Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/H1M5d7Pr1j4WlRJ8xbuP8A_0qnM.roa
File: H1M5d7Pr1j4WlRJ8xbuP8A_0qnM.roa (raw, json)
Hash identifier: eWon0aVQQliGJ2uC9ras0BkkUjlm+tRHm+ZT36v1Yy8=
Subject key identifier: 1F:53:39:77:B3:EB:D6:3E:16:95:12:7C:C5:BB:8F:F0:0F:F4:AA:73
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 01A121232A9259ADDCDD85102A68B6FA7722
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/H1M5d7Pr1j4WlRJ8xbuP8A_0qnM.roa
Signing time: Fri 09 Oct 2026 14:48:35 +0000
ROA not before: Fri 09 Oct 2026 14:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60442
IP address blocks: 46.28.233.0/24 maxlen: 24
185.33.60.0/24 maxlen: 24
2a02:ed40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:23:2a:92:59:ad:dc:dd:85:10:2a:68:b6:fa:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Oct 9 14:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f533977b3ebd63e1695127cc5bb8ff00ff4aa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:63:f1:14:ca:f3:4d:6c:32:ce:c0:ac:29:30:
db:0d:8b:1f:8d:a3:70:85:8b:7c:ad:aa:e0:08:90:
05:c9:e8:7b:39:67:65:a8:c8:a1:a1:f2:ba:40:ef:
f5:d2:48:62:21:87:b6:15:0c:44:d5:07:48:57:8e:
8d:3f:06:93:1f:ce:8d:b8:c8:3b:5d:b8:34:c8:9b:
f0:4b:59:83:1c:6f:d1:e9:fa:90:e6:a2:14:96:e3:
d6:d5:51:f6:79:8d:86:ca:f4:df:e8:db:ff:9b:f6:
c3:a4:9e:69:af:b0:c8:24:d0:d9:3d:c1:c7:32:a2:
33:2c:b1:a4:ab:aa:87:d2:c1:90:62:ea:a0:a7:fc:
10:92:4b:22:5b:66:5c:8f:73:e3:7d:f1:0c:aa:b6:
9a:bf:1a:15:b7:af:d2:65:bb:b4:fc:4c:e0:dd:8f:
34:29:1c:70:8a:42:60:57:c4:4d:ed:13:24:49:b7:
f1:8d:85:b9:d3:01:ec:a8:2c:d5:ee:c9:9a:20:b5:
82:12:a6:c0:c5:0c:2f:66:44:3e:a9:65:dd:71:96:
fe:29:71:7a:5c:3c:ba:18:0f:b3:9c:01:2e:8a:29:
7f:71:47:94:b3:fb:6f:15:f6:6d:26:e5:22:ac:04:
7e:bf:33:d0:d9:e8:33:c7:c8:fe:f9:03:32:37:a9:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:53:39:77:B3:EB:D6:3E:16:95:12:7C:C5:BB:8F:F0:0F:F4:AA:73
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/H1M5d7Pr1j4WlRJ8xbuP8A_0qnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.233.0/24
185.33.60.0/24
IPv6:
2a02:ed40:1::/48
Signature Algorithm: sha256WithRSAEncryption
94:32:f8:a0:e1:94:a7:7d:a3:3c:0f:d6:b1:59:84:24:23:b2:
48:a8:d4:03:29:fa:80:17:bb:b0:a6:c9:e9:2c:3f:2a:df:62:
16:6e:cd:1c:a7:1a:40:65:44:d2:c5:b5:de:0f:51:20:fa:c9:
ae:1e:7e:ab:99:c0:ba:84:68:fc:ad:2a:98:0b:12:58:fa:ec:
83:13:6d:a2:10:ea:f1:8c:27:ef:c5:7f:c1:72:6a:36:1d:e0:
d7:9f:0f:6c:c7:b7:a9:a5:56:e4:ce:39:42:e3:2a:08:46:0d:
7a:23:4c:97:d2:05:56:0e:21:ac:3d:6b:ec:35:d7:b7:bc:74:
f8:e8:57:26:aa:1d:d1:26:9f:b6:e1:d6:a1:2c:ea:4a:86:19:
f0:2c:84:69:1c:57:84:5b:a7:70:8b:71:b2:0e:98:94:62:6b:
a3:b4:f3:a2:12:33:ff:cc:01:45:bc:6f:2b:07:d8:c7:af:64:
bb:38:e5:82:c2:9d:b7:4e:f1:41:33:dc:9f:80:bd:0f:a2:a3:
30:ad:cd:7a:6c:6b:39:6e:a1:e0:68:17:0b:45:c6:85:17:8e:
52:81:45:37:b3:cd:83:af:ee:eb:3c:f4:7f:f9:17:65:d3:1d:
51:c2:cd:7b:81:36:d5:55:2a:ff:40:29:a9:1c:77:fb:0f:54:
fe:6b:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:58:31 2026 by rpki-client