Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/8uH4NI4kpzD-NWWHOrX7k6DpF7A.roa
File: 8uH4NI4kpzD-NWWHOrX7k6DpF7A.roa (raw, json)
Hash identifier: hmLhJru6ia4iNlp5tWUf0dsIrrGpEkZHSBNpSmfTzzo=
Subject key identifier: F2:E1:F8:34:8E:24:A7:30:FE:35:65:87:3A:B5:FB:93:A0:E9:17:B0
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 01A0690C79958D82B19FB21016F97B6E4711
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/8uH4NI4kpzD-NWWHOrX7k6DpF7A.roa
Signing time: Thu 03 Sep 2026 20:53:40 +0000
ROA not before: Thu 03 Sep 2026 20:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/21 maxlen: 21
31.44.40.0/22 maxlen: 22
46.21.22.0/24 maxlen: 24
46.21.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:0c:79:95:8d:82:b1:9f:b2:10:16:f9:7b:6e:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Sep 3 20:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2e1f8348e24a730fe3565873ab5fb93a0e917b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:ab:7c:f6:0e:36:11:2c:32:c2:51:44:fe:
13:dc:1a:57:e9:0d:6b:fa:56:60:be:46:78:4e:31:
cb:34:34:70:8d:f5:c6:e8:a3:53:3e:a2:f1:4d:c7:
f0:96:0b:e3:81:37:93:08:ad:66:ba:4f:b3:35:59:
d9:68:52:1b:7c:64:7c:23:07:e6:4c:26:d4:56:16:
42:5c:9b:60:36:39:6a:8e:08:98:01:8c:4c:50:fd:
95:e3:20:8c:e9:31:74:11:2b:18:32:54:09:0c:be:
68:c4:77:6e:c6:2f:54:a0:ae:81:37:9b:73:ce:19:
90:57:ac:8d:ff:21:8a:e6:5d:72:ce:e8:c9:8b:62:
89:bd:27:47:b8:e9:29:ee:cd:d1:d6:f8:be:04:64:
6e:5c:b3:bd:c6:3a:fa:37:5b:8c:14:7e:2e:06:cf:
dc:5a:60:11:17:cb:5b:ee:99:45:1d:a8:b3:48:fe:
40:ec:80:5b:ee:ab:2f:f2:4b:32:6c:21:ea:a5:ec:
b7:4e:f1:d6:ba:9e:0b:ab:10:2c:3e:a5:25:84:23:
99:10:36:ae:de:36:ec:88:ae:73:9c:a8:a9:8f:e1:
0d:2d:4f:df:45:5a:63:53:6b:9d:c9:9a:ed:9e:d1:
24:16:1f:96:c2:20:83:04:93:ea:a0:cd:28:2e:00:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:F8:34:8E:24:A7:30:FE:35:65:87:3A:B5:FB:93:A0:E9:17:B0
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/8uH4NI4kpzD-NWWHOrX7k6DpF7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0-31.44.43.255
46.21.22.0/24
46.21.29.0/24
Signature Algorithm: sha256WithRSAEncryption
78:14:05:99:c0:78:ae:30:2c:ed:83:72:43:ec:ce:67:65:2b:
71:3c:a2:7e:cc:bc:a4:ba:40:23:36:f7:c1:65:80:57:ef:01:
d6:3e:23:6f:e9:db:7a:08:83:bb:31:c0:40:7d:bb:0c:3f:bc:
fb:97:96:24:61:65:12:d2:34:b5:0f:84:04:ee:92:6b:7d:58:
d0:b9:00:bc:09:94:0a:ac:32:e2:68:8b:8d:a1:87:23:9e:1a:
e1:ec:a7:c0:f1:ae:1a:f6:2f:f1:9c:d4:6a:87:fd:ea:c4:e6:
f6:4b:94:21:6c:a6:16:57:32:42:06:42:66:37:b6:f2:bb:c4:
52:06:0a:72:3c:19:14:98:66:d3:40:47:9d:3f:e0:de:03:c5:
5a:c1:73:43:18:57:16:21:b2:54:33:da:a6:e1:b0:8c:27:36:
6c:48:9f:c7:fa:05:fc:a1:af:21:b2:7e:be:16:42:4e:b9:8d:
15:49:e2:eb:2f:92:b3:69:36:de:c9:76:a4:0a:00:05:3d:1f:
67:ff:ef:82:5f:1a:ed:6b:54:a3:4d:72:f1:d5:12:9e:b1:9f:
bc:1a:d8:c5:ec:a1:16:bd:22:ad:c9:68:74:fd:59:f2:63:32:
4f:57:0f:0f:54:0e:33:24:85:53:94:16:a5:fa:16:17:bb:40:
63:3f:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:57 2026 by rpki-client