Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa
File: DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa (raw, json)
Hash identifier: kONkryDJeTUuCH5Fe3xmEEAXi2nBdTccviaLlcLsCzE=
Subject key identifier: 0D:CB:12:26:DF:16:8D:A3:01:B3:FA:D0:F8:63:CA:4A:4D:AB:31:5F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 019B7E38F9E51EB06ADF22EAC87727DAB8BC
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa
Signing time: Fri 02 Jan 2026 10:20:21 +0000
ROA not before: Fri 02 Jan 2026 10:20:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56450
IP address blocks: 46.229.112.0/20 maxlen: 20
46.229.122.0/23 maxlen: 23
2a04:4880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:f9:e5:1e:b0:6a:df:22:ea:c8:77:27:da:b8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Jan 2 10:20:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dcb1226df168da301b3fad0f863ca4a4dab315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:bb:87:08:ae:4e:db:e4:a7:61:01:6b:1f:
a1:6e:50:59:13:30:db:54:56:6e:58:22:20:ee:ce:
ce:9f:5d:70:1b:f1:b0:9a:41:61:ac:f3:ff:12:60:
7b:9b:41:19:87:92:da:d4:6e:53:3d:c5:41:be:1f:
aa:b4:07:cd:b4:71:55:a4:72:3a:25:c3:12:9b:b6:
4d:6f:aa:4c:4a:38:b3:eb:1a:16:d8:18:e3:e4:4f:
a9:a2:0e:47:66:bf:1b:bc:db:7b:3e:99:a4:0b:d8:
95:39:dd:e9:a6:83:69:2b:9f:87:0b:f6:6f:70:e7:
ad:a8:37:71:6c:3a:3c:8e:11:85:47:71:9f:a5:13:
89:ce:6a:ee:81:d6:60:d8:4f:9b:e4:10:1b:41:64:
0f:fb:a4:00:0e:8b:7c:63:42:5a:b8:db:9b:ec:ae:
35:8d:49:18:70:e6:f6:1a:a0:c4:7a:bb:1c:02:38:
d2:15:2b:f8:a5:42:9c:22:62:2a:6a:22:26:c7:af:
b6:eb:1a:f9:46:da:9f:da:42:d3:93:20:67:cb:9c:
61:43:b6:54:54:36:a9:2b:89:3a:28:cb:17:20:96:
60:34:bd:2a:e4:55:14:2d:12:04:75:c9:b2:b5:e8:
bd:a6:29:05:1f:17:6c:d1:19:72:c5:77:c1:2e:fe:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:12:26:DF:16:8D:A3:01:B3:FA:D0:F8:63:CA:4A:4D:AB:31:5F
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.112.0/20
IPv6:
2a04:4880::/29
Signature Algorithm: sha256WithRSAEncryption
87:3d:d4:de:8e:a2:c3:4a:66:9f:16:e3:b8:bb:db:2e:df:72:
22:9e:1a:af:6b:16:5b:63:b6:15:73:21:a7:77:3d:d0:f4:77:
91:ca:48:64:ef:a9:2b:dc:cc:18:33:3c:60:49:6a:c3:8e:82:
bc:61:be:b3:75:26:df:ec:33:c6:e7:38:23:05:46:2b:56:3d:
5b:0d:d5:6d:0e:28:e1:8a:aa:96:70:1c:98:9e:ed:24:bd:22:
81:0e:dc:56:c3:f9:fc:45:40:24:71:be:47:6c:a1:96:5e:d2:
66:04:5f:e1:16:be:26:93:07:1e:cc:b4:de:df:08:41:a4:67:
c1:07:19:0c:c4:d3:1b:9a:6b:b7:6d:c9:9a:56:bb:e5:4c:ff:
fb:5f:bf:6a:45:76:2c:b7:96:27:c0:e1:b7:b2:3e:66:e6:28:
b7:5a:83:9d:90:25:52:20:38:4b:3a:24:37:76:23:26:31:b0:
6f:fa:7b:3f:f0:ee:7e:8a:53:c4:ab:31:41:a5:a8:67:8b:d6:
92:4a:74:b2:e6:39:28:aa:2d:f2:00:5d:0d:08:ae:31:2f:be:
10:6a:bc:02:fb:ff:6e:16:84:b7:aa:18:98:ba:a3:77:ee:ad:
70:6f:64:26:3f:2e:d5:4e:9e:9a:f5:01:71:62:16:30:14:dd:
6d:c5:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:03 2026 by rpki-client