Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/476Pd4BcXq6cpIo0miCe9jXiXQI.roa
File: 476Pd4BcXq6cpIo0miCe9jXiXQI.roa (raw, json)
Hash identifier: DDfZDiInG5mai4tv/HuAutPNdZsBHHTAZwEhmg4P5tk=
Subject key identifier: E3:BE:8F:77:80:5C:5E:AE:9C:A4:8A:34:9A:20:9E:F6:35:E2:5D:02
Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Certificate serial: 01A1158C6AD3B522ADF89AD2054871F2574B
Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/476Pd4BcXq6cpIo0miCe9jXiXQI.roa
Signing time: Wed 07 Oct 2026 08:48:06 +0000
ROA not before: Wed 07 Oct 2026 08:48:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 195.245.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:8c:6a:d3:b5:22:ad:f8:9a:d2:05:48:71:f2:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Validity
Not Before: Oct 7 08:48:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3be8f77805c5eae9ca48a349a209ef635e25d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:8b:52:29:f6:95:48:5e:32:3c:ad:bb:7c:
78:a0:92:26:fb:64:7e:da:9d:38:e9:8b:45:a4:3f:
57:ff:9d:ec:af:51:e0:65:26:24:3a:c4:b7:7b:62:
28:3b:e1:f2:1c:57:e0:c6:d6:f8:d8:3a:b9:40:23:
fd:fd:49:3d:29:70:96:af:a8:77:91:07:3e:b9:c1:
aa:d0:0b:ed:af:80:3d:56:2c:ad:81:f4:a5:14:1c:
86:1c:b2:6d:c4:c5:d1:c0:8e:4f:f3:c6:26:4b:c3:
1a:e7:60:30:a5:a9:8d:4f:1a:2e:97:c2:ad:86:16:
17:9e:5f:91:b7:33:c9:ec:88:66:58:8b:95:a4:fe:
40:35:6c:30:db:fe:24:10:d5:96:c7:fb:2c:d8:45:
88:e3:5b:cb:13:b6:1a:58:e8:1a:6b:9a:a3:0e:21:
f7:b1:a7:89:77:90:a0:82:be:b2:ad:6a:67:2b:56:
81:fc:2b:4e:84:65:1d:65:e9:29:41:23:4b:42:f7:
2b:e8:43:03:9d:19:ba:1e:c0:f7:30:0e:07:3e:94:
a6:28:2f:a5:45:39:7f:dc:69:9c:09:ef:69:97:a7:
56:73:60:e9:39:cd:b7:03:b5:af:94:13:91:c2:09:
ea:91:e9:27:98:24:e1:63:2e:3d:67:52:ff:a5:cb:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BE:8F:77:80:5C:5E:AE:9C:A4:8A:34:9A:20:9E:F6:35:E2:5D:02
X509v3 Authority Key Identifier:
keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/476Pd4BcXq6cpIo0miCe9jXiXQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.227.0/24
Signature Algorithm: sha256WithRSAEncryption
57:24:d0:d3:7d:17:ce:a6:c8:2f:73:67:0f:b7:13:3f:00:74:
de:d9:db:be:e6:16:29:cb:89:c3:31:ca:be:f5:31:c6:af:36:
ca:03:bd:34:d0:10:e4:c5:a7:71:5e:6b:eb:38:85:9a:46:8a:
2e:14:05:45:71:3c:9f:e8:8a:bd:57:42:33:fe:7a:cd:13:61:
80:ae:1a:8e:b0:08:be:c3:8a:76:aa:b8:93:0b:24:b1:ff:82:
9a:7e:43:5a:6f:54:78:f4:1e:bd:4a:9f:77:e6:ab:c5:6d:ac:
d8:3b:26:8e:39:ec:4c:98:c8:77:55:61:70:b9:4c:11:15:26:
b9:db:0b:e1:39:e4:6f:f9:60:e8:7a:76:a4:3d:cc:22:a9:61:
be:51:09:4f:30:4e:cb:9b:97:b0:cc:ec:1f:cf:cf:94:4e:a8:
ca:14:c6:15:2d:7e:de:52:97:14:77:9a:d3:96:c5:0d:cd:a6:
aa:8d:a0:27:e9:99:f8:1e:e8:cd:db:e8:41:67:e7:77:c5:ff:
73:0f:a3:a4:7c:1b:92:2b:34:9f:4a:eb:ab:aa:12:05:ef:4e:
e8:ac:b9:71:9b:34:57:2c:1a:41:7c:32:df:e6:62:15:c3:0c:
b5:43:e7:61:68:28:36:dc:ea:c5:38:c9:71:51:93:c4:ae:17:
a8:16:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:17 2026 by rpki-client