Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/q0uzP5X6Ji6kOnnb73lf383ry6c.roa
File: q0uzP5X6Ji6kOnnb73lf383ry6c.roa (raw, json)
Hash identifier: R98bJwA31Gqo5zxzql0ssyMqNBVqGhIJ3Znpr6EHE0c=
Subject key identifier: AB:4B:B3:3F:95:FA:26:2E:A4:3A:79:DB:EF:79:5F:DF:CD:EB:CB:A7
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019FDD74DDFF51EB8C7AF02A8B6D36E61967
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/q0uzP5X6Ji6kOnnb73lf383ry6c.roa
Signing time: Fri 07 Aug 2026 18:20:51 +0000
ROA not before: Fri 07 Aug 2026 18:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219159
IP address blocks: 46.32.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:74:dd:ff:51:eb:8c:7a:f0:2a:8b:6d:36:e6:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Aug 7 18:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab4bb33f95fa262ea43a79dbef795fdfcdebcba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:9b:74:1c:c2:93:df:fc:4a:1b:8d:ef:f8:
33:49:8a:c5:48:7b:26:8e:3c:34:8e:22:df:10:2f:
fc:87:bf:06:8f:f8:d4:93:27:61:73:1f:9f:74:15:
3a:5f:1b:d9:d9:5f:20:45:5c:2d:8e:fd:2f:ed:ea:
59:08:67:80:c6:4c:4b:48:a8:68:77:48:a8:b9:80:
85:9f:43:1b:89:34:a4:4b:df:b2:73:f6:5e:88:3a:
d9:91:c2:8c:ac:3b:cb:03:51:42:f3:2c:ab:cb:bc:
1d:c5:7c:67:10:1d:a6:4d:38:01:b3:cb:4c:1a:2b:
0e:1d:ab:dd:83:14:62:6f:67:82:f8:b6:65:00:6d:
cb:98:76:c0:75:29:e4:da:cf:96:fb:54:d3:a1:19:
73:cf:9c:c9:ca:b2:fd:0c:96:28:8a:e7:b0:ff:cd:
7a:b7:78:f2:58:63:e0:c0:f2:a8:af:c0:46:d7:a1:
4c:b0:48:62:91:7c:6b:7d:7e:b5:12:7f:58:4c:be:
85:ec:4a:9c:20:a3:01:73:fb:fc:6a:12:1e:77:51:
ac:84:80:fc:ea:09:88:ac:7c:83:01:05:d3:a5:8a:
79:bc:6b:f6:1d:c7:f0:d2:ef:6d:9a:09:56:a3:aa:
af:df:57:05:3a:9d:8c:ca:ea:3a:1b:cb:0a:9e:da:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:B3:3F:95:FA:26:2E:A4:3A:79:DB:EF:79:5F:DF:CD:EB:CB:A7
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/q0uzP5X6Ji6kOnnb73lf383ry6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.172.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dc:d9:9a:f4:fe:b6:40:27:19:2a:e5:b3:83:93:ff:e5:1f:
be:e9:ee:ac:96:f6:d9:a5:da:cf:82:70:f0:a0:9c:7d:6d:93:
d9:ed:db:f1:f8:68:b8:e2:4b:02:7c:42:f5:43:8c:61:e6:5f:
1a:07:fa:1f:7c:24:fb:e4:1e:c8:19:c3:f1:f0:d0:6e:9d:6f:
43:04:73:c7:5d:83:5c:70:6e:cb:15:b3:53:0d:27:bc:dc:c3:
45:ed:06:e8:29:0c:02:74:f6:19:13:fe:3d:be:bc:c5:63:39:
39:81:8b:29:70:2a:3e:03:72:6e:f4:e7:02:96:ca:ed:16:99:
de:f8:a3:07:cf:f7:3d:41:30:26:9b:f3:aa:e4:f9:7c:34:5d:
97:4f:d7:f5:ac:7b:69:31:3f:15:94:25:2d:7f:b8:46:7f:10:
a4:56:77:39:41:2a:fd:87:b3:b7:2b:66:c7:77:80:d5:30:0a:
9f:9a:e3:df:6d:f3:68:d7:b1:c6:79:40:53:1e:7a:ef:0f:f6:
1e:f8:3d:75:4c:dc:13:be:e4:55:a8:0b:08:55:3a:6b:50:0f:
0a:a9:16:bf:4e:8a:41:82:12:fe:cb:43:3a:69:f8:40:53:57:
36:13:ba:a9:e3:9d:83:32:b4:3f:85:17:2a:7a:10:7d:55:65:
5d:59:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:58:32 2026 by rpki-client