Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa
File: DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa (raw, json)
Hash identifier: gntI7hjVaF7FvmC9MyaHIMr1VAinCkuK20uR11fgWMA=
Subject key identifier: 0D:49:7B:2B:37:B6:8A:2E:43:8F:7C:3F:C1:3E:A1:0A:DC:EB:05:78
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019F9EC6C4D59034B5315BB9ECF404A4442C
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa
Signing time: Sun 26 Jul 2026 14:14:14 +0000
ROA not before: Sun 26 Jul 2026 14:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152565
IP address blocks: 46.232.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:c6:c4:d5:90:34:b5:31:5b:b9:ec:f4:04:a4:44:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 26 14:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d497b2b37b68a2e438f7c3fc13ea10adceb0578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:6c:5d:d5:12:8f:65:4b:5d:5e:79:0a:e2:
4a:60:6a:5b:64:c1:1b:5b:01:50:31:0a:56:21:29:
bf:18:ed:c6:04:9e:10:c3:96:0b:8a:4b:db:d4:f0:
e4:bc:b6:61:da:38:da:53:0e:e6:29:4a:f6:1b:c6:
e0:8a:3e:23:c4:90:d2:d8:f7:c4:c5:48:ac:ec:b5:
8f:6f:5e:19:29:cd:ba:9f:8d:35:41:11:fb:fd:d1:
b0:09:80:11:e6:50:31:b9:ef:f7:8d:76:7d:66:a8:
eb:36:1c:c3:50:f0:a9:20:a5:cc:bb:bc:e7:65:5c:
cf:12:ee:2b:7f:49:fb:ab:60:fc:1e:5a:0f:29:18:
58:98:92:dc:a9:a9:33:b8:e2:06:ee:af:32:80:28:
6f:25:67:a5:cd:04:2f:00:3f:e7:68:23:33:4a:ef:
24:a1:37:eb:fe:4d:ab:ef:01:c7:04:77:6e:53:a2:
da:e8:14:e2:5c:9e:8e:c4:a6:db:36:9c:17:39:36:
3d:64:1d:b2:a0:82:fc:30:cd:18:21:38:7a:b9:29:
48:54:d5:ab:30:75:b6:aa:99:57:de:be:80:90:c6:
80:d8:c7:5a:a7:a9:31:17:e0:db:b8:7b:4b:38:60:
bd:13:6d:9c:32:5e:fb:45:3f:2e:62:1f:34:e8:e6:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:7B:2B:37:B6:8A:2E:43:8F:7C:3F:C1:3E:A1:0A:DC:EB:05:78
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/DUl7Kze2ii5Dj3w_wT6hCtzrBXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:4e:5e:f7:55:0c:ac:58:dc:8b:fc:98:bf:dd:dc:e7:2d:2a:
4b:f6:b6:51:b0:b0:62:3d:66:1c:b1:9d:64:81:eb:67:91:49:
ef:49:27:b0:80:0f:55:6b:f1:93:e4:79:db:a6:48:14:09:b3:
65:56:6e:cf:9d:db:11:3a:5e:0a:15:96:ef:99:1c:1a:62:f5:
d7:33:3e:f5:88:c7:8e:18:17:16:06:c7:f1:e9:8e:9c:c5:cf:
4f:c1:bf:8d:da:a9:c2:93:aa:0f:68:ba:f1:17:0a:f0:70:50:
62:85:8b:37:9b:fa:85:f8:bd:8a:78:e6:59:4d:0f:f5:ad:c1:
06:b6:ba:4e:11:24:66:10:ff:1d:dc:72:2b:16:97:8d:e8:27:
a9:6e:f1:c9:67:1c:a9:46:64:82:ba:82:7a:36:db:70:81:6e:
1b:96:ff:b6:f1:10:54:08:de:d9:bb:36:ef:a7:39:be:a3:93:
81:a1:f8:fe:63:03:a1:32:c6:9e:9c:33:9c:4d:5d:e4:46:44:
1e:dd:e1:cf:2a:b3:ec:49:77:de:c1:e9:33:b8:90:f1:32:af:
24:8c:7e:8e:49:4e:0e:c3:76:0c:63:6b:10:7c:fa:73:52:f8:
3d:41:2e:a9:3c:f1:73:58:38:62:24:e6:e2:91:7d:3c:84:ac:
60:b1:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:49:28 2026 by rpki-client