Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/1-RIwbiVa8Z4C5HYiw5cbh5AINWI.roa
File: 1-RIwbiVa8Z4C5HYiw5cbh5AINWI.roa (raw, json)
Hash identifier: 5xHoOZOO6qUUZMIrPHd2nEhWlQQSO5/NmcsJOt7i6c0=
Subject key identifier: F9:12:30:6E:25:5A:F1:9E:02:E4:76:22:C3:97:1B:87:90:08:35:62
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 019C7CD605D35340CBA6236A36B334940770
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/1-RIwbiVa8Z4C5HYiw5cbh5AINWI.roa
Signing time: Fri 20 Feb 2026 20:55:26 +0000
ROA not before: Fri 20 Feb 2026 20:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213565
IP address blocks: 46.255.74.0/24 maxlen: 24
46.255.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:d6:05:d3:53:40:cb:a6:23:6a:36:b3:34:94:07:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Feb 20 20:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f912306e255af19e02e47622c3971b8790083562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:c0:b8:8f:30:13:b9:96:a2:78:2d:4a:ab:
48:53:b9:7e:87:a7:b0:0a:b8:44:9f:2c:3b:9e:71:
36:bd:34:6c:8f:5f:27:a9:91:50:01:b5:f8:ec:b0:
03:aa:f4:fd:0c:cf:c9:31:57:5c:7d:06:64:2d:f3:
51:a4:ff:8c:7d:04:a9:66:78:1f:4b:02:b8:1b:d2:
b6:ff:34:c9:ec:d7:e8:6c:a9:7f:10:b2:5c:f5:f3:
f1:cb:15:b3:03:22:7b:3d:cf:d7:ca:a2:0c:8c:54:
33:2f:44:7e:1f:fe:2d:e7:ac:37:6f:41:ed:0e:b6:
79:b2:31:ce:d4:a2:a9:7a:e4:58:7c:db:79:a7:6e:
ff:80:20:a6:8c:db:50:91:73:26:1c:ab:27:b4:f3:
98:cd:b8:83:b8:32:a5:f4:89:d2:62:ef:1b:04:ad:
2d:9c:bd:99:ee:60:39:39:bf:1d:1c:18:08:8f:b6:
fd:3c:85:bf:34:11:9a:45:84:f9:f3:f3:ba:05:95:
3f:85:d7:f6:b1:c0:89:9e:7c:44:23:43:4a:8b:bc:
ce:ea:4a:2e:38:a8:c0:99:7b:95:5e:0a:51:95:8b:
52:e6:15:b3:b9:f3:f8:a9:57:fb:9f:ec:23:47:b0:
6d:23:9f:3e:c6:88:c6:d0:4f:71:15:c6:9e:d2:dc:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:12:30:6E:25:5A:F1:9E:02:E4:76:22:C3:97:1B:87:90:08:35:62
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/1-RIwbiVa8Z4C5HYiw5cbh5AINWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.74.0/24
46.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
24:67:b5:ad:2e:f0:fc:3d:cd:70:e5:85:97:35:2c:05:2d:36:
4e:79:d5:5d:8e:1b:67:76:c3:34:18:c9:f1:e4:84:20:77:20:
0d:80:95:52:4c:5b:6e:3f:4a:b8:45:a9:7e:6f:f4:0a:3f:be:
85:fc:4b:d7:5a:fc:de:07:dd:6b:b8:85:9c:a1:77:da:63:1a:
ce:b6:0d:84:e6:6b:0f:0c:86:02:42:67:0b:9a:5e:3a:d3:8c:
1b:87:e1:44:b5:0f:34:a2:18:4c:09:37:e8:dc:0c:c1:da:7e:
cd:76:8d:95:e1:4e:88:92:f7:43:d2:a0:a8:8b:41:26:e9:50:
c2:3c:9c:7d:bc:6f:02:f6:f3:e0:e9:f3:d0:89:7e:61:1d:1f:
b2:20:de:da:bf:1d:1e:83:f1:19:55:25:a5:30:2c:00:19:81:
c2:11:af:87:82:57:c8:04:05:46:fa:b7:d2:31:23:00:0e:6b:
46:57:89:11:2e:13:91:68:f1:71:77:be:b8:db:db:90:e0:8c:
1d:a3:59:4e:0a:8e:93:17:5e:b6:a6:c1:c5:6c:e5:04:c8:32:
7c:fa:10:ee:60:f7:df:3d:2d:30:4c:73:dc:c0:9d:ce:7d:18:
dd:7f:0b:6d:36:9e:c1:31:c0:cb:20:e6:8a:1f:bb:d0:5e:ab:
aa:e1:42:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:57 2026 by rpki-client