Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kE_mqJAvRwo_H3UPSOvnZuvmlsA.roa
File: kE_mqJAvRwo_H3UPSOvnZuvmlsA.roa (raw, json)
Hash identifier: /2eQ2y0yBmdh310tjguSHhI6bjy+lV/EoxLszgQ085E=
Subject key identifier: 90:4F:E6:A8:90:2F:47:0A:3F:1F:75:0F:48:EB:E7:66:EB:E6:96:C0
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01A1161A53C93E755D630B4639B89FCD15D5
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kE_mqJAvRwo_H3UPSOvnZuvmlsA.roa
Signing time: Wed 07 Oct 2026 11:23:06 +0000
ROA not before: Wed 07 Oct 2026 11:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47147
IP address blocks: 46.38.248.0/24 maxlen: 24
159.195.140.0/24 maxlen: 24
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:1a:53:c9:3e:75:5d:63:0b:46:39:b8:9f:cd:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Oct 7 11:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904fe6a8902f470a3f1f750f48ebe766ebe696c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:e6:ec:93:a7:81:78:13:d9:e6:e8:69:6c:
99:d3:c2:72:12:62:5b:62:eb:67:b1:a2:05:7a:0c:
3f:4e:8f:41:ae:99:95:9e:0c:13:8f:cd:34:15:d3:
85:49:e4:cb:e7:6e:a3:87:53:fe:0b:29:af:18:46:
28:eb:f0:16:23:a5:6b:3a:1a:a5:98:82:0a:97:00:
bf:27:26:a5:fa:32:1e:d4:23:02:2d:d9:05:06:fa:
83:5e:f3:37:fd:1b:7c:27:88:d3:46:4f:be:f3:f7:
2a:54:17:54:90:55:fb:c0:07:72:27:ae:75:3d:74:
54:d4:fb:92:71:bd:90:ad:bc:90:b1:5a:a7:a7:4f:
e8:36:a0:6d:aa:5c:b8:a7:c6:92:46:7b:e1:25:5b:
ef:b9:73:41:58:14:ec:45:cd:01:fd:4c:a6:d4:b1:
b4:41:36:1c:8e:fe:f2:0f:ba:03:b8:ff:01:b0:f8:
2c:2c:4c:d6:95:62:3a:e0:cc:bb:60:ce:81:cb:4d:
5b:64:94:48:24:af:b5:6c:c2:0a:b2:b2:98:38:5a:
34:1c:b3:c0:83:ae:94:c2:9a:19:a8:44:54:8d:ed:
47:09:36:07:6b:2e:18:4a:7e:c8:c8:a8:c1:c5:04:
4a:70:47:84:23:c4:50:92:b0:9c:d0:b6:23:95:d0:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:E6:A8:90:2F:47:0A:3F:1F:75:0F:48:EB:E7:66:EB:E6:96:C0
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kE_mqJAvRwo_H3UPSOvnZuvmlsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.248.0/24
159.195.140.0/24
IPv6:
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
Signature Algorithm: sha256WithRSAEncryption
a7:cb:60:2a:f3:88:9e:ee:bc:a9:45:c1:88:38:75:30:9f:26:
45:1c:48:ff:19:74:15:cf:05:bc:a2:20:24:ff:2b:af:14:1b:
d6:ee:2e:bf:c2:57:72:fd:be:ec:e3:c6:5a:f2:3f:e9:f2:f0:
2f:6f:5c:21:a8:33:a3:5c:ed:c8:43:8b:42:42:b5:ae:22:88:
5c:d0:f7:7a:f7:c3:1a:4f:04:10:4a:e8:f9:6e:88:a1:9a:38:
1b:d8:5f:41:b6:80:96:d7:44:45:35:9b:57:1f:36:20:70:57:
42:4f:21:dc:d2:b3:21:a5:ec:a8:a9:96:71:6e:39:b3:c7:1f:
aa:da:2e:c6:99:c2:8c:90:e6:5b:8b:9f:a8:02:a6:3f:2b:8d:
a7:86:ec:6e:a5:24:f9:46:b6:6c:5f:8e:d3:c3:43:fa:f7:c4:
5e:2d:ed:d2:05:38:5f:f0:24:ac:ac:d7:83:75:69:e5:25:af:
fc:bf:de:4b:09:d7:1f:46:51:cf:74:99:1a:a4:97:fe:68:cc:
e2:ee:53:6a:99:08:ce:bb:3e:ee:4a:c2:91:f5:92:56:30:3b:
fd:b5:22:0f:93:38:e3:96:6d:a4:ec:4e:bb:f0:08:d0:69:bc:
5c:ce:70:18:69:f3:d8:c0:ee:9b:25:f2:68:80:f5:2f:40:d5:
97:c8:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:04 2026 by rpki-client