Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa
File: dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa (raw, json)
Hash identifier: 2QyCh0B58qW05lbELCp+HEAzhlYTZ0tv3CzPpDu8Nro=
Subject key identifier: 74:27:84:50:AA:B9:92:67:67:32:E1:5F:A5:8B:F0:8C:8C:B3:BF:DC
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 019FA8D70F3B99F255BF3D27B9C8234C626F
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa
Signing time: Tue 28 Jul 2026 13:08:14 +0000
ROA not before: Tue 28 Jul 2026 13:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42422
IP address blocks: 46.36.35.0/24 maxlen: 24
46.36.36.0/24 maxlen: 24
46.36.37.0/24 maxlen: 24
46.36.38.0/24 maxlen: 24
46.36.39.0/24 maxlen: 24
46.36.40.0/24 maxlen: 24
46.36.41.0/24 maxlen: 24
46.36.44.0/24 maxlen: 24
2a02:25b0:aaaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d7:0f:3b:99:f2:55:bf:3d:27:b9:c8:23:4c:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jul 28 13:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74278450aab992676732e15fa58bf08c8cb3bfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:b0:ec:96:67:1d:b6:2b:e3:a9:2f:39:df:
91:8b:d7:c8:01:84:1b:3a:be:14:2b:92:40:72:36:
9e:2e:b6:87:df:3c:de:56:f1:67:ab:33:cd:bd:34:
27:0d:11:b9:d9:a1:0b:f1:94:e7:4e:43:2c:e2:93:
00:a2:e9:e1:65:db:c8:85:e7:a5:2d:3c:4b:53:52:
45:88:ec:32:cd:18:91:32:7a:15:86:72:05:20:9f:
1c:e5:52:58:a8:a4:67:d5:37:68:71:c5:69:e6:9c:
17:90:13:0e:1c:ed:00:ff:dc:46:23:f4:bd:c7:f2:
fb:34:2c:a1:d4:64:53:f6:cb:59:d2:34:95:e5:c7:
af:0f:d0:51:7a:c8:0a:ce:2c:78:07:66:5e:b2:b1:
dd:10:7b:ff:ef:ed:fb:38:87:87:83:23:1f:be:55:
25:cc:22:d1:a7:e8:b9:d3:e0:a7:69:85:46:af:07:
a0:e9:f0:a2:cd:50:75:89:a5:96:38:af:f0:d7:50:
18:ab:83:4f:b3:4a:1b:62:5a:ec:0f:e0:80:32:eb:
db:4b:af:ab:48:de:c4:0f:b4:e0:95:58:4b:da:88:
b7:68:5a:9f:ff:d0:62:4b:f9:89:98:d3:a1:6f:04:
f0:b4:3a:78:a9:e7:f0:37:db:7f:f2:57:a8:4b:b1:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:84:50:AA:B9:92:67:67:32:E1:5F:A5:8B:F0:8C:8C:B3:BF:DC
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.35.0-46.36.41.255
46.36.44.0/24
IPv6:
2a02:25b0:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
33:29:40:1e:7c:c2:90:8a:1e:db:5b:3e:a9:57:8b:f2:23:d8:
01:78:6f:0b:0f:ae:3b:33:e9:fe:39:a2:a6:63:0c:1f:ec:09:
fd:06:93:bc:cc:43:b4:42:8a:73:61:75:4f:8c:f7:46:fc:aa:
31:35:fe:85:4f:cd:4c:97:05:31:2f:04:b5:84:34:13:65:00:
87:0a:13:61:7b:b8:d4:f4:5a:d7:95:5c:d2:4e:8b:f8:59:96:
c6:30:e9:4c:80:27:a0:ab:08:92:ad:6a:1e:38:7a:71:2b:6c:
0d:39:3a:6a:5c:b8:b3:c9:67:a1:c6:d6:1d:13:e8:24:bc:dc:
34:e0:1a:e2:0d:6a:00:a1:a6:0a:13:14:5c:b1:de:40:c5:05:
c1:ea:f5:60:8e:2e:f9:f9:18:f4:f1:63:6b:50:7e:f1:9f:cb:
64:7e:d7:5d:87:f4:78:0d:e0:9e:b1:51:b2:87:0f:2b:1f:07:
70:ca:19:d8:a5:62:72:28:48:01:c3:92:ea:f4:7d:49:72:a8:
c9:c6:85:a6:1e:e5:5c:fd:57:2c:34:1a:ad:70:87:89:5f:8f:
f4:b8:16:a7:97:0c:18:ef:ea:8d:c5:5a:8a:fd:94:94:d7:fd:
13:76:10:5b:d2:80:73:31:56:08:79:bb:49:f4:dd:eb:7e:fb:
22:a1:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:45:10 2026 by rpki-client