Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/0131e2pSWESXKp1FiJkWON3XoKs.roa
File: 0131e2pSWESXKp1FiJkWON3XoKs.roa (raw, json)
Hash identifier: 4xLzlyR4pogj61/fJ+d68Anxepth/fHSAb4rDCBPR1k=
Subject key identifier: D3:5D:F5:7B:6A:52:58:44:97:2A:9D:45:88:99:16:38:DD:D7:A0:AB
Certificate issuer: /CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Certificate serial: 01A08B28939CA79AA991A68F6C2B5D081277
Authority key identifier: AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/0131e2pSWESXKp1FiJkWON3XoKs.roa
Signing time: Thu 10 Sep 2026 11:51:27 +0000
ROA not before: Thu 10 Sep 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42864
IP address blocks: 46.35.192.0/19 maxlen: 19
185.3.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:28:93:9c:a7:9a:a9:91:a6:8f:6c:2b:5d:08:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Validity
Not Before: Sep 10 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d35df57b6a525844972a9d4588991638ddd7a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:0f:d2:c6:2c:4a:5b:00:c6:82:85:08:17:
ff:6d:73:4b:10:b2:97:07:d6:4d:38:12:a3:2c:85:
c6:bc:d9:be:a7:28:46:c5:ed:50:39:24:1f:73:fc:
fb:1a:07:bf:c7:4e:9e:b0:ae:90:7c:15:b4:11:4b:
dd:6b:28:0f:2c:b8:ac:fa:c8:52:05:aa:5c:6d:34:
2c:22:05:88:9d:01:e2:06:63:18:4c:57:e9:26:e6:
ff:9f:dc:78:52:22:0e:a7:99:de:73:c3:83:2c:89:
b2:f7:ba:2c:47:ac:96:61:06:df:50:22:4a:d1:15:
84:c9:3c:92:9a:07:71:18:e5:33:8a:5c:59:63:c3:
3f:4c:62:27:bd:4f:4b:3c:4b:69:a8:62:72:46:8e:
cf:8b:30:0d:46:48:a2:73:48:b2:b8:e4:b8:8d:ba:
81:fa:f9:da:70:8c:43:95:fa:91:9d:ab:ad:4b:f2:
4f:2a:25:98:27:d1:e6:8b:63:77:4b:b0:63:5c:c0:
d9:2f:20:f6:db:58:40:94:f8:52:84:6a:ff:03:6a:
f5:15:37:cb:f0:aa:d3:49:b3:2d:c9:91:70:97:f7:
b8:80:e1:53:14:7f:28:7f:9a:69:ba:78:fe:08:bd:
ad:e6:95:2a:94:30:c6:d7:4f:8d:fa:3c:07:92:b5:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5D:F5:7B:6A:52:58:44:97:2A:9D:45:88:99:16:38:DD:D7:A0:AB
X509v3 Authority Key Identifier:
keyid:AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/0131e2pSWESXKp1FiJkWON3XoKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.192.0/19
185.3.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ed:c1:51:0d:7d:f7:5a:a3:56:56:40:e0:a1:06:a5:5b:fb:
a8:5d:1a:fa:6d:cb:e6:8d:2e:d8:ac:02:ac:9d:f3:11:00:53:
ce:2d:b1:42:45:93:80:5b:7e:07:bf:c0:ba:3d:6f:6b:7a:93:
a3:af:8c:df:e7:b7:1f:fa:6e:20:57:5f:78:a8:82:67:c8:42:
eb:b3:01:2d:88:fe:6b:f6:67:2f:a3:1a:a0:cc:75:21:33:0a:
74:dd:08:c1:3b:b1:3a:85:d7:4c:1f:91:37:4c:42:b7:9d:74:
f3:eb:39:d8:19:95:6f:38:38:ce:e2:c3:47:22:f9:36:97:0c:
e7:da:48:87:ff:32:26:ec:8e:3e:b0:35:0b:a2:39:af:6e:ba:
e2:1c:bd:3e:e6:d9:82:48:4d:15:b0:ea:a1:82:11:42:cb:c5:
32:8b:f3:74:15:2c:9b:6d:62:8e:29:b2:19:c3:da:e2:7e:05:
9f:9f:b9:2f:5b:81:83:70:62:95:24:37:42:7c:a7:6b:db:94:
5b:63:73:e3:97:34:89:77:47:13:27:6f:b8:64:85:00:96:61:
9b:e7:56:96:51:c7:38:39:f5:1b:b5:fb:5c:12:5e:ae:a0:09:
43:e4:56:77:fa:db:92:34:9f:1c:56:e8:24:a9:c7:84:5f:dc:
0f:e2:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:12 2026 by rpki-client