Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/E-gmcExJeDtt2_IsnYPKZgYeuTE.roa
File: E-gmcExJeDtt2_IsnYPKZgYeuTE.roa (raw, json)
Hash identifier: xuHhslA2CBqla23abgJsuvc+z3nXVo4kjRK4hurKMDs=
Subject key identifier: 13:E8:26:70:4C:49:78:3B:6D:DB:F2:2C:9D:83:CA:66:06:1E:B9:31
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01A0F24FA03471228B464892CCBAB8E9CAC1
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/E-gmcExJeDtt2_IsnYPKZgYeuTE.roa
Signing time: Wed 30 Sep 2026 12:34:59 +0000
ROA not before: Wed 30 Sep 2026 12:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218538
IP address blocks: 46.232.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:4f:a0:34:71:22:8b:46:48:92:cc:ba:b8:e9:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Sep 30 12:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e826704c49783b6ddbf22c9d83ca66061eb931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:c6:51:b1:93:9f:ca:fe:43:8a:c7:4d:d3:
84:74:61:d3:3d:11:6f:b9:b4:44:1e:b9:23:23:c5:
51:ef:70:45:f5:c3:0d:44:e8:55:52:7d:7a:53:3b:
cc:fb:be:63:1c:d8:e9:5b:26:d6:ad:45:8b:59:cd:
97:0e:5b:7c:53:b1:35:6c:cb:0d:26:92:1b:0f:fe:
03:4e:9f:24:62:52:fe:64:94:fe:36:5c:a3:07:35:
48:f0:f7:77:7c:2c:90:5a:fe:d2:18:1d:dd:21:8b:
76:fb:6e:10:02:45:a7:43:c8:62:db:8d:5b:60:95:
0c:2e:a1:2c:43:55:d1:ec:48:15:e9:1b:a2:81:22:
c0:34:d8:18:34:27:7c:64:a0:bc:8d:a0:93:b0:90:
ce:de:ff:e0:eb:46:1c:52:4a:e0:b2:2f:ef:bf:18:
c1:18:9f:43:10:c9:be:d0:bf:7a:54:87:21:b2:73:
05:3d:1c:eb:50:de:07:52:da:83:a3:61:82:6a:5f:
49:2c:52:2d:12:06:a4:f1:65:a7:79:52:87:9a:3f:
aa:fc:f5:ce:85:7d:09:76:b1:91:e4:f0:ae:36:42:
26:3f:f4:71:aa:9c:55:20:01:8e:ed:b3:f8:13:9c:
ad:8f:bf:bf:9a:9b:f5:d3:57:0d:07:c8:ae:36:4b:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:26:70:4C:49:78:3B:6D:DB:F2:2C:9D:83:CA:66:06:1E:B9:31
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/E-gmcExJeDtt2_IsnYPKZgYeuTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.237.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:a9:cb:55:74:91:23:8c:d3:c1:ba:e5:4a:5b:10:70:7d:
a5:aa:e7:2f:82:33:56:37:0a:31:d0:2c:fd:da:76:c6:c6:83:
e9:dd:5a:c3:6c:00:cb:ca:6b:6e:e7:85:aa:e2:2f:44:df:16:
7d:a7:62:5f:00:a6:ab:fa:f8:3c:59:a4:46:1a:90:60:60:bf:
1f:06:18:cb:ee:b4:cf:a1:2d:44:e2:72:68:6d:f7:29:dc:10:
5c:6e:d5:f0:41:d7:90:f1:eb:ab:15:50:47:c6:73:17:fa:28:
a0:74:f6:49:d5:40:35:31:6c:e8:cc:b9:79:2e:5a:6f:2c:35:
7a:43:a2:7d:21:15:b9:2d:43:32:66:2a:4c:ca:ed:58:44:ac:
49:ac:53:c6:2f:14:27:44:4b:d5:55:3e:7e:ed:2c:73:0a:43:
90:8e:ad:40:3e:d0:2c:1f:eb:05:e8:66:b0:25:c5:52:2a:09:
ce:f5:03:bc:fe:22:48:43:06:ed:e6:74:f0:54:f6:3c:7c:24:
d5:d9:61:fd:cc:14:85:08:e3:34:50:b7:a0:a5:6a:43:0b:ca:
b7:13:28:be:57:81:55:ad:a4:d4:51:8e:14:ae:00:43:71:09:
e2:1b:c6:db:79:8a:52:a7:0a:09:e4:91:cd:59:e7:d0:25:4c:
33:e7:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:14 2026 by rpki-client