Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/j2nemTtzASTAmjXz2bu-htaMQRc.roa
File: j2nemTtzASTAmjXz2bu-htaMQRc.roa (raw, json)
Hash identifier: Y3E7xQZmw4Uilx70CdzT+WofEpiS4ELYiTPizMYwt58=
Subject key identifier: 8F:69:DE:99:3B:73:01:24:C0:9A:35:F3:D9:BB:BE:86:D6:8C:41:17
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019D683CC445290B232BDD34D7FA24BCFEB2
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/j2nemTtzASTAmjXz2bu-htaMQRc.roa
Signing time: Tue 07 Apr 2026 13:58:26 +0000
ROA not before: Tue 07 Apr 2026 13:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47786
IP address blocks: 46.151.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:3c:c4:45:29:0b:23:2b:dd:34:d7:fa:24:bc:fe:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Apr 7 13:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f69de993b730124c09a35f3d9bbbe86d68c4117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:b1:55:b7:c0:f6:bf:c9:74:07:96:6c:04:
e0:c4:bd:72:8d:0b:6d:aa:ed:69:93:39:d1:1b:a7:
44:76:7b:0f:99:a6:fb:7f:ed:af:59:e7:3b:b1:5b:
c7:e2:e6:1b:39:99:87:5d:4d:6d:ae:de:79:ab:e7:
7b:8c:01:74:2f:4b:9b:b0:dd:a1:c6:82:4b:19:75:
16:75:ce:69:98:c0:ab:ed:04:73:ba:b0:47:12:03:
b2:45:ad:b5:81:40:b1:e8:66:96:08:be:bb:91:f7:
18:e4:11:fe:38:2b:c7:99:26:ae:15:86:10:71:6b:
82:64:a8:cf:ea:c0:c9:0c:d3:45:76:7e:9b:83:68:
77:15:9c:24:12:65:23:d3:12:30:17:bc:bb:1e:73:
d5:00:07:66:84:53:98:47:a7:29:aa:06:a5:08:26:
44:01:04:75:af:43:0f:bb:8d:ef:b8:9d:95:23:7b:
f1:57:61:f2:1b:62:3a:0c:1f:a4:84:a0:c0:ba:b8:
80:54:e3:82:20:b9:be:a6:2d:e1:ab:b5:22:53:51:
f7:2c:8c:ec:a1:28:93:2d:dc:10:f9:11:c0:ee:cc:
a8:9f:9d:25:4e:53:de:87:54:79:2e:d3:67:11:d6:
76:ad:89:91:21:20:f2:ca:c7:47:6e:2b:95:cf:8d:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:DE:99:3B:73:01:24:C0:9A:35:F3:D9:BB:BE:86:D6:8C:41:17
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/j2nemTtzASTAmjXz2bu-htaMQRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.179.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8e:06:e8:93:d4:a7:99:08:0b:74:83:34:8e:95:be:78:af:
21:3d:54:6d:4e:a1:55:7d:a4:0e:ad:f1:04:04:03:96:55:76:
a9:70:d7:d9:8d:4c:f4:4b:e7:be:3a:b7:c2:fc:ed:1d:20:6e:
71:47:b4:9c:81:a4:90:64:e7:2f:b7:e8:43:3e:34:7b:1b:1d:
01:20:1b:85:27:53:63:0f:15:a5:46:e9:5e:5a:99:e8:12:dd:
b9:5f:1d:bd:d9:6a:6c:c0:0c:39:bd:83:e0:e0:ba:f5:e8:ab:
c9:1b:0a:8f:10:f9:9f:b4:bf:4b:f2:f2:99:a0:e8:e7:2a:bb:
37:00:a9:00:78:75:7f:53:a5:5a:b6:62:30:ee:80:00:12:86:
35:d9:e1:a7:c0:5f:9b:d2:74:9d:bf:2a:3e:20:cf:95:d0:e1:
f2:8a:cb:fc:a2:2f:94:88:ee:33:43:56:36:28:1f:9e:ad:f7:
9e:10:c8:e4:b5:56:bb:22:40:79:fa:2d:17:0d:13:e6:db:c1:
32:06:e5:1b:81:1c:48:c3:f5:d1:1d:c3:8b:28:e3:a3:1a:be:
83:e7:39:5b:74:dc:2e:3d:bc:dd:10:d0:0e:f2:c9:e7:ac:46:
21:f0:a9:77:d7:73:5b:fb:7e:70:e0:5d:ce:e9:f6:bf:e8:80:
90:c2:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 06:34:34 2026 by rpki-client