Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/v46RZaRNAYpk-MTz9439WBJeCk8.roa
File: v46RZaRNAYpk-MTz9439WBJeCk8.roa (raw, json)
Hash identifier: iuiKs0eDwH4UX4kxhQWkANGq3ZFWYOsgmkYbbfAKPYA=
Subject key identifier: BF:8E:91:65:A4:4D:01:8A:64:F8:C4:F3:F7:8D:FD:58:12:5E:0A:4F
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A0DEDEBC5F73CD1B43E22F8028AB70EFF9
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/v46RZaRNAYpk-MTz9439WBJeCk8.roa
Signing time: Sat 26 Sep 2026 17:58:54 +0000
ROA not before: Sat 26 Sep 2026 17:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 84.22.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:de:bc:5f:73:cd:1b:43:e2:2f:80:28:ab:70:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Sep 26 17:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf8e9165a44d018a64f8c4f3f78dfd58125e0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:f0:86:9c:91:e0:75:58:6e:08:90:d0:33:
e6:50:f2:3a:f1:cf:b0:6c:85:60:ef:95:45:1d:8a:
2f:b4:d8:59:19:6f:8c:17:3c:77:d6:ac:0e:92:79:
80:fe:8b:93:96:56:ec:16:59:a5:3e:40:d9:ab:c0:
0f:a9:02:01:83:fb:f9:cf:2c:ce:25:14:cb:42:d5:
cb:28:45:91:59:03:45:67:98:28:91:0a:40:01:d5:
3c:bd:8b:be:01:94:52:d7:a6:08:67:93:b1:ce:e1:
65:df:bb:97:e2:de:45:2f:c8:82:fd:f7:31:92:13:
e5:84:c1:5a:ff:fb:3a:97:43:bf:41:2e:0c:ab:f4:
af:96:a6:cd:bc:44:03:60:68:a4:95:7f:03:f2:6f:
c8:10:f2:7b:a9:89:ae:5d:ca:3d:4a:0f:d5:fc:6b:
24:51:d3:bb:7a:e8:e8:bb:f7:8f:7a:f3:bc:2e:85:
6b:e6:17:67:87:ef:be:44:c7:89:12:92:b8:76:09:
f3:05:7a:8d:61:63:ba:e3:44:34:51:c5:81:f4:dc:
f1:5c:c8:91:ff:e2:c2:d7:59:70:be:df:85:83:23:
9d:0c:d1:37:0a:1e:42:b3:fa:d3:7b:9c:61:d2:0f:
8e:e7:1b:9c:3b:bb:b9:1d:da:37:f7:13:70:b1:a6:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:91:65:A4:4D:01:8A:64:F8:C4:F3:F7:8D:FD:58:12:5E:0A:4F
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/v46RZaRNAYpk-MTz9439WBJeCk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0/22
Signature Algorithm: sha256WithRSAEncryption
79:f6:fc:67:03:76:2d:54:9c:73:f4:db:ca:02:00:21:a3:0f:
f8:54:d8:2d:9c:46:e9:53:53:eb:91:dd:7a:f3:1f:93:1f:ab:
ad:98:50:e2:80:3c:16:cb:ff:dc:3e:e6:27:e7:1d:f1:7d:7d:
1c:f9:e5:15:0e:68:01:71:d5:c6:79:aa:0a:27:bf:5b:44:5c:
ae:25:fe:bd:a9:f4:6b:7b:6e:69:fc:b2:6b:26:1e:b9:6a:b8:
46:a6:59:cc:0e:8a:18:22:1c:c7:a6:72:54:0b:2f:d8:a4:7d:
b0:25:6d:d8:20:6c:20:6a:71:bb:e7:47:87:92:dc:86:5d:5b:
d6:39:f0:05:4a:b3:c7:6d:48:d8:16:5c:f5:84:12:7b:fd:89:
09:03:a0:89:32:a1:78:b5:1b:2c:87:68:8e:c6:0a:e3:e8:9d:
da:f5:03:60:4c:55:15:b7:7a:93:95:25:7e:42:eb:49:c6:6d:
ac:11:cf:d0:c6:1f:09:d3:da:97:8c:5d:59:e7:72:1e:2b:af:
e2:52:51:6d:ac:9e:aa:1d:8c:bb:df:da:6b:04:a8:d7:c0:41:
6c:26:b8:60:09:f8:7f:f2:2c:f8:c6:a5:ee:fd:06:ca:e3:65:
e3:14:57:3a:a6:d9:17:e7:64:60:d8:78:4a:ec:4a:c2:b6:46:
a3:09:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:13 2026 by rpki-client