Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/E7wjJIpp_incFIPPoxFXkTVNOZ4.roa
File: E7wjJIpp_incFIPPoxFXkTVNOZ4.roa (raw, json)
Hash identifier: dWCBkyUED92Ky9/PvSo7QQdS38SvVtpgkoIQkxWKNdI=
Subject key identifier: 13:BC:23:24:8A:69:FE:29:DC:14:83:CF:A3:11:57:91:35:4D:39:9E
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019C4715B5A3C23BDF0076A7A134D7C35626
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/E7wjJIpp_incFIPPoxFXkTVNOZ4.roa
Signing time: Tue 10 Feb 2026 10:25:31 +0000
ROA not before: Tue 10 Feb 2026 10:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 46.255.72.0/24 maxlen: 24
46.255.73.0/24 maxlen: 24
2a00:a401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:15:b5:a3:c2:3b:df:00:76:a7:a1:34:d7:c3:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Feb 10 10:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13bc23248a69fe29dc1483cfa3115791354d399e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:6f:4c:fb:df:b2:b5:59:30:fc:c5:65:69:
1f:08:ba:5b:39:d3:3d:8b:9f:26:d6:a0:bd:3c:25:
99:97:e2:89:9f:ae:ce:3d:ea:f6:06:09:1b:44:ec:
99:46:ef:1f:79:19:49:5a:59:66:e9:b3:0a:64:3e:
c6:87:30:3f:a1:52:2d:04:27:46:9e:69:85:68:3b:
14:4a:f3:65:59:05:41:2f:a1:30:96:f9:f6:d0:31:
39:f1:69:26:d9:f7:b9:5d:77:f9:06:6b:ba:a6:2f:
89:a7:1a:a8:88:98:02:61:90:8c:c0:eb:0b:4d:e4:
63:ad:e6:2f:c2:83:41:80:e7:cc:61:49:b4:6a:75:
18:e0:49:8d:e5:0d:c5:28:c2:5b:9d:59:9f:6d:11:
46:52:8d:ee:10:3e:d4:10:a2:bf:00:ca:67:83:01:
1d:b7:e4:65:87:a1:4c:1f:5d:e4:f3:1c:92:70:b7:
d4:29:f5:f6:d8:53:9c:00:2e:a9:57:e2:a6:83:c9:
13:ff:dd:e3:78:ed:68:7d:70:3c:79:f6:55:2c:2e:
cc:33:71:94:ae:a9:fb:f6:5a:a9:ce:2a:d1:5c:ca:
b7:48:5f:6d:40:2a:40:36:0f:36:61:34:ec:5e:ef:
85:93:4f:a4:74:11:84:07:a3:5d:90:3f:49:f9:f9:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:23:24:8A:69:FE:29:DC:14:83:CF:A3:11:57:91:35:4D:39:9E
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/E7wjJIpp_incFIPPoxFXkTVNOZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.72.0/23
IPv6:
2a00:a401::/32
Signature Algorithm: sha256WithRSAEncryption
10:fa:58:cc:8b:18:c4:89:52:df:c8:dc:df:96:5a:ad:d8:00:
fa:35:de:79:38:4d:ad:9b:54:bf:fb:29:c9:fd:9d:1f:21:58:
40:d0:97:36:a0:85:1e:6e:2d:f2:a7:5a:f8:6c:d3:31:60:bb:
30:8b:0a:48:4d:f3:2a:91:c9:c6:a5:f4:5d:9d:0d:c3:20:ea:
7f:19:7d:68:32:8b:fa:80:b4:ac:7d:a1:f5:23:15:d2:df:67:
ef:2f:db:c1:0f:a4:b1:a1:2f:ce:69:68:9f:b4:3d:48:2e:4f:
37:4c:68:7c:71:dc:57:59:8d:59:84:dc:eb:36:16:55:9c:46:
de:f5:8f:fd:78:02:c0:9b:6a:9e:4d:9e:74:43:ef:ef:2b:cc:
ba:6f:33:ac:fc:ae:bc:ed:1d:0c:f4:5a:2a:82:6a:a5:0c:69:
c1:85:3c:5f:58:4b:ae:04:f6:d2:e1:09:59:9b:41:b7:58:24:
d5:87:eb:38:26:44:91:7f:46:c4:ad:4b:5f:21:60:e0:55:7f:
ec:08:ff:8b:be:cd:9e:8a:9f:9d:ff:5c:88:f5:bc:93:aa:2c:
af:6c:36:e4:0f:01:04:5d:b2:b7:fc:c5:ba:41:81:88:85:38:
ac:24:20:31:5b:9f:df:cf:a5:09:aa:c9:d5:d3:bb:01:bb:79:
dc:41:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:51:38 2026 by rpki-client