Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa
File: uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa (raw, json)
Hash identifier: TVOgxQIfQpHq2V2Hd2KnY6QeGGGPCyJ5eRO9EBWn8xs=
Subject key identifier: B8:3A:2F:EE:7E:1F:81:0D:E6:9B:56:34:1C:11:45:0F:F4:BB:41:C4
Certificate issuer: /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial: 019F2368FEF4D1B4D47A32F083F41C643629
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 46.232.208.0/23 maxlen: 32
185.246.172.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 12:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:f4:d1:b4:d4:7a:32:f0:83:f4:1c:64:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b83a2fee7e1f810de69b56341c11450ff4bb41c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:23:03:eb:e0:02:ad:a6:6c:8c:67:e7:f7:
47:00:14:68:c8:d5:dc:d8:f4:d1:bc:56:07:39:ae:
e8:bb:00:4e:a2:24:43:3e:4f:c8:94:47:18:2a:20:
3b:15:d7:d4:a2:1b:85:6e:2f:54:30:36:f7:90:23:
33:52:2a:0e:c3:5a:ae:a4:1b:0f:56:37:f8:fe:e8:
e1:b4:2b:28:d8:c9:a0:36:bd:5d:c7:64:7b:20:99:
20:20:4e:de:4e:98:2a:28:9d:c5:4a:09:93:0b:3c:
ba:9a:38:a6:4d:6d:ea:12:c0:80:a5:ad:91:38:7b:
51:ef:1b:67:f6:e0:8e:4f:1c:b6:bf:3e:3b:d2:1a:
8d:d1:f8:03:0e:68:a7:bc:d3:5e:78:fc:e4:38:7b:
26:65:53:f0:f4:35:b9:37:85:85:88:cd:7f:9a:1c:
ae:10:98:73:ca:a1:12:a5:0a:7a:90:be:19:fe:4b:
de:bf:a9:a8:c4:e9:f0:3c:cb:d7:f7:ca:ad:e4:fa:
71:fa:0f:46:9c:50:50:ae:62:53:7b:ba:47:7e:16:
8e:9f:71:9d:2a:79:ac:f2:51:ce:03:5f:a9:2d:20:
12:46:3f:d2:3e:e1:4b:f4:db:b3:cb:9b:29:47:fc:
06:15:9d:01:40:65:16:c2:74:0f:5c:f7:8b:f6:6a:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:2F:EE:7E:1F:81:0D:E6:9B:56:34:1C:11:45:0F:F4:BB:41:C4
X509v3 Authority Key Identifier:
keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.208.0/23
185.246.172.0/22
Signature Algorithm: sha256WithRSAEncryption
61:70:5e:0f:ab:87:db:db:c2:9a:fc:be:72:0e:d8:bd:93:97:
41:04:f0:7b:f1:8d:44:51:57:a3:45:a8:09:4f:71:cc:45:d7:
4f:1f:fd:1e:9b:a4:c3:f7:dc:09:7c:f5:f2:ad:be:6b:1f:bb:
22:99:24:5e:bb:c2:b8:e7:a8:66:80:1e:01:b8:f1:c7:1a:5e:
6e:00:4f:c4:95:75:58:23:ab:68:74:51:68:7a:32:4f:94:6b:
94:e0:47:aa:74:b1:d0:7b:cf:b8:07:78:9a:f1:68:37:e6:2d:
a9:6a:dd:1b:45:45:5f:ab:1a:27:95:c2:b0:00:c4:0d:ad:eb:
63:58:4e:09:14:9c:92:f7:8b:b7:96:5a:6e:4f:b4:ef:91:29:
6e:d2:fb:9a:11:a9:2e:f5:d8:2f:42:13:bb:11:eb:f6:b3:90:
93:57:d4:6d:67:f1:06:39:d9:13:78:89:9d:7d:57:93:35:bd:
9e:8b:95:91:ad:4a:34:6e:b7:e1:72:7f:5a:4e:9c:b3:26:b7:
e8:17:fe:c9:ef:8c:32:4e:97:8a:ea:92:4e:0e:5d:57:4c:c1:
62:10:65:fe:4a:aa:5f:22:5e:17:47:03:55:26:50:ea:bf:a0:
5b:96:f8:b8:ac:c2:7d:75:3e:73:50:31:c6:c1:06:bf:0a:c6:
23:72:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 15:37:39 2026 by rpki-client