Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/blTJDmoe7j0pG2imb4d5RmwKNV8.roa
File: blTJDmoe7j0pG2imb4d5RmwKNV8.roa (raw, json)
Hash identifier: lkdPoALJpUXszKPczWtHD0TM29xFr2I3iJ+TcSagtdk=
Subject key identifier: 6E:54:C9:0E:6A:1E:EE:3D:29:1B:68:A6:6F:87:79:46:6C:0A:35:5F
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 01A03FE28FFA080BC8F9C0D80CDC18332468
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/blTJDmoe7j0pG2imb4d5RmwKNV8.roa
Signing time: Wed 26 Aug 2026 21:03:27 +0000
ROA not before: Wed 26 Aug 2026 21:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 46.174.216.0/21 maxlen: 24
178.216.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e2:8f:fa:08:0b:c8:f9:c0:d8:0c:dc:18:33:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Aug 26 21:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e54c90e6a1eee3d291b68a66f8779466c0a355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:ab:c3:05:e0:95:3b:23:02:c6:c4:1f:94:
ff:6a:76:e7:9c:08:c1:b4:f9:2c:9c:46:78:e7:84:
7b:a5:ae:86:a2:09:90:c8:8b:12:ab:10:ec:f9:65:
e3:af:9c:d1:38:c3:97:46:e1:0c:b2:2e:55:1f:31:
2b:89:a6:d7:cb:51:f1:e8:08:31:e4:76:41:fb:4a:
94:e4:de:9e:13:bd:d3:f5:0a:e5:f7:f4:d6:4c:e7:
b2:3d:ab:ed:d7:34:4c:a2:5f:fc:26:ae:70:a4:18:
a0:22:b0:18:7c:81:49:f6:8a:86:24:03:24:4a:4f:
0f:9a:19:3a:31:c9:6d:c9:3e:a0:94:31:d0:7d:a1:
77:8b:ac:86:d1:e0:fd:3c:41:ef:f2:f0:b3:17:e2:
71:b4:96:23:cf:d1:89:9c:fb:22:1f:f0:0e:ef:cd:
df:f2:38:62:f1:02:4f:e7:51:1e:dd:61:b4:c9:9b:
f9:7a:b1:df:af:1c:05:a9:36:a9:4b:c7:a0:bf:b8:
68:d9:f0:05:90:d7:3d:0a:1b:a3:ed:b1:08:c8:7e:
16:de:f2:42:29:e4:f3:41:de:63:e8:83:46:69:74:
44:f1:3a:2b:c6:d7:e2:61:b3:9d:be:4f:d8:ca:d1:
8f:9c:33:a7:74:4d:b9:f5:dc:3b:80:29:68:be:cb:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:C9:0E:6A:1E:EE:3D:29:1B:68:A6:6F:87:79:46:6C:0A:35:5F
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/blTJDmoe7j0pG2imb4d5RmwKNV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.216.0/21
178.216.32.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:39:be:1a:8b:00:6d:6b:2d:53:b6:fc:d4:ca:34:1e:6d:4e:
2e:aa:54:68:9d:bc:b3:6f:d2:de:0c:e6:91:c9:28:c6:8b:35:
9e:ab:c8:b9:f8:12:1f:82:59:20:99:c5:c0:38:a0:56:13:bf:
e2:c6:77:4f:a1:97:67:8b:b3:62:f7:b0:9f:7f:da:a5:78:f8:
08:6e:fb:30:05:63:20:5f:d4:ae:8d:4b:82:bf:44:df:a4:de:
8d:31:d7:26:f4:79:27:85:2a:83:20:bd:ee:3f:7f:68:5d:27:
80:ef:c8:0d:84:83:e2:91:4c:70:d8:5c:a1:b1:f3:5e:87:75:
6c:a8:7f:22:28:fb:06:bf:e4:a0:79:dc:5a:c2:62:0a:c5:16:
08:f7:9b:33:51:7a:52:5e:7a:26:43:e8:82:f8:f0:47:42:a4:
10:99:ac:2a:41:97:d8:4b:fd:10:d9:09:f0:63:5d:29:f4:d4:
54:33:0a:38:02:4c:3d:8f:34:65:c3:02:bd:0a:82:58:c6:a3:
3d:47:7a:89:bd:be:45:85:7e:e2:09:1e:a3:86:56:f6:1c:47:
57:25:0b:2c:b5:5d:63:9b:52:44:62:e6:de:db:36:77:c7:08:
75:2c:52:10:76:0a:d9:ec:a1:76:12:02:60:82:55:4d:60:93:
e2:56:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:13 2026 by rpki-client