Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/k-N3kRPBrLDYKlWh2RmWRi1tZ3o.roa
File: k-N3kRPBrLDYKlWh2RmWRi1tZ3o.roa (raw, json)
Hash identifier: u022PW4D1hnx1r+hl9upVSkbea5Bxn4AcnwA5Cem/nk=
Subject key identifier: 93:E3:77:91:13:C1:AC:B0:D8:2A:55:A1:D9:19:96:46:2D:6D:67:7A
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 019E2B0E4868722C46C35E400B841F2099F8
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/k-N3kRPBrLDYKlWh2RmWRi1tZ3o.roa
Signing time: Fri 15 May 2026 09:53:36 +0000
ROA not before: Fri 15 May 2026 09:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215421
IP address blocks: 46.36.122.0/23 maxlen: 24
46.36.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:0e:48:68:72:2c:46:c3:5e:40:0b:84:1f:20:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: May 15 09:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93e3779113c1acb0d82a55a1d91996462d6d677a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:d8:b6:d6:b0:ae:fb:25:42:52:e6:e6:49:
99:6e:72:75:e1:5e:5b:5b:9e:17:d8:bf:57:d9:ad:
20:db:27:45:25:92:f0:42:4f:3f:28:c2:d7:d2:85:
c1:fd:71:18:6d:79:b6:3f:b2:62:00:de:b8:a7:ef:
23:b8:af:1e:65:da:28:99:0e:1a:49:50:77:26:95:
73:49:02:3c:19:ff:d5:24:9c:a8:8a:06:fa:cb:5e:
d2:7c:a3:66:01:eb:db:36:cf:d4:c7:a7:e5:58:3e:
be:da:31:40:8c:42:9d:db:c1:7b:3a:b4:66:60:ba:
db:ee:09:51:ab:38:a1:31:e0:73:04:37:6e:85:c0:
17:74:e1:70:72:09:3c:06:2d:3f:f0:7d:f9:13:f3:
ae:e4:d0:51:46:49:a5:a9:10:f6:36:43:4d:27:09:
32:da:38:24:ed:f1:6e:35:33:5f:b4:96:ff:61:7a:
e8:cb:62:ed:f6:03:17:84:5a:b4:0e:4e:97:a3:64:
96:db:b5:a2:46:ff:3c:85:2a:0e:31:d3:ce:75:b0:
d9:e8:57:ae:21:5a:a1:67:bf:58:3d:9e:e7:19:b5:
64:47:ea:13:98:4f:2d:57:7e:3e:37:e1:bc:9a:1c:
5e:f5:06:17:2b:15:1c:30:b1:87:99:53:50:95:7f:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:77:91:13:C1:AC:B0:D8:2A:55:A1:D9:19:96:46:2D:6D:67:7A
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/k-N3kRPBrLDYKlWh2RmWRi1tZ3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.122.0/23
Signature Algorithm: sha256WithRSAEncryption
61:94:4b:a5:8c:dc:99:f7:2d:42:0a:8e:a5:04:2f:fa:f4:10:
48:d3:f1:2b:4b:78:0b:21:b9:69:4f:89:74:b3:36:41:b4:75:
1b:68:b7:40:98:4b:2c:dc:b3:04:c4:91:1c:4f:3f:9f:00:23:
10:b0:db:9b:10:11:87:c2:0f:44:5b:f3:66:29:e4:2f:7f:c8:
fe:f5:7a:db:9d:c1:13:c1:82:12:69:c9:10:03:c5:d0:76:29:
be:c5:b7:e3:dc:fc:e0:ab:72:d3:71:67:56:4d:a9:28:6e:c2:
13:ca:d6:ac:2e:23:1d:87:9f:94:5a:ac:ec:be:83:6e:cc:33:
68:e0:7a:65:c3:88:27:cc:06:3e:ea:ca:f4:05:cf:0c:53:6c:
ce:9c:a6:bf:bd:f4:e1:3a:ff:ad:49:0e:23:62:4d:1e:af:4e:
0e:f7:5a:59:b1:53:9d:63:a6:0b:93:ff:2c:c9:34:d3:32:c5:
92:c1:f7:5b:83:e4:15:fe:68:4a:b8:39:64:35:ce:d5:52:2c:
a3:23:83:ba:6a:85:34:7d:7b:d3:76:41:a1:36:ca:4e:5a:00:
ae:ed:32:09:71:1f:8b:38:ec:41:09:6c:e3:49:45:17:9e:3f:
ff:34:be:a9:9e:12:b0:7c:0c:d6:7b:b4:08:d7:0c:12:90:63:
1a:f4:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:27:57 2026 by rpki-client