Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_oLqg5mqEHwiLyFUgQ8ySWcbtHQ.roa
File: _oLqg5mqEHwiLyFUgQ8ySWcbtHQ.roa (raw, json)
Hash identifier: rKxHaiVvN6QZE1neAnNTsMQ9EfkkxklvuF3sHDS+a7k=
Subject key identifier: FE:82:EA:83:99:AA:10:7C:22:2F:21:54:81:0F:32:49:67:1B:B4:74
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01A135056F7603EBE47DE439B47AD6087243
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_oLqg5mqEHwiLyFUgQ8ySWcbtHQ.roa
Signing time: Tue 13 Oct 2026 11:28:30 +0000
ROA not before: Tue 13 Oct 2026 11:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48467
IP address blocks: 185.46.44.0/22 maxlen: 22
185.46.44.0/24 maxlen: 24
185.46.45.0/24 maxlen: 24
185.46.46.0/24 maxlen: 24
185.46.47.0/24 maxlen: 24
2a02:2070::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:05:6f:76:03:eb:e4:7d:e4:39:b4:7a:d6:08:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Oct 13 11:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe82ea8399aa107c222f2154810f3249671bb474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:6e:af:2c:28:9b:bb:e6:48:60:44:a7:89:
f5:fc:24:af:62:53:8c:f8:91:97:66:1c:79:02:bf:
77:fa:8c:cb:90:d4:17:0f:d4:4e:b0:5d:7b:cd:a4:
83:d9:df:5a:b8:f7:f0:52:4e:da:2f:82:f6:be:17:
cd:9b:9b:1b:f1:b3:51:51:0e:6f:91:86:96:da:f4:
3f:cc:48:a8:f2:22:79:90:ac:aa:a1:31:95:98:b4:
93:35:05:27:6f:7c:a7:12:63:db:0a:b0:c4:e6:8e:
34:c7:38:35:9e:48:a6:ef:07:0a:e3:6a:86:4c:eb:
a4:45:97:99:a7:df:e1:0d:f5:1a:37:38:6c:a7:16:
f2:72:7b:55:c0:21:79:6d:c1:57:8b:5b:83:9c:1a:
87:a5:72:25:22:3c:28:17:2b:ff:32:20:7c:dc:1c:
76:4f:60:91:13:bc:31:98:48:da:fc:e7:bc:70:48:
07:9c:c1:63:fc:70:27:a3:ff:cf:57:c0:4a:0f:79:
20:a9:3d:b0:4a:59:60:7e:da:dd:24:08:73:04:6f:
35:5f:b0:a8:45:0a:9a:28:c8:e1:cb:69:81:aa:84:
93:e7:12:d1:47:ce:4a:9f:44:90:f7:40:a4:74:fb:
84:bd:54:21:80:78:c6:13:a6:ce:3f:0f:45:ea:c4:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:EA:83:99:AA:10:7C:22:2F:21:54:81:0F:32:49:67:1B:B4:74
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/_oLqg5mqEHwiLyFUgQ8ySWcbtHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.44.0/22
IPv6:
2a02:2070::/32
Signature Algorithm: sha256WithRSAEncryption
03:d5:07:ea:e1:58:20:c8:5f:e5:bf:e5:2b:f0:23:85:cb:d2:
61:f6:85:18:d2:b9:e6:d2:aa:aa:d1:11:5f:d8:8c:bd:5b:6c:
53:aa:96:53:d7:d8:5a:4c:2e:3f:6f:7d:bb:7b:c5:c0:39:73:
2f:67:a6:fc:18:11:ab:ec:52:55:34:5e:84:15:a6:9f:8e:04:
50:aa:02:69:bf:68:ea:d0:e2:97:cd:84:88:fb:dc:6a:19:da:
31:90:c3:70:2c:b8:4f:04:86:55:71:21:15:49:41:df:a9:b5:
12:d6:5e:2c:53:fc:25:0b:28:f2:56:80:2c:f3:fa:dc:36:40:
58:f2:aa:2a:0b:af:2a:5b:a1:4a:83:ff:38:77:95:c7:02:41:
d2:63:8e:c7:b8:d5:40:91:eb:a2:f0:cb:e8:65:58:59:c5:43:
b2:e9:84:89:77:ab:65:3f:4a:8c:b2:4a:86:81:fc:bd:88:a4:
4c:cd:ff:f3:00:ce:be:b1:a6:f1:61:95:54:c1:04:16:88:08:
de:6c:ac:d3:20:8b:6f:a6:12:4f:b1:39:83:0f:1f:68:41:1e:
34:6c:1a:01:0c:5a:bd:e6:8d:8a:ce:ff:ff:43:74:fb:24:5b:
82:36:00:dc:6c:60:92:7c:a4:f9:07:d6:13:d2:0c:7a:a0:35:
6a:2b:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:18 2026 by rpki-client