Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/rbGp9q6QTIXhFc7ecNyZW_lW4oo.roa
File: rbGp9q6QTIXhFc7ecNyZW_lW4oo.roa (raw, json)
Hash identifier: Qdhnr+sJnGz2cYaD5wovLPOgYlD7v0unzqdOgyFrUIw=
Subject key identifier: AD:B1:A9:F6:AE:90:4C:85:E1:15:CE:DE:70:DC:99:5B:F9:56:E2:8A
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A06A6775FDA0E8E97144E63CCD64692D60
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/rbGp9q6QTIXhFc7ecNyZW_lW4oo.roa
Signing time: Fri 04 Sep 2026 03:12:40 +0000
ROA not before: Fri 04 Sep 2026 03:12:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 46.253.130.0/24 maxlen: 24
185.238.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:67:75:fd:a0:e8:e9:71:44:e6:3c:cd:64:69:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 4 03:12:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adb1a9f6ae904c85e115cede70dc995bf956e28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:c1:60:14:bd:a3:92:93:d5:aa:eb:38:4c:
c4:81:6a:be:f2:53:85:77:09:f2:26:53:65:a9:8d:
c2:f6:81:ca:e2:12:8d:69:d9:0b:7d:03:49:88:9a:
51:15:33:5c:61:17:39:94:b8:b9:32:40:cb:c0:95:
63:43:29:5f:39:ff:53:d6:7b:23:fe:e7:70:54:d3:
7f:e8:b8:79:f3:24:c7:55:09:88:b2:1d:b8:f8:a9:
c5:0d:93:fc:21:68:14:cb:69:40:6f:d2:4b:24:68:
22:05:5d:e7:16:fd:9d:35:fd:22:2a:26:57:13:cb:
53:b8:49:28:21:92:05:7e:4c:da:b5:96:30:4f:b3:
0b:39:6d:c1:96:7a:a4:24:89:59:20:4e:2e:01:43:
e7:d4:85:5e:4b:20:a0:fc:e7:6b:b2:01:2b:3c:99:
0f:89:54:35:69:6b:0f:eb:96:d5:1b:b2:93:ca:c9:
3b:e3:5b:9b:41:a7:66:a3:9d:18:ff:09:b9:fb:1d:
3a:1f:e5:52:9b:3e:e3:fe:9a:7c:4e:b4:60:14:a5:
22:b7:ed:ab:79:c1:0e:31:ae:9f:6e:4a:1e:78:34:
1b:b9:6c:f0:db:d7:86:23:92:25:61:f9:51:83:4d:
cf:04:06:a4:00:9b:bf:99:52:20:6d:09:4a:ae:bf:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:A9:F6:AE:90:4C:85:E1:15:CE:DE:70:DC:99:5B:F9:56:E2:8A
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/rbGp9q6QTIXhFc7ecNyZW_lW4oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.130.0/24
185.238.115.0/24
Signature Algorithm: sha256WithRSAEncryption
94:15:f4:30:ad:7e:43:1b:70:13:9a:83:7c:d7:28:e4:20:ef:
65:23:9b:0a:36:12:a1:d8:46:fd:aa:02:97:49:ef:26:04:e2:
11:ad:8b:08:ee:4c:1d:43:48:58:49:e8:46:cf:fd:ba:8a:ef:
81:5b:3f:99:64:75:7e:1f:f3:7e:bd:e8:af:ff:24:2c:5a:3a:
f1:5e:50:9e:b4:a9:34:98:60:8f:5f:6a:59:57:05:3b:90:e7:
d9:64:84:9d:50:bf:80:ec:3c:f0:bc:59:ce:bf:ee:fa:b0:92:
5f:be:31:89:50:68:66:eb:b4:4e:b3:31:db:25:27:57:aa:55:
78:db:a7:d8:cf:94:50:3f:f9:78:a5:7e:95:92:61:da:13:ce:
15:38:cf:91:b5:dd:7f:2c:31:6d:8a:ee:b6:82:0e:2d:fe:a2:
4d:b9:52:e6:3b:b3:f0:7c:19:93:68:fc:a6:85:0a:51:73:27:
38:e8:bc:d1:db:54:63:97:be:55:4a:41:ab:ef:68:c4:4a:78:
a1:96:07:71:85:d5:86:4c:7a:ea:7e:19:cb:bc:29:51:de:ab:
80:51:14:56:df:14:a8:f0:0d:5d:27:29:17:1a:e4:f4:3e:8b:
82:2d:56:0b:8f:cb:cb:bf:d5:87:b7:06:24:4e:ec:66:88:09:
b8:9e:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:23 2026 by rpki-client