Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PXhNr5LIpei7P-l1bKc0ptCQ_p4.roa
File: PXhNr5LIpei7P-l1bKc0ptCQ_p4.roa (raw, json)
Hash identifier: 6rJSVd6sPGc2Uvzs9LioyYvqZ4EF+0ypLzmNWKk5a3I=
Subject key identifier: 3D:78:4D:AF:92:C8:A5:E8:BB:3F:E9:75:6C:A7:34:A6:D0:90:FE:9E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D5383489272D024881950A94791067197
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PXhNr5LIpei7P-l1bKc0ptCQ_p4.roa
Signing time: Fri 03 Apr 2026 13:23:25 +0000
ROA not before: Fri 03 Apr 2026 13:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 46.29.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:83:48:92:72:d0:24:88:19:50:a9:47:91:06:71:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 3 13:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d784daf92c8a5e8bb3fe9756ca734a6d090fe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:ff:da:e0:12:49:3b:bc:ef:aa:2e:0a:ad:
0a:f2:db:f4:31:25:79:7a:3e:61:4e:96:b2:8d:ed:
3b:6e:d9:c2:6e:ff:ee:48:b9:c3:2b:45:6f:50:66:
03:db:56:fb:50:21:aa:6b:ee:36:97:34:2e:22:f7:
d9:33:b1:c1:ad:96:62:e5:01:5a:e4:a3:bd:0b:49:
89:fa:19:91:78:14:bf:1d:f1:19:37:fa:4a:a7:14:
02:37:ae:28:32:60:33:6e:8d:71:e4:d5:7b:c2:be:
09:9c:11:11:c5:04:9d:63:df:0f:07:06:6d:bc:e6:
66:bd:6c:5b:fb:8e:0b:fb:cb:7b:38:e3:32:19:68:
b0:8e:36:75:df:b5:35:9c:fd:85:7c:22:16:29:1a:
d1:07:f6:0a:a8:f3:d8:16:34:31:f1:3e:17:53:1c:
48:d8:11:df:fb:2f:91:fa:57:f4:5c:51:3b:23:21:
72:62:ae:b5:9f:79:bf:ef:67:04:bf:cc:f9:d5:fa:
e2:90:fb:01:1b:1e:a7:ad:18:a6:2b:0f:fe:54:18:
9a:5d:dc:7f:42:90:12:75:26:08:fa:1a:11:f2:13:
e3:bf:74:5f:48:e9:a8:06:61:1d:62:15:4f:dd:43:
8b:7e:b6:c7:c2:26:b2:c3:18:f2:03:38:18:d5:c7:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:4D:AF:92:C8:A5:E8:BB:3F:E9:75:6C:A7:34:A6:D0:90:FE:9E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/PXhNr5LIpei7P-l1bKc0ptCQ_p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f7:22:4d:12:d1:c4:12:2a:08:db:82:c3:39:0e:4f:18:40:
55:93:66:de:bf:b1:c2:9b:bf:80:71:eb:05:3b:99:09:30:74:
5b:71:48:07:09:9a:28:de:d2:dc:4f:42:e0:4a:1d:cb:0d:64:
fb:fb:b8:48:31:ed:6b:b7:8c:ca:25:e6:48:12:ba:d2:1e:b8:
e1:80:7e:10:30:05:9c:11:1c:98:b5:f7:24:dc:2b:63:5b:3f:
a8:b4:43:2c:bb:cb:e9:a0:d4:93:8c:37:5d:73:c9:78:91:f5:
a6:5c:7a:6a:e4:2d:c7:00:81:07:c5:f6:28:0f:c8:a2:30:b6:
d2:98:37:b1:1b:6b:f2:4e:88:fa:bc:9f:33:9a:4e:4c:a0:0f:
71:e9:d0:ca:f9:b8:de:c7:94:24:bd:67:c3:16:23:c3:c5:69:
73:b8:cd:b5:e4:ce:94:98:6e:0d:7d:38:82:14:cd:f1:90:06:
42:b7:e5:9f:08:28:af:45:88:81:07:19:e2:13:12:3c:01:ca:
8d:54:a7:7b:10:bc:75:ee:27:aa:f7:9f:5c:6d:1d:e1:2f:81:
75:73:9b:84:77:cb:67:e2:54:09:a4:fb:aa:19:4b:18:16:fe:
fd:4d:eb:0d:dd:e9:ef:b4:81:55:93:67:ba:ed:87:01:ac:3b:
06:f3:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:42 2026 by rpki-client