Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/xNYBtHtKlWI4iA2yM39CNxxB3YE.roa
File: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (raw, json)
Hash identifier: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=
Subject key identifier: C4:D6:01:B4:7B:4A:95:62:38:88:0D:B2:33:7F:42:37:1C:41:DD:81
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F23688B59946C2FDAB8BD2B4FB571EB5C
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/xNYBtHtKlWI4iA2yM39CNxxB3YE.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 46.148.209.0/24 maxlen: 24
46.148.210.0/24 maxlen: 24
46.148.211.0/24 maxlen: 24
91.204.180.0/24 maxlen: 24
91.204.181.0/24 maxlen: 24
91.218.139.0/24 maxlen: 24
91.218.178.0/24 maxlen: 24
91.218.179.0/24 maxlen: 24
195.234.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:59:94:6c:2f:da:b8:bd:2b:4f:b5:71:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4d601b47b4a956238880db2337f42371c41dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:2e:43:57:94:34:35:2d:51:f1:b6:06:c1:
b3:b2:5e:55:9c:2a:fe:57:8e:dd:d8:2d:00:03:5d:
5e:38:86:80:c5:08:5e:17:dd:a2:db:66:76:e9:30:
65:c1:76:b4:21:4a:a6:ca:11:46:1f:04:69:72:bc:
87:94:68:5e:e6:2a:a5:3f:ab:1b:cd:9d:d9:4b:10:
c5:94:65:ac:3f:9c:74:db:da:4f:58:60:49:12:cb:
77:8e:95:37:14:7c:8f:9e:d2:1e:96:5c:1c:eb:ca:
ca:46:9d:d5:e7:ee:c2:f0:47:bb:00:a3:ee:e1:be:
07:9b:0a:6c:2a:a7:db:d4:72:fc:9c:ee:d2:9f:91:
1d:87:7a:9e:34:ce:0c:f2:e8:3b:ad:b1:49:0e:cd:
d4:58:c9:d3:a5:cd:85:20:4b:13:55:d2:9a:67:12:
f6:90:fa:9d:ed:f5:e1:96:22:05:c6:e6:ad:6d:50:
24:41:30:e3:df:e8:d9:19:d9:cc:cc:3b:12:20:af:
68:60:6c:a4:2a:96:90:81:b5:70:94:f3:ae:3a:12:
b1:7d:b4:e5:6f:69:88:84:01:ad:ad:e0:12:1e:44:
95:88:ad:2c:a0:71:be:8c:34:69:5d:7c:1d:f9:2a:
52:28:20:92:da:fb:74:4e:f1:65:5d:e1:b1:8b:11:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D6:01:B4:7B:4A:95:62:38:88:0D:B2:33:7F:42:37:1C:41:DD:81
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/xNYBtHtKlWI4iA2yM39CNxxB3YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.209.0-46.148.211.255
91.204.180.0/23
91.218.139.0/24
91.218.178.0/23
195.234.90.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:8b:f1:37:ef:4b:bd:11:11:cb:30:60:af:7a:2c:d0:f6:c6:
6c:4a:e1:1c:b8:d4:18:06:8d:ed:10:db:f0:da:7a:a6:b4:34:
9e:d7:c8:22:bf:f7:db:f6:96:4f:7d:31:e4:d0:e1:8c:db:ab:
2a:dc:7e:64:17:9d:0b:ac:3f:0b:89:e7:20:19:83:43:0a:43:
6f:c4:e8:93:d0:9f:37:6b:02:b2:d9:8d:9b:7d:cc:ac:4b:ca:
90:e8:23:4b:67:8b:25:7c:4d:f1:8f:3d:6f:84:eb:c0:1b:02:
e4:9b:ca:70:f2:39:6d:0b:7f:06:40:a0:b5:24:23:41:74:0e:
24:ba:af:e1:b2:0c:f1:57:13:48:52:64:be:27:c2:1a:85:ba:
55:fe:f7:c6:ea:15:88:95:25:51:1d:98:ef:66:e8:39:05:95:
1e:44:af:04:06:9c:5b:ad:7e:1f:d6:57:58:da:21:2d:dd:90:
0e:f3:20:09:54:a4:18:68:fc:5b:75:6f:42:4d:29:68:35:65:
b8:bb:fe:c7:dc:96:c9:0b:f6:e1:18:76:c3:4a:6c:4c:4c:9a:
c1:cd:a6:bc:d9:2f:ed:eb:63:86:11:56:b2:ff:84:5a:7d:b0:
98:41:03:f6:5a:1a:73:81:f2:34:70:8d:47:75:4f:d8:fe:b5:
cd:90:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:27 2026 by rpki-client