Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/RAH7abBoh4PL_Oja667fcsvJv9s.roa
File: RAH7abBoh4PL_Oja667fcsvJv9s.roa (raw, json)
Hash identifier: 1oeZ9MSZDs5DHmq83npHQ6JgAnU29mx9Jo2/hNzkRvI=
Subject key identifier: 44:01:FB:69:B0:68:87:83:CB:FC:E8:DA:EB:AE:DF:72:CB:C9:BF:DB
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019F0EFED0B5C527AEBFBF50BE20F49E1CC7
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/RAH7abBoh4PL_Oja667fcsvJv9s.roa
Signing time: Sun 28 Jun 2026 16:10:08 +0000
ROA not before: Sun 28 Jun 2026 16:10:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.16.162.0/24 maxlen: 24
185.27.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:fe:d0:b5:c5:27:ae:bf:bf:50:be:20:f4:9e:1c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Jun 28 16:10:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4401fb69b0688783cbfce8daebaedf72cbc9bfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:69:7e:7d:2e:ea:25:96:46:2e:b6:c4:9a:
4d:a4:3c:f9:48:08:5b:88:ab:3b:df:8d:78:cc:30:
a4:61:eb:ef:42:40:05:7b:91:1f:3c:a9:3b:cf:28:
5b:db:45:cb:82:74:b6:ec:20:59:0a:e6:a1:ba:d6:
ab:4f:6d:cf:8f:e1:61:1e:4b:83:d9:85:5a:56:5b:
b4:2f:ee:eb:91:85:65:bd:53:6a:e8:b9:7a:1b:da:
0d:fd:4a:83:e9:af:13:ee:de:1a:bc:07:f4:10:e3:
ab:0f:81:71:b4:e5:2a:34:24:d4:54:6d:f0:eb:d5:
ee:4d:6b:ac:6f:10:51:f7:ec:9d:f9:41:1c:1c:94:
a3:60:68:39:e2:6e:86:b9:9e:8a:83:ba:33:b1:f0:
08:1e:2d:5e:d5:fd:51:be:61:96:5d:a9:92:68:73:
77:03:65:3b:e5:6d:b2:26:b7:e7:4b:67:bd:67:64:
04:29:66:4b:7e:18:19:17:af:64:d2:db:ad:82:28:
f8:dd:f7:74:d6:6b:2b:b8:62:f7:01:d4:34:68:f5:
31:aa:26:61:ae:f9:ee:19:a6:6b:12:a4:49:a9:26:
9d:33:bf:2d:a4:c3:a7:e0:51:0a:a3:de:f7:ed:b8:
c5:fe:48:9b:b1:47:bb:bd:25:5f:b6:51:34:7b:5d:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:01:FB:69:B0:68:87:83:CB:FC:E8:DA:EB:AE:DF:72:CB:C9:BF:DB
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/RAH7abBoh4PL_Oja667fcsvJv9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.162.0/24
185.27.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:bd:d0:f1:82:ef:41:e4:7f:9f:9f:bc:9f:a4:2a:a2:97:50:
7b:e1:0d:7c:6d:b3:86:30:c4:bb:40:4c:d5:bb:eb:6d:05:e1:
32:0b:65:29:0c:6b:cc:6c:fa:cc:60:03:ed:e8:36:d6:a5:64:
2c:1c:94:85:76:d5:a2:53:bf:0f:36:32:97:9e:01:b7:15:59:
02:28:0e:db:04:b4:f4:e3:65:4a:2f:af:61:eb:1c:c1:95:b4:
f0:b9:65:17:0e:68:05:d6:bf:9b:22:5a:db:04:b7:83:e7:3f:
50:02:61:20:b8:47:4a:d7:e1:e2:e7:c2:82:7a:63:42:98:01:
43:e3:1e:ca:16:fc:7f:9b:64:a7:d0:23:da:23:06:d1:3b:c1:
a6:f6:bd:e5:f9:14:89:6b:f3:13:00:5b:eb:f5:31:2d:ce:a3:
af:4b:b0:45:aa:d7:5b:6c:91:33:36:76:81:2f:bb:6d:ed:76:
3c:7c:78:97:9e:54:dc:64:bf:93:6c:ea:1d:98:03:7b:d9:43:
8d:78:c3:1f:62:4f:70:e4:8f:3d:a7:96:55:b5:8c:cc:b2:9e:
bd:4a:14:61:dc:b9:ed:a4:bc:62:f8:b7:0f:34:0f:87:e2:be:
39:1b:37:a0:ea:dc:62:d1:2c:e1:5b:a7:11:d3:4d:a6:ad:7d:
7b:54:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:53 2026 by rpki-client