Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RvptlRoz7dZNI68IZdvH7mBm8PU.roa
File: RvptlRoz7dZNI68IZdvH7mBm8PU.roa (raw, json)
Hash identifier: nI8eU+z3PKdFC5KvRGewvpft+ZymJe98NoJQga4wo3w=
Subject key identifier: 46:FA:6D:95:1A:33:ED:D6:4D:23:AF:08:65:DB:C7:EE:60:66:F0:F5
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 019FCD08D49F296FE472D1828F021F8062F1
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RvptlRoz7dZNI68IZdvH7mBm8PU.roa
Signing time: Tue 04 Aug 2026 13:48:55 +0000
ROA not before: Tue 04 Aug 2026 13:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12735
IP address blocks: 193.140.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:08:d4:9f:29:6f:e4:72:d1:82:8f:02:1f:80:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Aug 4 13:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46fa6d951a33edd64d23af0865dbc7ee6066f0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:96:72:f3:f0:6e:b4:2f:31:95:86:92:95:
7a:83:23:e4:da:41:72:e8:c6:af:0b:88:01:ee:f6:
4b:d4:4e:a9:aa:fe:48:b2:7e:b5:70:50:13:b8:bc:
e9:a6:d0:90:e1:78:6f:24:ea:7b:3c:f8:be:9a:67:
3d:ed:19:50:bd:33:a2:a3:6d:91:21:cc:02:2c:62:
9f:c0:cb:2d:2c:82:b7:71:cf:bf:fd:d9:c1:7e:f9:
c9:ab:ff:fb:38:2f:08:24:c5:e6:50:db:68:04:f1:
0f:7d:60:d6:98:d6:a9:ee:63:6d:9b:80:20:49:4d:
68:ab:d8:12:8b:8d:dc:3a:36:d1:25:11:95:29:a1:
36:fd:15:43:cc:12:1f:07:fd:82:3f:6c:a9:e1:58:
9b:6f:c4:ca:3c:8a:ac:d0:18:ac:0e:3e:2a:59:68:
df:47:dc:4e:f8:f7:f8:91:ff:75:c5:02:4d:9e:b7:
5d:a0:b5:08:13:64:00:1f:61:b8:e2:13:18:5e:d1:
e9:2a:dd:8c:11:e0:c7:16:7b:19:a0:b1:32:46:da:
a0:da:d6:5a:78:bc:e4:5f:da:0b:e8:14:77:c3:e2:
ae:2a:9a:99:e4:b4:68:4c:b9:89:32:ff:e9:9c:1c:
d2:50:e4:bf:9c:db:11:26:de:6d:22:47:7f:ff:32:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:6D:95:1A:33:ED:D6:4D:23:AF:08:65:DB:C7:EE:60:66:F0:F5
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/RvptlRoz7dZNI68IZdvH7mBm8PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.134.0/24
Signature Algorithm: sha256WithRSAEncryption
16:89:5a:d2:32:59:d5:33:76:0d:ff:d1:15:18:b9:c5:a4:86:
b8:6c:3b:4d:ae:f7:6c:43:55:64:31:ff:08:76:7b:a9:90:b8:
96:36:13:f7:01:88:e2:77:c3:7f:ab:db:cb:fd:b9:a7:5c:01:
98:a1:62:94:d7:79:52:6c:2e:59:13:fb:3c:09:41:3e:61:39:
7e:48:9a:57:07:4f:07:f5:be:b5:fc:9a:65:a2:a2:27:c8:70:
b7:84:d0:0e:f0:f1:76:7f:a9:d6:f2:8c:b4:eb:4d:72:bc:4e:
f2:78:a1:8e:17:7e:06:21:6b:e9:71:e0:a4:2e:07:5b:09:2d:
37:ae:7e:07:ea:f8:0c:2a:12:89:c5:a8:77:8b:83:21:73:86:
e8:4e:d6:36:90:10:95:36:a4:6d:02:99:0e:ea:24:7e:ae:8a:
cc:70:2c:d2:46:8a:fa:3f:1c:9b:32:8b:85:00:80:f0:7b:56:
e1:f2:f1:b2:59:d7:32:ab:0d:b2:be:6c:30:fe:d3:a3:86:eb:
5f:cb:f2:5a:68:5b:83:4f:e0:62:21:56:7b:e8:f2:f0:83:fd:
36:ab:6d:4d:b9:a3:aa:d3:d4:7f:4f:a0:31:46:fa:36:f2:2a:
21:51:4a:43:91:8d:30:1c:8a:4e:a3:6a:15:79:48:7a:1d:4c:
8e:78:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:30:05 2026 by rpki-client