Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1t3e8Ylj9O0zIjsC2tOOYziuOrs.roa
File: 1t3e8Ylj9O0zIjsC2tOOYziuOrs.roa (raw, json)
Hash identifier: eehF+OhX6QRPqVel2i0g3hLv9GvHC+fZrbfgBiym6Ms=
Subject key identifier: D6:DD:DE:F1:89:63:F4:ED:33:22:3B:02:DA:D3:8E:63:38:AE:3A:BB
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A09C1046B0246377DB0C4ED440B20D32D6
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1t3e8Ylj9O0zIjsC2tOOYziuOrs.roa
Signing time: Sun 13 Sep 2026 18:38:27 +0000
ROA not before: Sun 13 Sep 2026 18:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36680
IP address blocks: 46.151.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:10:46:b0:24:63:77:db:0c:4e:d4:40:b2:0d:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Sep 13 18:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6dddef18963f4ed33223b02dad38e6338ae3abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:83:da:be:f6:58:e0:0b:c8:46:37:ba:e5:
7b:5a:f2:d7:57:8a:e5:87:ba:94:a6:f0:73:43:06:
7d:95:6c:41:0d:b2:15:db:91:80:a9:0e:21:16:5f:
f9:81:63:eb:aa:ed:fc:ec:55:59:1b:81:ef:42:7c:
a2:93:23:aa:1d:93:a7:f8:c2:d6:95:2b:ef:3b:a2:
aa:86:22:f7:e0:6b:1a:6f:34:d9:95:e0:41:ec:9d:
d6:64:26:54:fc:62:6c:3b:fe:d9:71:40:62:75:f8:
d9:d5:68:46:d4:fd:60:d7:c5:7b:0b:0c:05:80:c4:
fb:d7:a0:c1:c4:cc:4c:ad:49:ff:38:ed:85:9e:5e:
13:f3:2b:34:b7:ed:67:ce:d2:17:f6:48:8b:c0:a0:
22:e7:bb:de:ea:88:91:d3:63:f8:be:9a:91:b5:be:
92:48:32:dc:88:f0:d7:3c:46:d3:93:c0:26:30:7b:
ff:c5:2f:71:67:28:6c:4c:0d:5b:53:5f:47:13:f4:
9a:d2:4c:5e:bf:75:54:a0:91:08:83:ab:76:13:98:
52:97:36:0c:d9:6d:6b:aa:42:a5:86:dc:08:7a:ef:
92:ef:44:c2:02:52:d5:f9:8e:1a:a2:af:ed:1f:3e:
50:5e:0a:25:37:56:12:dc:c9:79:77:c2:6b:03:3f:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DD:DE:F1:89:63:F4:ED:33:22:3B:02:DA:D3:8E:63:38:AE:3A:BB
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1t3e8Ylj9O0zIjsC2tOOYziuOrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.182.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:19:30:0d:ed:0a:12:b1:7c:98:a7:c3:b2:25:61:ee:48:
ae:94:a1:d8:ac:35:6d:84:bb:02:31:6f:7f:09:9a:ad:a8:ee:
84:eb:c6:17:f9:f1:76:64:20:0b:dd:7f:63:ae:f0:1a:a3:9d:
23:a2:ea:86:0b:71:8f:b8:9f:09:9d:42:2d:d9:fd:df:f9:88:
35:1a:1f:4d:1f:01:b0:17:a9:04:e0:47:0d:85:0a:80:4b:89:
eb:9b:07:93:91:c0:b1:4b:f9:50:72:45:43:58:f9:75:a3:03:
8e:8e:d9:83:35:e6:44:b7:12:67:21:b3:8d:8c:50:3a:0f:55:
a7:01:1d:81:21:b5:f2:cd:7b:68:43:82:61:7c:e3:08:ac:c2:
4d:80:7f:05:6b:32:58:dd:46:20:4f:86:7e:e3:b4:bc:9e:dc:
b2:35:04:b3:4f:5b:09:a1:6a:8d:b7:f7:e0:30:c2:89:c5:14:
92:11:32:71:13:03:82:88:f4:37:9b:22:e5:95:f4:b8:25:df:
d0:1e:76:d3:11:7b:fb:d5:39:74:14:f6:89:f0:70:1f:be:1e:
af:3b:12:15:fe:3c:0a:13:15:2b:7c:15:40:58:76:ed:e8:08:
f2:62:6a:9e:d7:67:ac:33:09:b9:fa:74:1b:a7:a3:f1:74:c9:
f1:89:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:15 2026 by rpki-client