Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/46AOUfQolDshFKPEXQ1TmfsCBaE.roa
File: 46AOUfQolDshFKPEXQ1TmfsCBaE.roa (raw, json)
Hash identifier: 9KDbaABD/AWMnTzxrxma8b60bW9b3hzOwcJWn4VEz7M=
Subject key identifier: E3:A0:0E:51:F4:28:94:3B:21:14:A3:C4:5D:0D:53:99:FB:02:05:A1
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01A01964BF1F1FF06F3C73E117EE5E31E3B0
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/46AOUfQolDshFKPEXQ1TmfsCBaE.roa
Signing time: Wed 19 Aug 2026 09:40:27 +0000
ROA not before: Wed 19 Aug 2026 09:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25330
IP address blocks: 185.112.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:64:bf:1f:1f:f0:6f:3c:73:e1:17:ee:5e:31:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Aug 19 09:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3a00e51f428943b2114a3c45d0d5399fb0205a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:9e:cf:c4:91:db:17:63:f0:e1:7b:09:4b:
cc:e8:af:c3:b8:93:a3:23:c5:24:25:89:93:10:ce:
b6:f3:5e:3f:32:67:22:93:c5:f1:d0:ca:d8:fc:71:
90:67:c1:8c:ee:7a:d5:cd:da:3f:02:82:3c:51:ff:
e1:a2:ba:03:50:80:d8:87:81:e3:21:86:ae:e0:84:
99:02:ae:f9:c6:02:2a:53:3d:e5:62:0d:9a:18:b2:
35:50:98:b2:52:d2:fb:89:6f:8f:ad:d2:7e:d8:3d:
f9:d7:96:2c:c9:ee:5c:96:fb:c9:62:25:51:4f:24:
91:a6:2b:d6:7c:c2:a9:75:33:5a:7f:ce:2b:0e:16:
86:b5:9a:45:ad:a5:fe:b9:87:05:2c:4b:70:cd:08:
6c:a0:f8:2a:b2:fc:a9:d7:fd:4a:df:cf:f6:a7:06:
9e:1d:bd:e2:03:0f:5f:eb:5b:1c:81:50:a0:d8:0b:
8f:2e:03:94:3d:3c:05:cc:0f:d6:c3:40:89:37:47:
72:6f:1e:43:80:f1:0c:4c:f8:f1:69:99:40:bc:c8:
90:55:98:a3:27:bf:1b:40:9c:b6:05:30:e8:e1:d8:
df:17:48:fe:8c:df:b4:79:39:54:82:6d:8c:4f:9a:
f9:24:71:7e:15:a9:3a:fb:88:50:73:12:ad:af:62:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:0E:51:F4:28:94:3B:21:14:A3:C4:5D:0D:53:99:FB:02:05:A1
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/46AOUfQolDshFKPEXQ1TmfsCBaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.42.0/24
Signature Algorithm: sha256WithRSAEncryption
92:26:6a:b4:c3:01:a5:81:c7:c6:9f:a5:0a:85:7e:82:be:da:
5c:d3:38:83:9c:9d:52:32:a3:d4:40:7b:b8:91:24:62:c2:db:
ee:cf:b9:7b:f8:65:11:7f:10:4b:8e:09:7a:89:e2:33:7a:bd:
a8:9b:10:f5:15:39:b8:6f:84:96:53:b7:bc:c1:f5:81:81:62:
c6:d6:7e:08:e2:1e:9b:28:13:ae:2e:76:b0:bf:4b:8b:88:87:
f5:9f:96:85:7f:37:57:67:7f:74:27:a2:1c:ca:85:8b:4c:9a:
62:9f:27:ab:f3:eb:5f:f2:70:e4:ba:ff:79:42:e8:43:64:12:
01:b8:4a:1b:71:fc:a3:94:9d:32:27:47:00:38:b3:72:31:2e:
df:71:a4:a0:59:1e:7f:1c:99:86:e6:d4:d8:a9:86:22:eb:9f:
43:b7:4c:2e:5f:d9:25:8c:c6:03:5e:85:76:cf:6c:cd:35:9c:
95:c0:21:53:a6:35:61:d0:b1:74:87:27:f6:bb:55:94:3e:a2:
5e:c0:c8:f0:95:c4:bb:51:a6:50:59:8e:a7:61:d6:85:3b:d0:
29:bc:a8:aa:ae:b1:42:27:17:b0:2a:56:1c:a2:e7:4a:1a:1b:
9c:11:64:63:23:51:fb:c5:6c:ba:14:83:19:3f:7f:48:6e:ce:
d1:e4:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:58 2026 by rpki-client