fc:
ee:91:33:68:ed:62:8e:e4:90:5f:51:42:97:2a:9f:
fc:44:a4:96:74:bb:aa:2e:f3:35:7c:04:dd:f7:6b:
1b:2c:6f:35:ce:75:37:27:86:2d:cd:b4:24:e3:29:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:5A:8E:B8:21:DF:F7:CD:5D:F4:3A:CB:46:B3:E9:DD:5D:F4:22
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T9Fajrgh3_fNXfQ6y0az6d1d9CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.122.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ba:67:d5:c7:72:be:c9:d7:18:ec:70:f6:fe:27:b1:97:39:
67:39:9f:8b:b9:0b:b3:e1:d3:f2:38:f2:b5:9a:13:1c:0a:cd:
2a:b4:07:36:5f:64:46:19:e1:6f:8b:5e:ea:60:dc:3e:16:db:
41:25:e6:62:e4:fd:6c:b9:a3:02:c7:20:88:d3:81:4c:74:5c:
d2:38:74:a1:06:14:ab:03:31:7b:fd:8a:b2:e7:5d:b2:9a:81:
35:0d:eb:56:74:8d:00:51:b6:c2:b3:d6:c1:1b:09:2e:c8:79:
4c:b5:6d:7e:e7:0b:30:72:e0:a6:a5:f3:d2:32:f8:b7:53:14:
8d:3d:2d:c4:89:f2:51:98:a2:0f:eb:cd:6b:d3:3d:a2:4b:74:
f5:10:72:55:55:1d:59:b4:4f:87:98:c0:df:b0:c8:db:e1:6f:
77:cd:72:e8:35:ef:e0:88:0e:4c:ae:ae:e5:ba:13:72:3d:91:
e9:44:c3:f2:99:60:8b:9d:c7:ca:cc:41:e0:08:53:bf:ae:7c:
21:ce:0f:e4:c6:fb:b6:2a:28:2e:19:89:54:8b:bf:8d:6c:5d:
f6:c8:5b:80:ac:24:e1:d4:2c:40:f4:1e:91:8e:17:51:1f:a0:
a6:08:cc:f2:85:d9:72:b8:b0:99:43:b0:4c:1c:46:53:43:5c:
ed:7d:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:08:40 2026 by rpki-client