Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/sTFlHCEfDFEyl2gTuwnl0oKejF0.roa
File: sTFlHCEfDFEyl2gTuwnl0oKejF0.roa (raw, json)
Hash identifier: HseEao8aVDkp6Xjx8kcY4VKu/d1wHur+Sc6LhRL0lC8=
Subject key identifier: B1:31:65:1C:21:1F:0C:51:32:97:68:13:BB:09:E5:D2:82:9E:8C:5D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019E8231E005F68FB85739197D8BCBD63AAC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/sTFlHCEfDFEyl2gTuwnl0oKejF0.roa
Signing time: Mon 01 Jun 2026 07:59:27 +0000
ROA not before: Mon 01 Jun 2026 07:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.41.0/24 maxlen: 24
46.8.184.0/23 maxlen: 24
46.8.186.0/23 maxlen: 24
109.248.175.0/24 maxlen: 24
188.130.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:31:e0:05:f6:8f:b8:57:39:19:7d:8b:cb:d6:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 1 07:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b131651c211f0c5132976813bb09e5d2829e8c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:36:86:b6:16:ad:57:61:75:16:cb:3a:b4:
6d:03:72:f8:f9:bf:27:86:0b:2d:82:28:95:1e:a6:
0b:4f:5d:5f:e6:4f:c1:b4:6b:ff:11:94:96:c2:3e:
48:1f:d3:8a:a9:b0:8e:4a:d9:36:e4:50:68:0b:a7:
a0:1f:b1:b1:56:2a:2a:9e:06:a8:a5:12:c3:3e:42:
32:08:33:81:61:e8:06:b3:3f:a7:d3:4e:76:9a:41:
73:dd:f3:3f:ba:8d:46:4a:50:7c:cc:f5:57:01:8a:
b6:67:19:3e:c0:f7:b3:1c:fe:6f:27:d3:0e:0f:4f:
7c:b2:7a:a2:de:11:b4:e3:83:0f:26:8f:22:9e:c6:
d0:82:37:a1:d3:1e:a3:79:d2:71:cc:74:53:d5:0c:
4e:15:0e:33:01:84:e9:73:40:20:c8:ba:b6:f9:71:
f1:7e:58:fc:de:d7:63:08:b3:d3:7e:2a:6d:32:68:
e2:e1:df:bc:3a:51:ae:4f:ac:84:8f:35:8b:87:ad:
ec:bc:6a:87:10:8a:06:6c:d0:28:b7:07:db:07:28:
b4:1c:d2:c0:4b:31:bd:e5:ee:7a:12:a6:92:93:2a:
87:eb:2f:1f:58:8c:df:66:a2:4e:39:1e:55:1e:a0:
dd:74:6e:35:16:82:0d:e2:07:98:f9:b2:84:31:d7:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:65:1C:21:1F:0C:51:32:97:68:13:BB:09:E5:D2:82:9E:8C:5D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/sTFlHCEfDFEyl2gTuwnl0oKejF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.41.0/24
46.8.184.0/22
109.248.175.0/24
188.130.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:5b:59:01:57:db:42:17:fb:32:96:55:bc:b5:f2:d7:b6:69:
d1:ac:79:b2:44:66:6d:25:d0:a1:80:1a:ad:7f:56:04:03:75:
47:07:ff:2d:d6:95:30:94:e9:97:b3:2c:23:94:79:dc:f2:77:
0e:bf:86:be:08:17:39:93:1b:dd:13:ba:4e:33:d1:c6:00:4e:
5c:d5:a7:63:76:71:15:13:31:8b:91:2a:37:e1:ec:0d:22:9d:
5a:0f:eb:17:da:6a:07:be:c6:df:b9:aa:b9:d5:84:f8:b1:26:
22:b3:37:64:49:4d:ce:02:c2:46:6f:f4:e3:fd:f9:4d:24:1d:
57:5f:9c:a5:f8:27:83:8a:db:b1:61:d2:3e:69:26:6b:79:cf:
28:29:f9:7d:b9:11:99:23:bb:00:2b:6e:00:b9:1e:22:26:52:
09:80:26:49:c0:af:68:38:7c:5a:79:8a:65:59:b4:a1:9a:f6:
db:a5:c4:01:53:27:af:49:d7:21:d3:0a:d4:5b:ab:2c:96:6f:
9d:aa:51:1b:08:1f:45:3b:66:ec:86:18:e3:24:18:8b:11:b8:
ca:88:91:62:9c:3e:35:ce:86:87:d9:3a:84:f8:66:71:9b:40:
72:9d:ec:3c:a1:5e:ba:93:8f:5b:bb:89:5b:89:cb:a6:0b:81:
64:88:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:05 2026 by rpki-client