Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RuGhF2fpQ5veAu5wOzNU-5fFzPE.roa
File: RuGhF2fpQ5veAu5wOzNU-5fFzPE.roa (raw, json)
Hash identifier: trfNWygSQNbsjconq3Ef3ljFswruhLFFDLxGD85dVNE=
Subject key identifier: 46:E1:A1:17:67:E9:43:9B:DE:02:EE:70:3B:33:54:FB:97:C5:CC:F1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019ED0DA8CFDEB174AD51EA4A0AB8331942C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RuGhF2fpQ5veAu5wOzNU-5fFzPE.roa
Signing time: Tue 16 Jun 2026 14:34:04 +0000
ROA not before: Tue 16 Jun 2026 14:34:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216068
IP address blocks: 147.45.176.0/24 maxlen: 24
193.233.80.0/24 maxlen: 24
193.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:da:8c:fd:eb:17:4a:d5:1e:a4:a0:ab:83:31:94:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 16 14:34:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e1a11767e9439bde02ee703b3354fb97c5ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:48:70:ca:59:83:75:fd:bf:73:46:e6:35:
17:7e:47:8a:e4:9b:4b:1d:7a:7e:f5:f7:25:5c:82:
0e:f6:e3:3a:60:8d:80:5d:26:db:c7:30:6f:e8:71:
c9:be:c9:9f:39:8e:f6:4e:4f:66:2b:d0:bd:cb:d7:
38:a7:c7:dd:80:d2:1b:6b:f2:5f:03:95:6c:da:47:
a8:70:89:3a:3c:0b:cb:f3:57:ad:aa:dd:9b:b5:56:
9f:ad:e1:6d:b4:77:ec:62:6b:67:56:66:00:58:dc:
91:82:c2:57:af:d3:51:1f:41:7e:10:f7:11:08:5b:
75:e0:b2:a5:12:56:73:bd:1a:69:47:58:a2:73:f2:
d0:5a:d1:2c:18:b4:3e:61:5f:38:04:10:15:5e:4f:
51:01:c7:10:15:86:fc:dc:48:a7:cb:af:f2:6a:16:
0c:b3:47:45:ac:d5:a3:44:fa:89:e8:39:30:d7:5b:
f8:7e:cc:46:85:12:b2:d2:40:68:31:38:c0:72:4f:
7b:65:28:fc:99:53:89:35:d7:a6:b8:50:04:86:28:
05:a0:01:79:c1:33:a5:49:cd:f6:b4:3d:75:68:d1:
af:62:4b:5d:9e:dc:32:9c:2e:e7:bf:99:93:b6:77:
bc:37:6a:18:37:91:12:34:d7:2f:c3:44:77:68:f2:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E1:A1:17:67:E9:43:9B:DE:02:EE:70:3B:33:54:FB:97:C5:CC:F1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RuGhF2fpQ5veAu5wOzNU-5fFzPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.176.0/24
193.233.80.0/24
193.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:aa:38:c0:bc:df:89:a0:ed:7b:26:cf:41:de:11:19:93:
ea:c2:c7:ab:55:d9:73:f2:2b:b7:07:5d:20:85:d6:ae:f6:b6:
f1:8b:51:be:c7:1e:4b:d5:0a:96:82:1a:5d:81:d1:a0:a6:b8:
c3:a8:5c:d6:84:ab:d3:67:51:63:02:06:84:f1:58:16:8f:2d:
79:b1:1d:d9:5c:5b:88:59:be:43:10:1d:cd:d0:0a:5a:c5:c9:
a0:56:9e:7c:3f:7b:fc:9c:68:71:8e:95:bb:89:6c:c5:10:b5:
af:4a:10:c5:3b:72:5e:81:0f:f6:34:f5:a9:61:7f:5e:3f:27:
77:b9:5a:70:9b:97:9e:a8:55:19:9d:75:52:da:ac:c8:91:2e:
50:d9:c8:b4:8a:17:29:81:fa:bc:88:2d:7a:77:32:b5:6b:c4:
4e:0e:ce:b2:96:bb:76:13:c0:3c:6c:71:dc:6f:f3:eb:2d:bd:
c2:b9:9a:a6:7d:d7:63:6e:99:6e:59:de:34:fd:da:ab:68:39:
82:d1:54:f6:4c:5f:84:6b:5d:8d:9d:f0:d8:c2:1b:c8:e1:1b:
d9:1e:45:d1:80:1f:fd:4d:8c:33:9d:ac:ae:c0:45:36:d5:64:
e6:52:18:dc:a5:31:33:52:90:75:dd:64:af:64:36:3b:5d:50:
06:de:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:52 2026 by rpki-client