Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/uiCDkRFrRbQXEYOboMj925yrGQ0.roa
File: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (raw, json)
Hash identifier: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=
Subject key identifier: BA:20:83:91:11:6B:45:B4:17:11:83:9B:A0:C8:FD:DB:9C:AB:19:0D
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019D7B73CE06B4A6C621248EEE24B0147306
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/uiCDkRFrRbQXEYOboMj925yrGQ0.roa
Signing time: Sat 11 Apr 2026 07:31:20 +0000
ROA not before: Sat 11 Apr 2026 07:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.243.51.0/24 maxlen: 24
46.243.54.0/24 maxlen: 24
2a00:1ed2::/32 maxlen: 48
2a00:1ed3::/32 maxlen: 48
2a00:1ed4::/32 maxlen: 48
2a00:1ed5::/32 maxlen: 48
2a00:1ed6::/32 maxlen: 48
2a00:1ed7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 13:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:73:ce:06:b4:a6:c6:21:24:8e:ee:24:b0:14:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 11 07:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba208391116b45b41711839ba0c8fddb9cab190d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:74:0d:47:56:2a:99:a6:f4:09:07:e1:9d:
56:76:b8:4d:df:c4:f9:25:86:6d:e2:7d:69:c4:5d:
5d:6f:87:d5:a0:94:77:cb:7b:27:61:48:65:03:de:
8b:d9:4a:7d:57:4b:cf:f8:37:8e:71:aa:88:8b:64:
69:98:19:1d:a8:9e:5b:cf:0f:28:94:2f:0c:b4:80:
c7:72:91:aa:74:66:40:ea:d8:0e:67:5c:5d:fc:a8:
97:94:02:ba:16:ef:d4:b4:2e:73:58:dc:5e:65:30:
4a:78:82:c6:a0:44:1c:0a:41:41:9c:a5:eb:50:fe:
fc:a8:c0:24:ca:0e:6f:fe:84:84:0c:02:ca:85:58:
45:8e:14:66:d8:13:8a:66:d5:63:90:df:47:88:d4:
e6:10:94:80:2f:a0:a3:49:45:37:89:89:06:ab:65:
6d:f3:fc:ac:11:bb:cf:8c:f5:b2:50:8c:9e:e6:b3:
e7:8d:5e:03:a1:4e:ed:07:c1:95:bd:3c:90:b5:7f:
43:03:28:3a:84:c8:7e:6c:7e:cc:42:3b:48:39:a8:
4f:cf:29:0c:8b:ca:89:7e:f6:dd:06:8a:36:ac:74:
c2:c1:09:3b:29:48:30:27:c9:db:cd:67:f1:6f:e9:
5e:ae:07:e8:1c:c2:0e:fe:68:e4:48:b1:49:98:79:
65:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:83:91:11:6B:45:B4:17:11:83:9B:A0:C8:FD:DB:9C:AB:19:0D
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/uiCDkRFrRbQXEYOboMj925yrGQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.51.0/24
46.243.54.0/24
IPv6:
2a00:1ed2::-2a00:1ed7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:20:19:6f:35:78:3c:35:df:1f:d6:af:75:6b:40:20:17:94:
25:95:c3:46:ae:92:2e:e3:b7:f4:56:a6:e8:59:02:02:91:4a:
2e:2d:c2:9e:e0:6f:93:89:35:be:56:75:e9:d8:1f:51:e9:b2:
10:c1:7e:a5:cf:ab:be:28:c1:10:a7:1f:ab:5e:d4:51:58:a7:
53:96:e1:1c:07:ee:6e:0b:61:4e:4a:49:47:fc:c9:b8:d8:42:
3b:1e:ba:9e:b2:ad:38:c9:e7:9a:cc:01:57:c3:ef:07:bd:9f:
0f:4b:23:07:12:bf:c8:07:ce:71:91:45:93:bf:f9:03:8a:51:
d2:2c:1a:79:73:8c:69:37:ad:1f:96:7c:6f:3c:24:83:84:4f:
9f:4f:d2:e9:9b:07:82:76:b6:2b:ef:d3:ef:2e:a6:13:4f:eb:
b9:2b:41:23:a1:12:87:5a:69:92:76:da:07:8a:71:2d:cf:4d:
6b:3d:ed:3c:e4:79:26:17:ae:d0:5d:13:87:fa:4f:09:1e:f7:
4b:5a:3a:cf:9f:b7:8c:ed:ed:9a:f3:53:f2:32:9b:06:c2:ee:
24:26:ed:84:c7:49:ce:f2:ff:d2:97:5a:07:98:51:3c:07:23:
9a:71:29:c3:71:7b:47:88:b7:a7:ad:43:ba:0f:44:38:2a:fe:
3c:22:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:51 2026 by rpki-client