Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/RvTgs-Ael9U9l-WfMGAnn6bpYas.roa
File: RvTgs-Ael9U9l-WfMGAnn6bpYas.roa (raw, json)
Hash identifier: 92wDEfW/LHrs63qVLF1djhEHy33LjlsoGqzBeCbZbeo=
Subject key identifier: 46:F4:E0:B3:E0:1E:97:D5:3D:97:E5:9F:30:60:27:9F:A6:E9:61:AB
Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Certificate serial: 019CB45E5527CE0C1D7D6BD2B6E62084F8F7
Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/RvTgs-Ael9U9l-WfMGAnn6bpYas.roa
Signing time: Tue 03 Mar 2026 15:43:26 +0000
ROA not before: Tue 03 Mar 2026 15:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 194.238.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:5e:55:27:ce:0c:1d:7d:6b:d2:b6:e6:20:84:f8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010
Validity
Not Before: Mar 3 15:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46f4e0b3e01e97d53d97e59f3060279fa6e961ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:64:74:5b:f9:00:02:65:a4:76:df:a0:66:
c3:9d:84:57:4c:90:d3:aa:e0:b1:71:df:f9:af:15:
cd:1a:6d:19:a5:c9:f3:ac:52:28:b8:a3:8a:c2:47:
35:08:83:1d:dd:59:11:2f:db:92:ab:62:5a:dd:a3:
95:a8:3f:dd:6b:19:74:8e:c5:1e:72:d4:12:47:e8:
68:47:80:15:2e:f5:ea:59:39:10:89:7e:3d:72:dd:
c1:6d:d8:97:d4:05:74:62:80:b6:7e:68:92:6e:cc:
e3:9a:70:32:bc:98:65:62:9e:f2:74:81:aa:6e:0c:
43:ec:26:60:9e:d4:21:c3:c4:27:b2:a6:c4:6f:d2:
dc:2c:41:b7:99:2d:42:25:54:00:09:47:03:aa:b1:
4a:e0:1a:b3:39:aa:f2:28:bb:ac:9a:c2:ad:99:3d:
01:57:bb:d6:cf:00:e2:8b:00:71:22:7f:d5:c8:3b:
56:d6:18:db:be:7b:07:00:be:20:21:05:b6:f0:06:
05:13:37:75:5f:4f:b3:e0:f5:d5:4a:62:25:c1:f3:
5a:96:e6:93:53:20:bd:dd:33:b0:d9:a0:2e:75:a8:
b7:ff:30:9d:28:3d:c2:fd:ed:f2:b6:48:43:88:ee:
c5:ec:7f:7e:40:3f:46:04:28:08:99:35:22:fb:73:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:E0:B3:E0:1E:97:D5:3D:97:E5:9F:30:60:27:9F:A6:E9:61:AB
X509v3 Authority Key Identifier:
keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/RvTgs-Ael9U9l-WfMGAnn6bpYas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d3:0f:dc:da:54:9c:60:56:25:3e:8d:77:7b:77:85:44:96:
a2:c9:aa:b4:e0:8f:b1:43:ea:fe:6c:74:a9:25:30:7c:7e:0e:
5d:93:3c:cb:40:94:c5:c9:f0:b0:ec:d9:39:6b:97:d7:9b:71:
39:f0:9e:45:8a:ec:1b:36:78:6e:db:2f:e9:f3:c2:00:f3:00:
48:49:37:6f:58:fa:13:26:cf:1a:f1:17:22:30:cf:4f:c0:52:
c8:93:ca:c6:5c:d3:40:bb:f1:85:bd:a9:62:ef:f0:3f:46:61:
8d:f7:62:9f:99:89:3b:32:1f:9c:e6:73:c0:83:ed:4f:9e:35:
08:56:03:61:f6:48:35:89:a0:c2:22:84:a1:19:42:84:7a:b0:
15:7f:92:46:f7:b1:9b:31:5b:8c:cc:41:c7:97:34:cc:57:84:
7a:8f:ee:9d:71:22:04:f6:78:57:1b:a6:0d:c3:ed:e2:24:12:
72:53:06:6d:02:86:a9:81:a6:ed:13:a9:18:81:35:79:df:09:
6f:d5:df:1d:0d:56:89:6e:a8:5b:3f:38:cf:f5:38:47:f2:67:
b3:98:49:22:cc:b3:57:77:38:b8:31:56:30:f4:e5:39:1a:ea:
e4:8f:37:8f:a5:e0:1b:f0:c4:96:87:75:6b:ca:0c:fe:85:33:
eb:ba:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:14:18 2026 by rpki-client