Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d1pRXcU2rvsHT1ft9ItmUQR2QYQ.roa
File: d1pRXcU2rvsHT1ft9ItmUQR2QYQ.roa (raw, json)
Hash identifier: /m9UUOxq2Q4VTzor0OXhRUdzfJDiafWmkXtzPwOmqEs=
Subject key identifier: 77:5A:51:5D:C5:36:AE:FB:07:4F:57:ED:F4:8B:66:51:04:76:41:84
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5FFD51CECBF5EFA5F05A72E486046C6D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d1pRXcU2rvsHT1ft9ItmUQR2QYQ.roa
Signing time: Tue 14 Jul 2026 09:37:44 +0000
ROA not before: Tue 14 Jul 2026 09:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 46.34.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:fd:51:ce:cb:f5:ef:a5:f0:5a:72:e4:86:04:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 14 09:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=775a515dc536aefb074f57edf48b665104764184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:9c:39:40:23:09:03:40:d9:b8:1a:4d:e6:
bd:77:c1:55:88:b3:d9:96:da:03:b9:6f:30:0c:c7:
26:84:6f:23:b0:e8:a9:94:ff:50:f1:60:74:00:a9:
0d:15:9d:09:86:62:74:32:46:9c:4f:2d:6b:c4:52:
71:87:99:28:04:e8:f9:f0:8a:7a:61:14:94:c8:7c:
0d:b5:ff:7e:0c:30:d1:a6:14:e2:0c:ec:4e:e3:84:
47:99:d0:b2:b3:35:f7:36:a5:ed:da:1b:c7:40:47:
c1:8a:be:ff:72:99:23:82:8e:47:a8:56:54:93:ed:
be:55:69:ac:2f:80:0f:85:0e:31:86:3d:e6:3a:16:
e5:49:9f:a9:d4:96:25:fd:77:0d:40:21:72:b7:c7:
32:29:6a:e3:15:e4:18:ea:8c:8e:a9:c4:02:66:4a:
e6:6c:33:af:4b:df:e2:2f:51:71:84:d4:fc:c3:42:
4f:9c:95:68:79:f3:40:f0:a1:d7:e4:9e:21:2e:ae:
25:d2:79:19:6d:6e:d6:43:c7:8a:07:ee:e4:f5:6a:
6f:70:d1:a7:08:6e:02:46:9d:a0:d0:78:c2:8d:3d:
ed:7b:67:9f:c1:19:24:a2:62:d7:fb:06:4a:b4:7a:
b7:81:70:eb:64:84:d7:15:c6:d2:9a:7a:e7:b8:9d:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5A:51:5D:C5:36:AE:FB:07:4F:57:ED:F4:8B:66:51:04:76:41:84
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d1pRXcU2rvsHT1ft9ItmUQR2QYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.16.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:c8:52:7e:a6:f7:c2:7a:49:a6:e9:81:ed:32:38:cc:61:27:
1a:ef:ae:7b:99:9d:e5:ad:5f:97:b0:b7:b2:00:a5:ed:0b:a6:
91:e5:d4:71:c6:4c:ef:0b:11:e8:a6:53:ca:05:c0:dd:c3:d5:
66:cc:5d:09:92:df:de:95:90:4d:da:20:a5:dc:b5:67:e1:de:
6e:69:8d:83:1f:cb:b1:6d:39:76:74:13:47:af:0f:69:ac:a4:
24:fe:c3:d0:50:2b:aa:33:dd:32:1b:bf:42:95:a0:02:27:79:
d5:84:c6:85:49:b0:3f:8c:6a:fb:1d:42:3e:dc:7b:5b:4d:da:
45:09:eb:5b:c8:32:11:40:7d:b2:10:e4:1b:86:e9:ef:da:5e:
ff:ec:80:3d:31:16:81:60:5b:bf:08:2a:d6:b0:d7:32:f1:46:
c4:51:2f:67:8f:eb:ed:72:f9:03:98:e4:25:ad:ce:d9:87:28:
75:1d:6f:f7:ac:d2:ca:b3:c5:12:e2:8e:bc:ff:43:6c:f4:ce:
67:3c:cd:54:0e:76:a6:5c:17:d3:21:22:4a:8b:f2:3a:31:b7:
e0:c4:2c:e6:15:42:12:4f:c8:19:18:61:a7:78:0e:8a:0e:8b:
e4:90:ca:56:5e:1f:2e:f0:73:3e:8c:bd:8f:26:4a:1e:49:a2:
b6:fa:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client