Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/T_XID6vuukHAvdlVbOkSvdJrmpQ.roa
File: T_XID6vuukHAvdlVbOkSvdJrmpQ.roa (raw, json)
Hash identifier: 3iwmUlZdkQ/+grvrDB6VspRZaoYjMWi/tzaIbi1/oWU=
Subject key identifier: 4F:F5:C8:0F:AB:EE:BA:41:C0:BD:D9:55:6C:E9:12:BD:D2:6B:9A:94
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DC9F39CD942601EE2807C58F97B3
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/T_XID6vuukHAvdlVbOkSvdJrmpQ.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204986
IP address blocks: 46.32.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:9f:39:cd:94:26:01:ee:28:07:c5:8f:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ff5c80fabeeba41c0bdd9556ce912bdd26b9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:ea:f2:3d:04:b6:48:4b:f7:8f:ef:0b:78:
68:1d:af:db:66:ae:18:36:d8:fb:ec:c2:e1:17:90:
14:ac:df:68:f6:6b:6b:b5:e0:23:aa:90:f3:55:cb:
18:67:ad:62:91:33:f7:0a:ff:d1:0e:5a:dc:95:76:
74:7c:d7:8b:19:fb:5e:03:42:9e:8a:2e:60:ea:d4:
26:86:aa:53:d7:a0:f4:05:95:d3:3f:fd:88:a1:a5:
21:9d:b3:52:8c:28:76:d5:2f:b8:00:63:c4:6d:f1:
35:84:19:34:c0:45:af:45:3a:cc:b0:ec:60:32:82:
7d:a6:11:88:cb:56:39:1d:95:cc:d8:71:61:c6:97:
b3:97:f2:28:03:05:80:86:af:02:74:3d:c6:98:e4:
94:c0:88:8b:d9:81:df:45:53:38:b1:19:a0:3b:a5:
01:72:a7:73:29:63:99:14:59:6c:66:fa:8b:62:60:
09:82:26:52:a3:49:78:c4:1a:2f:d3:0e:57:9c:c5:
d0:f1:9c:b3:76:7c:ca:f8:41:67:23:0d:b8:65:50:
45:ec:8a:e2:fb:2e:b1:42:d5:d8:29:c8:fd:e9:a4:
3a:ac:e0:86:ab:67:c9:56:64:e4:b7:85:02:56:e0:
e3:2d:2b:a9:d4:4c:47:1b:91:7c:b2:9d:e1:66:b2:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:C8:0F:AB:EE:BA:41:C0:BD:D9:55:6C:E9:12:BD:D2:6B:9A:94
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/T_XID6vuukHAvdlVbOkSvdJrmpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.179.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b9:82:2b:d3:29:93:8c:de:4b:3e:5b:8f:38:10:79:71:56:
7d:c4:c1:d1:9e:6c:a4:2c:8a:ab:6c:3b:24:fa:93:ad:42:de:
0f:9a:85:a8:81:5f:a6:53:80:b5:f3:23:11:71:97:46:6f:b2:
30:95:24:7d:1d:85:70:6e:7c:0c:19:b0:bf:cb:39:db:6c:6f:
95:df:9a:84:d3:76:1e:9b:58:cb:9d:f8:43:85:ea:5f:a9:f8:
74:c9:ee:76:59:54:e6:ad:ba:6c:c8:e6:e3:ef:6e:d2:7a:0f:
e5:45:a5:60:88:f5:60:1c:c4:b9:fa:17:48:c2:f6:80:0f:90:
21:c7:f6:19:44:2d:bf:5e:3d:37:e4:4b:b3:95:1c:80:72:e9:
5a:dd:84:ca:ea:0b:65:2f:1d:11:f9:53:96:67:51:cb:62:10:
69:2f:48:8b:37:91:64:38:88:02:c6:b2:17:69:3b:5b:da:89:
cf:ee:f3:55:67:a0:f1:f8:be:0b:d3:5d:37:ea:49:2e:a1:61:
ea:93:6d:3f:c9:2a:08:57:0f:be:01:7f:4c:69:06:05:8e:93:
2b:71:23:d1:eb:0a:37:be:d0:d3:bf:1a:14:f7:03:d1:b3:c9:
a6:dc:fa:c8:5b:8c:3f:b9:45:b5:c6:09:23:72:a7:35:ea:1b:
6c:12:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:45 2026 by rpki-client