Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RrqPvUz_GYCamBFzWT4cys7iUNE.roa
File: RrqPvUz_GYCamBFzWT4cys7iUNE.roa (raw, json)
Hash identifier: F67+gbhSPp0wa9EF3KodY5zDvi+U+0QuAVg1KrC+CXY=
Subject key identifier: 46:BA:8F:BD:4C:FF:19:80:9A:98:11:73:59:3E:1C:CA:CE:E2:50:D1
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236865B68EBCDC4505C20C2E518D5CA2
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RrqPvUz_GYCamBFzWT4cys7iUNE.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197139
IP address blocks: 189.74.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:b6:8e:bc:dc:45:05:c2:0c:2e:51:8d:5c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46ba8fbd4cff19809a981173593e1ccacee250d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:32:00:aa:4b:e7:1a:71:e2:93:78:5a:64:
9b:01:8c:ae:f2:a3:76:f8:4f:72:55:be:9c:60:7e:
31:0f:67:53:cd:98:de:b3:66:f4:9c:da:56:9b:04:
7d:51:80:ef:ed:1e:00:af:52:6e:08:86:d3:e6:5b:
01:5f:99:0b:86:08:ac:92:46:ec:bb:1f:e3:e1:cb:
93:53:7f:98:10:28:d0:65:b4:75:cd:37:07:42:7f:
15:1e:fc:c9:b8:19:70:7e:c4:cb:9f:03:57:73:7d:
19:c5:2f:42:d1:97:5f:1d:fa:a7:b2:c2:0c:49:e9:
0d:0b:e4:8f:16:8f:66:39:c3:02:15:d5:aa:71:08:
f4:8f:89:75:7c:d3:58:24:5e:db:9e:8e:de:00:8d:
04:01:34:2a:79:44:66:f4:16:69:a3:70:15:e7:1c:
05:49:f4:35:c9:71:c5:06:0e:9b:b0:99:0d:3c:cc:
39:0a:06:02:22:50:af:1d:e3:a4:7a:89:8b:b9:c9:
99:35:dc:e9:ad:65:0e:63:08:e1:c0:36:56:a2:99:
64:38:7c:18:87:63:4a:f6:1f:7d:46:f3:28:1e:60:
aa:2f:45:ec:94:c8:ff:0b:7b:52:70:1f:dd:24:01:
46:9c:90:25:06:22:61:2f:6d:0f:b3:89:8b:97:e9:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:8F:BD:4C:FF:19:80:9A:98:11:73:59:3E:1C:CA:CE:E2:50:D1
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RrqPvUz_GYCamBFzWT4cys7iUNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b4:47:0a:53:de:77:9b:5a:de:09:0a:ea:ac:fa:40:68:6e:
9b:93:f4:c7:68:f5:46:ea:d5:5c:07:c2:a9:93:70:d4:6a:62:
3b:0f:4f:71:25:86:00:dc:30:39:2a:0d:26:4d:d1:20:6b:84:
45:4c:66:bd:cb:25:e4:4e:cd:bb:c6:27:4d:bc:b4:c2:e2:b0:
1b:98:24:7a:d3:86:50:54:68:1b:ad:9f:77:ad:26:6a:ef:33:
fa:94:41:99:65:f9:99:54:f3:63:6b:65:fb:64:a5:2d:8e:17:
8a:aa:97:ea:1d:ae:8b:6a:7b:b9:84:dd:0a:44:19:8e:0c:fa:
6e:39:97:5b:62:8e:9f:f3:75:f3:03:f6:6f:cc:b8:77:20:52:
78:73:31:d5:7a:b5:2e:28:db:9e:19:4f:98:8d:4a:67:66:9d:
18:cd:b6:b1:cf:9b:c1:99:f0:fd:dd:b3:d5:4b:8d:46:80:d4:
47:41:84:b1:60:91:42:8e:87:11:0f:f1:3f:8b:d4:7b:20:5c:
0d:f5:f4:ca:f0:1e:03:94:8b:47:fa:a3:93:c5:98:79:55:bf:
10:ce:6a:f8:df:83:da:b4:23:e6:65:ce:e9:79:27:ba:42:f7:
b2:b3:99:6a:35:c1:5a:9f:6d:a1:d8:e3:d4:85:4b:58:4b:16:
f7:6c:5a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:47 2026 by rpki-client