Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/raStXVKdcpmZECk_0amdM6iFBkM.roa
File: raStXVKdcpmZECk_0amdM6iFBkM.roa (raw, json)
Hash identifier: OkzRGccuAo2/o3w00touVdIm5lxj1wpjHOWmBqY715M=
Subject key identifier: AD:A4:AD:5D:52:9D:72:99:99:10:29:3F:D1:A9:9D:33:A8:85:06:43
Certificate issuer: /CN=e0b67541b8e7df3d564491fea558cecb29e97083
Certificate serial: 01A088002A4DAB7255EDF764C933F858CD08
Authority key identifier: E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/raStXVKdcpmZECk_0amdM6iFBkM.roa
Signing time: Wed 09 Sep 2026 21:08:27 +0000
ROA not before: Wed 09 Sep 2026 21:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 46.174.48.0/21 maxlen: 21
62.122.213.0/24 maxlen: 24
62.122.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:00:2a:4d:ab:72:55:ed:f7:64:c9:33:f8:58:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b67541b8e7df3d564491fea558cecb29e97083
Validity
Not Before: Sep 9 21:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada4ad5d529d72999910293fd1a99d33a8850643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:cb:04:a7:cd:4f:57:8a:99:00:1b:47:a5:
7f:38:7b:da:02:3a:d7:e8:e6:c6:35:7e:11:28:52:
40:36:6f:60:ba:74:09:95:46:39:30:84:a9:9c:b8:
a6:71:fb:e0:95:88:e1:e1:06:6c:1d:8e:dc:83:7e:
1a:07:ec:8d:47:61:10:f4:7c:75:ee:e5:ef:29:14:
aa:84:38:35:d2:93:43:9e:8c:38:d1:c4:1c:51:23:
01:b6:cc:64:f3:21:89:44:15:e2:33:62:7e:d2:9f:
d3:36:e7:30:a1:d6:c2:60:50:00:b8:41:92:b5:3f:
29:91:4e:7a:15:db:47:b0:b4:d9:be:76:d0:72:a3:
de:3e:e4:8b:b3:30:f6:7e:67:73:eb:7c:6e:39:01:
01:3d:36:14:bc:60:1c:d5:f8:c3:48:9a:52:a7:dd:
0f:15:79:92:19:3a:0c:fe:84:28:7b:f3:7c:1b:61:
be:d6:e8:b7:0b:25:37:06:2c:08:e6:3e:c3:8e:b8:
40:2e:ed:c1:40:94:73:42:3a:8f:31:68:14:bf:9f:
ee:b2:8d:32:78:ef:7e:96:a4:4a:5b:e2:2d:82:00:
52:ef:a8:29:43:e2:eb:21:12:e4:df:64:c4:cd:d9:
85:56:8e:8f:6d:3d:d8:28:40:2a:b7:22:09:29:43:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:AD:5D:52:9D:72:99:99:10:29:3F:D1:A9:9D:33:A8:85:06:43
X509v3 Authority Key Identifier:
keyid:E0:B6:75:41:B8:E7:DF:3D:56:44:91:FE:A5:58:CE:CB:29:E9:70:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/raStXVKdcpmZECk_0amdM6iFBkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a37070-3630-4560-93ae-d2021f708bf7/1/4LZ1Qbjn3z1WRJH-pVjOyynpcIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.48.0/21
62.122.213.0-62.122.215.255
Signature Algorithm: sha256WithRSAEncryption
82:43:fc:61:27:65:07:29:f0:6e:93:47:ff:6b:ec:a4:6d:0d:
9c:4a:5f:35:40:f3:fb:89:94:87:b2:5e:ff:73:1e:25:86:b7:
2d:c0:5c:4a:7d:72:ed:45:0a:b0:32:5c:84:de:2c:58:f9:4b:
be:76:61:71:3a:90:89:24:fc:66:8d:b6:a5:93:2b:1c:5e:3d:
53:df:cd:4f:0d:f7:4a:d8:eb:57:aa:29:c4:6f:78:ec:c8:72:
7c:98:7c:b5:f0:3b:c3:99:61:0f:b1:9e:44:ac:ae:ed:cc:a8:
df:cb:7e:d5:18:e2:93:d7:43:56:88:53:7b:00:4e:02:1b:33:
0e:dc:53:f3:7f:6a:72:d0:16:4f:40:4d:27:1d:54:fd:e9:b5:
79:61:2a:5c:d7:30:d7:72:89:67:d1:62:10:11:ea:0b:9b:ff:
4a:cc:db:26:63:52:a0:87:39:2d:a4:12:9e:8a:e1:d1:57:97:
e5:91:94:3b:f0:6d:04:f3:36:54:ef:02:14:af:3f:45:2f:ee:
3d:4c:65:66:0f:37:8b:c0:fc:a4:5a:14:74:f9:ce:b4:df:d8:
9c:9e:d1:47:8b:40:0f:64:f8:22:fa:d1:8f:4c:04:a4:c4:4d:
67:78:a3:f5:88:9b:74:de:93:03:3e:92:8a:ec:77:41:bf:f2:
7a:09:82:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:48 2026 by rpki-client