Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/sPgky6XdCtW8cpH4ydwQp3wWSF8.roa
File: sPgky6XdCtW8cpH4ydwQp3wWSF8.roa (raw, json)
Hash identifier: Ni9QqVgnYsVqB8IEgCw+/2ySmta3akwdtucL8NG8WWk=
Subject key identifier: B0:F8:24:CB:A5:DD:0A:D5:BC:72:91:F8:C9:DC:10:A7:7C:16:48:5F
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019EDDE7FC4E656AC6A5C483558C0716F9B5
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/sPgky6XdCtW8cpH4ydwQp3wWSF8.roa
Signing time: Fri 19 Jun 2026 03:23:48 +0000
ROA not before: Fri 19 Jun 2026 03:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 46.232.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:e7:fc:4e:65:6a:c6:a5:c4:83:55:8c:07:16:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jun 19 03:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0f824cba5dd0ad5bc7291f8c9dc10a77c16485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:4e:4f:68:24:d3:58:ac:aa:64:5d:b3:f8:
cd:c9:23:7f:80:db:0a:1b:83:f6:43:a8:c5:7a:f7:
52:d0:4d:22:17:94:aa:f7:ad:a8:35:ef:bb:17:24:
37:1d:f8:73:39:ef:46:0a:8e:11:73:9d:84:55:c5:
f5:9d:82:8b:de:00:0b:e0:5d:3c:12:aa:74:67:bd:
9b:ea:70:8a:4a:68:7e:ff:fe:36:a0:8f:41:ed:b1:
20:6c:57:83:bc:3c:ae:3a:ff:bb:91:7a:61:81:cd:
0d:37:84:94:02:0b:e7:b9:62:7f:35:ee:79:61:88:
a5:94:ee:83:1a:11:7d:2c:55:43:5e:e1:b2:0e:b6:
92:01:de:b4:2c:d5:39:fc:46:fa:0d:2f:5b:dc:36:
62:be:1c:93:60:73:fa:f9:bc:71:b4:89:2c:29:d7:
8d:d5:b2:1a:eb:39:36:6f:6c:86:29:a1:4c:53:80:
f2:27:01:d5:aa:6a:8f:6d:95:d0:22:5f:22:cb:dc:
40:fb:84:8a:07:5f:65:6b:67:82:27:c0:16:39:36:
c6:53:df:cf:96:37:43:35:e0:2e:65:5f:76:1f:f7:
e2:1c:0a:87:ee:78:de:04:65:60:66:c6:30:e8:fd:
4b:e5:46:2d:20:6d:bd:e8:a4:59:55:42:9b:8f:1b:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:24:CB:A5:DD:0A:D5:BC:72:91:F8:C9:DC:10:A7:7C:16:48:5F
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/sPgky6XdCtW8cpH4ydwQp3wWSF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
01:58:54:64:29:05:75:db:fe:ff:ba:25:f9:26:7f:72:31:3d:
e8:45:1f:5e:93:51:41:60:af:34:cf:45:cc:94:cd:9f:e1:8b:
05:be:5e:66:b3:1c:8f:81:88:e8:ee:d6:cd:8b:0c:4d:d7:07:
ad:51:d4:9e:dd:62:1e:24:f7:f8:82:dd:88:97:3b:0f:ca:6a:
e2:d6:53:25:85:d2:ef:20:9e:91:70:41:60:ab:44:0f:62:18:
cc:f1:79:19:b7:31:95:8d:eb:ff:20:50:8b:70:59:27:a3:71:
76:b6:13:bf:ca:d7:8e:79:d7:e2:57:0f:57:5b:4c:5c:1c:42:
4a:7b:23:39:30:5e:47:b8:d2:0e:02:d8:e6:80:88:70:9c:15:
b5:eb:d4:69:7c:d4:5e:a8:30:94:f0:22:ec:f3:33:1d:cd:4a:
e8:67:7a:28:43:fb:fc:6c:ed:27:85:5d:0c:95:52:78:de:51:
b0:f4:0e:d6:41:1a:6b:d3:b8:2f:ac:dd:e4:b3:a8:34:9a:14:
a2:43:ab:f3:c1:5f:38:ab:ea:8d:85:71:08:a1:2c:20:e9:2f:
d0:9b:84:b6:92:ce:96:ba:fb:7b:e8:83:a4:d1:80:a7:05:b9:
14:12:8a:1c:53:79:4c:27:14:70:83:03:8d:6f:84:c9:5d:88:
a0:b2:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 03:57:08 2026 by rpki-client