Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/RliTJeg8tdeqaJo0sj_Qz9gMOfA.roa
File: RliTJeg8tdeqaJo0sj_Qz9gMOfA.roa (raw, json)
Hash identifier: dcEGvwDTfAlgzsT8xdERr9iL8BFb5wfc7QjJ3Jyp6Is=
Subject key identifier: 46:58:93:25:E8:3C:B5:D7:AA:68:9A:34:B2:3F:D0:CF:D8:0C:39:F0
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 01A034DA292C79849D32A6D6F5B3F072E574
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/RliTJeg8tdeqaJo0sj_Qz9gMOfA.roa
Signing time: Mon 24 Aug 2026 17:38:27 +0000
ROA not before: Mon 24 Aug 2026 17:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206388
IP address blocks: 85.8.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:da:29:2c:79:84:9d:32:a6:d6:f5:b3:f0:72:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Aug 24 17:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46589325e83cb5d7aa689a34b23fd0cfd80c39f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:7f:cf:e8:48:df:8d:8d:61:e1:0c:1b:4e:
8d:4d:cc:b4:05:3b:9c:1e:6e:2d:8e:44:69:ab:6c:
01:6b:a7:0a:47:d8:5a:9f:8e:0a:1d:53:97:25:81:
a2:fc:37:99:1f:6b:75:b0:61:a8:5e:12:a4:26:8d:
ec:30:1f:2e:5b:be:13:a6:e7:0a:3b:de:1d:11:85:
e8:31:c5:dd:8b:97:47:ca:04:d0:a6:74:b1:5c:a8:
f8:56:18:30:eb:4f:3b:05:af:37:77:11:e3:5c:d8:
17:cc:df:de:23:8f:c7:26:20:ef:2d:c9:3c:2a:2d:
8d:d8:8a:bb:9b:fd:66:10:f6:12:19:89:b3:68:85:
f2:ec:6c:d5:9d:27:dc:44:dd:54:3d:58:68:4b:16:
60:49:20:a6:99:b8:88:2a:cd:ce:71:dd:dd:ff:4c:
7d:f8:c8:07:ae:29:70:7b:2b:27:99:7e:5a:94:87:
c1:fa:9d:33:6f:48:53:5e:f4:40:40:7c:88:2b:60:
83:bf:df:17:86:4b:0e:b0:45:4d:cd:12:6e:2c:30:
71:78:ec:13:fa:cd:3d:8e:0e:33:80:29:99:ec:08:
ca:57:1f:11:e6:32:25:bd:5e:5b:b1:41:4b:3d:70:
64:a3:4b:a5:aa:73:06:9b:5f:3b:97:0e:76:70:1a:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:93:25:E8:3C:B5:D7:AA:68:9A:34:B2:3F:D0:CF:D8:0C:39:F0
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/RliTJeg8tdeqaJo0sj_Qz9gMOfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.243.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e2:3b:f0:84:85:c4:18:5b:02:83:9b:e9:a1:0a:c7:21:26:
9d:77:a9:71:a6:87:b7:d9:42:74:c4:94:ab:f0:ab:c5:5e:d2:
70:17:92:21:4a:08:5f:0d:b2:84:3c:99:26:70:31:22:74:e4:
17:57:f5:fe:92:0c:26:5d:b6:ab:a5:6b:a7:fc:08:e5:5b:26:
00:66:b7:d4:94:73:a4:bb:75:a8:b2:c9:3c:b8:90:b0:80:8b:
c2:14:cb:5f:aa:f6:db:b0:f1:a7:31:13:76:6e:f1:6f:56:46:
93:f3:39:21:6e:43:c5:6a:5c:7c:a3:52:f0:80:ac:4f:e2:16:
16:f4:e0:d0:21:62:de:54:bb:e6:c2:5e:4e:33:f1:ce:58:77:
95:38:93:2b:13:04:e2:73:28:39:73:61:f1:7c:06:5d:fc:fd:
ab:8d:38:a9:8b:43:7d:7f:68:a6:02:1b:5a:91:56:5e:9e:bd:
76:ed:6d:b3:c8:11:ac:17:f8:70:16:93:a5:cc:1b:8a:bc:da:
27:37:4f:ea:c0:28:9c:bd:38:c4:2c:00:17:19:16:d8:51:d6:
f5:eb:59:b4:27:e2:49:cc:d8:3d:b2:43:b9:5b:07:ae:f6:70:
6e:a0:9a:4d:10:66:be:64:a6:e2:60:2b:b9:3c:4c:0b:17:38:
9b:09:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:37:05 2026 by rpki-client