Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa
File: Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa (raw, json)
Hash identifier: Upfc+pXKegcvhRzDlXEiNd2VXaPZzzD0Dy/XWAb+Rt8=
Subject key identifier: 67:73:AD:6F:A6:60:7D:A3:B4:1F:05:64:1F:B9:E1:50:AC:19:C8:40
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DBFF64099F6F935E0544238794C1
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 46.32.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:db:ff:64:09:9f:6f:93:5e:05:44:23:87:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6773ad6fa6607da3b41f05641fb9e150ac19c840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:f7:39:2a:93:aa:20:1e:20:dc:f2:8b:42:
e9:32:c5:68:a3:ca:fa:c1:d7:a0:dc:09:50:89:bd:
2d:ee:d8:ec:b5:c4:c1:9c:bd:7e:93:6b:95:6e:69:
aa:5d:bf:a9:a4:77:f9:e2:43:ee:aa:54:7d:70:5e:
9a:a8:49:0d:52:08:6e:d7:c9:b9:2c:5f:ff:0a:32:
06:db:f3:07:93:b9:48:ee:6c:d7:53:2a:cf:c7:9c:
1f:bc:ab:c5:79:d0:b8:24:df:37:99:e1:e0:98:aa:
71:2d:51:db:12:5c:f6:60:a5:71:df:ef:f5:6f:a2:
cd:06:4b:2e:c5:48:33:be:80:4e:4b:a7:52:9a:54:
3e:c1:a9:48:64:e3:db:83:39:00:6e:30:6c:1b:99:
5c:79:ac:c6:ce:6f:5c:4d:77:f4:53:16:41:c3:65:
f4:0a:fa:3a:a5:6f:4b:36:b6:8b:98:65:17:47:bb:
f2:2e:b6:33:ae:98:09:40:2f:14:2b:0e:b0:48:7e:
21:b0:48:9d:bb:f3:d5:ea:e7:99:73:b2:d6:15:2b:
39:27:29:00:35:f7:33:91:1e:ea:0b:58:39:fd:c7:
fd:3e:51:1b:34:4f:ec:ab:12:c8:30:21:cc:29:6f:
fc:7b:fe:08:5d:8b:bd:57:24:5b:02:1a:16:c6:0c:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:AD:6F:A6:60:7D:A3:B4:1F:05:64:1F:B9:E1:50:AC:19:C8:40
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Z3Otb6ZgfaO0HwVkH7nhUKwZyEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:81:be:71:1f:78:7b:70:02:fd:31:0b:0e:6d:fa:3b:9d:01:
3d:38:2e:9e:c9:00:8a:06:c1:4d:f2:3c:25:ec:b3:31:0d:99:
47:df:d1:2e:64:24:1c:f8:e9:be:69:5e:bd:cc:2e:2f:d9:bf:
bb:65:f4:07:60:d4:c2:fc:a6:91:6f:fb:61:9c:85:5a:df:8c:
57:35:94:23:77:c5:39:69:65:eb:80:f6:23:00:5a:ce:2a:a2:
a8:7a:4e:10:e5:5a:48:5a:2e:5f:a4:71:3c:bc:f1:45:68:de:
90:dc:cb:4d:23:5b:1f:31:d4:6b:5a:f3:0d:05:50:41:54:b5:
ed:be:d9:b9:92:dc:05:8d:9b:70:54:e6:d1:8a:c4:80:59:27:
91:41:b8:b2:17:49:7e:57:ad:20:c3:a8:ce:e0:0c:49:a5:db:
b4:3d:de:c7:42:2f:7b:ef:56:5a:3b:65:d5:25:cb:53:9b:0a:
14:d6:83:d6:42:51:3f:a3:26:a2:60:cc:50:2c:04:bf:72:bd:
48:16:55:b6:07:b2:f3:8b:5e:d0:a8:1f:c4:ab:25:db:a2:9d:
df:c8:59:c0:ba:c8:d8:06:80:be:83:08:d1:6c:77:87:08:85:
c9:de:7e:46:a1:60:1f:67:2e:4d:03:fe:bc:b6:59:65:76:f4:
49:64:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:24 2026 by rpki-client