Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/dGMIw7XyljKZ4VAipgRb_Gv3574.roa
File: dGMIw7XyljKZ4VAipgRb_Gv3574.roa (raw, json)
Hash identifier: 5XpQyNwCpMd1s8manxuLHo6eOOCEr2maqfz0CCW1PAA=
Subject key identifier: 74:63:08:C3:B5:F2:96:32:99:E1:50:22:A6:04:5B:FC:6B:F7:E7:BE
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DEB4D469750BF786FCD03FCAB410
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/dGMIw7XyljKZ4VAipgRb_Gv3574.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216259
IP address blocks: 46.32.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:de:b4:d4:69:75:0b:f7:86:fc:d0:3f:ca:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=746308c3b5f2963299e15022a6045bfc6bf7e7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:55:4e:2a:6c:e2:56:6b:b5:97:f1:19:54:
66:e3:98:d4:29:1f:ca:1d:89:78:d5:1c:14:59:91:
18:20:39:79:a1:5d:bf:d6:96:b5:58:15:ac:99:04:
6e:c5:b0:6b:ef:d6:2b:ed:80:96:e0:b1:f3:49:ad:
26:3e:7c:5b:e1:dd:83:3b:0d:06:17:97:44:cf:71:
89:cb:ef:c8:03:22:4b:4a:a0:0a:6e:18:5b:fc:90:
a6:ad:e8:81:39:ae:99:df:f0:b6:02:00:1e:70:b2:
21:63:4a:b9:7f:96:d6:a9:d6:5c:ca:49:32:ca:21:
4c:36:14:76:d0:13:9e:80:ec:ac:fd:95:79:e4:90:
b8:a1:dc:00:1a:f5:cc:e1:c5:0c:57:77:ef:3a:b0:
86:ce:9a:52:26:30:bd:30:63:7e:90:2e:c4:9a:15:
02:46:4e:17:8f:6c:4c:dd:60:ac:23:12:c8:c3:4f:
f5:af:6b:d3:e5:03:98:ec:c7:14:94:2f:13:0a:cd:
e7:20:62:aa:52:c1:92:8c:76:c9:10:d1:ac:14:66:
7f:ab:7e:16:f5:42:bb:67:87:0d:88:93:ef:5e:58:
e5:dd:e8:ef:70:a7:12:06:d4:47:0a:ec:b0:be:82:
9b:c3:69:5d:a0:1b:ec:1d:51:a3:e3:ea:b7:1d:6c:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:08:C3:B5:F2:96:32:99:E1:50:22:A6:04:5B:FC:6B:F7:E7:BE
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/dGMIw7XyljKZ4VAipgRb_Gv3574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:9d:0b:e0:81:37:4f:89:96:a7:9d:f3:e5:19:1f:78:98:e4:
46:4f:fa:68:19:7f:90:28:fb:8a:b2:0b:3c:8c:37:9b:f9:25:
14:33:53:59:99:b0:d2:37:c9:71:d5:7b:58:30:15:28:50:05:
ba:79:4b:f7:16:53:07:65:a2:7d:e8:00:3b:f3:e8:1c:dd:28:
0f:71:9f:d9:1a:a0:d7:d8:13:d8:6c:76:70:af:7d:a5:45:9c:
11:61:16:c5:46:44:3e:91:e3:ea:77:ad:03:cb:38:94:b2:fc:
b0:da:31:83:9b:8e:ae:c3:ba:6c:b0:81:e8:54:06:b3:9f:c3:
8b:ef:38:0c:fd:9d:a6:b4:4b:6d:66:19:a7:a4:71:c2:6b:55:
3d:11:be:5e:78:b6:8a:7c:85:e0:f5:ed:de:e4:8d:48:65:49:
6e:98:ba:8a:b9:d3:2e:25:7a:43:88:b3:f0:f5:11:87:48:92:
b4:4e:13:1e:b4:d4:88:3a:25:46:c9:2b:7a:9b:e7:b5:f0:ab:
b3:ca:d5:a3:87:ab:cb:1a:26:00:9b:f1:b7:bf:f7:f8:ec:64:
d7:7e:98:df:cb:3d:6a:d0:a2:e1:64:7b:25:a4:20:5b:07:85:
9d:48:9a:24:27:a9:44:d9:9f:45:78:57:aa:1d:06:24:16:f5:
83:c8:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:43 2026 by rpki-client