Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/e3W8J6q3iuKac7T4Oo6mtuEW26c.roa
File: e3W8J6q3iuKac7T4Oo6mtuEW26c.roa (raw, json)
Hash identifier: kUqfw4ZECKTGTgvvWuokS9PN540GUZ5VpnMypMvP8sM=
Subject key identifier: 7B:75:BC:27:AA:B7:8A:E2:9A:73:B4:F8:3A:8E:A6:B6:E1:16:DB:A7
Certificate issuer: /CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Certificate serial: 01A08BC437004584B281B2D481478266F8EE
Authority key identifier: 6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/e3W8J6q3iuKac7T4Oo6mtuEW26c.roa
Signing time: Thu 10 Sep 2026 14:41:27 +0000
ROA not before: Thu 10 Sep 2026 14:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36692
IP address blocks: 46.255.40.0/21 maxlen: 24
80.254.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:c4:37:00:45:84:b2:81:b2:d4:81:47:82:66:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Validity
Not Before: Sep 10 14:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b75bc27aab78ae29a73b4f83a8ea6b6e116dba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:ce:b8:a2:71:04:cd:82:62:c4:e2:2d:02:
03:0a:c7:96:23:2d:63:db:dc:53:86:94:76:d7:3b:
4a:f4:d1:20:04:02:13:5c:99:38:27:eb:68:ee:e4:
ae:61:dc:49:16:e5:96:55:3f:ca:05:7e:3e:49:a0:
e9:99:81:55:a0:49:2b:2d:c7:3c:6d:4a:da:38:f3:
50:41:da:c1:33:6f:95:fd:5f:77:a6:bb:52:28:8a:
b1:8d:db:38:79:b5:e1:82:47:f7:85:d3:c6:35:44:
e9:16:fb:70:5a:da:29:6b:8d:43:1f:db:81:af:88:
a2:89:76:92:8e:80:c8:30:2a:71:d6:d0:c3:35:3f:
47:b1:50:65:03:40:54:c5:3c:09:f6:3b:cd:3a:5f:
ba:b1:fd:fd:6c:16:af:3e:c8:e5:5f:7d:32:55:e4:
8e:ef:21:c6:4a:da:42:bb:a6:4b:7a:cf:1b:3d:9c:
8b:41:1a:b2:2f:e6:89:f0:95:1d:64:d8:44:36:b6:
18:a1:95:ac:51:16:8b:3a:15:ae:6e:05:f1:c3:01:
cb:3f:c1:94:eb:51:59:b8:bc:c5:61:cf:03:aa:28:
be:cb:e9:5a:e6:da:55:c1:1e:02:9a:65:9e:9a:43:
ca:37:3e:02:38:7f:9d:dd:fc:34:c5:68:05:a8:a4:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:75:BC:27:AA:B7:8A:E2:9A:73:B4:F8:3A:8E:A6:B6:E1:16:DB:A7
X509v3 Authority Key Identifier:
keyid:6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/e3W8J6q3iuKac7T4Oo6mtuEW26c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.40.0/21
80.254.144.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d2:61:dd:ca:28:ca:0f:7b:81:5c:ed:88:b3:b4:61:e7:82:
0c:c9:e4:6f:72:a4:4b:04:b7:bc:52:f7:a3:9b:7d:22:5c:81:
c8:2d:b1:0c:8d:c6:aa:ef:41:d0:ef:9d:a6:fa:9d:82:a4:19:
40:de:a8:4d:b9:87:5a:ec:1f:39:bb:7e:00:7c:3a:a7:db:cf:
55:b7:d1:05:01:7a:dc:97:53:68:5a:7a:2e:2d:36:da:34:8a:
08:20:ec:98:82:13:a4:b2:08:31:4c:91:ed:b6:5c:cb:ea:af:
8e:e8:a0:80:96:c5:de:fa:fc:a3:cb:32:9b:87:51:8a:7a:45:
ac:61:b4:a0:ae:10:7f:1c:d0:88:ca:a9:ed:d1:25:84:88:a4:
17:ed:94:b3:e7:17:7f:7a:d6:98:03:56:3a:00:a0:ac:11:69:
06:d7:d2:b8:b9:36:e1:9d:f2:7a:2d:61:86:2b:39:26:83:c0:
a3:7e:80:27:09:e7:b7:6c:39:44:46:cf:97:c7:2e:09:14:9b:
eb:bd:fd:a6:cb:59:c5:f6:2e:9e:8a:37:f4:67:d6:70:23:90:
64:65:ed:1f:97:4b:47:dd:6d:dd:b4:75:3d:06:5a:0c:c1:61:
c1:08:f6:7e:68:4a:79:68:77:e8:91:bc:dd:ab:16:d8:dd:86:
6c:bb:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:23 2026 by rpki-client