Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/02nny0XnUPgyNEc13FaEXhxNt78.roa
File: 02nny0XnUPgyNEc13FaEXhxNt78.roa (raw, json)
Hash identifier: PIVVFgffJL+nqQl6vKKb2KqQA+bMxTYxLNjjcTyQqmA=
Subject key identifier: D3:69:E7:CB:45:E7:50:F8:32:34:47:35:DC:56:84:5E:1C:4D:B7:BF
Certificate issuer: /CN=8f3875104153b3cecda72847a171cf1d7407cdfb
Certificate serial: 019F23684D0D948C25A5E313CBD3419701C5
Authority key identifier: 8F:38:75:10:41:53:B3:CE:CD:A7:28:47:A1:71:CF:1D:74:07:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/02nny0XnUPgyNEc13FaEXhxNt78.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44318
IP address blocks: 46.173.96.0/19 maxlen: 24
91.201.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4d:0d:94:8c:25:a5:e3:13:cb:d3:41:97:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3875104153b3cecda72847a171cf1d7407cdfb
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d369e7cb45e750f832344735dc56845e1c4db7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:8a:1b:36:3a:4c:08:2f:94:f3:bf:99:5d:
f0:3f:c1:30:d6:30:83:46:31:fe:8e:e9:33:69:19:
72:b2:84:9b:7c:a4:75:56:a6:97:5a:12:da:5f:00:
a1:e7:01:c6:a7:2e:9b:e9:08:b6:cc:71:fa:ff:ad:
06:98:aa:55:d6:c9:b5:f6:9f:db:52:f0:05:bd:ee:
18:80:4b:b5:9e:5d:34:ac:fc:3a:eb:c6:b4:be:ca:
79:ab:6d:bd:77:4a:18:46:8c:77:57:64:97:32:ea:
71:15:c3:17:22:1c:92:31:a1:bb:69:40:5e:98:69:
36:d7:85:94:91:cf:40:27:0a:00:5e:83:a8:4a:1c:
a1:8b:48:ba:5b:d2:a2:ac:05:97:44:42:ba:8d:52:
d9:2e:47:ce:05:00:1e:5b:6b:5b:6d:2b:fb:eb:9d:
60:1c:b6:71:08:f2:14:0c:95:a3:33:ae:a0:f5:2a:
40:8a:01:a9:a4:f4:ff:6a:3b:ef:c7:d1:68:92:0a:
6d:8f:03:03:9f:09:83:52:38:43:c5:8b:cf:ea:89:
52:77:93:f7:db:ea:93:e4:b9:fb:f4:52:c1:4d:e9:
9b:e8:a1:aa:02:5c:12:17:18:c5:41:a2:a2:ad:a5:
aa:b1:dc:04:ee:ff:17:1e:d6:f5:38:5c:6b:2a:aa:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:E7:CB:45:E7:50:F8:32:34:47:35:DC:56:84:5E:1C:4D:B7:BF
X509v3 Authority Key Identifier:
keyid:8F:38:75:10:41:53:B3:CE:CD:A7:28:47:A1:71:CF:1D:74:07:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzh1EEFTs87NpyhHoXHPHXQHzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/02nny0XnUPgyNEc13FaEXhxNt78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/jzh1EEFTs87NpyhHoXHPHXQHzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.96.0/19
91.201.144.0/22
Signature Algorithm: sha256WithRSAEncryption
97:f8:37:b9:af:f0:f4:9a:57:e5:44:64:a9:c0:07:42:4e:06:
f8:34:a0:2d:f6:05:fd:93:a2:e9:12:17:58:34:e2:70:82:69:
28:b0:35:a9:0a:42:ba:75:21:1e:df:49:61:ec:0c:79:c8:e3:
31:6a:bd:77:83:0a:2b:28:21:c3:12:a7:16:12:a3:70:c8:d5:
b5:e7:af:7d:ad:cf:71:9f:6f:06:c6:52:ff:89:49:4e:fd:c1:
f6:93:a8:4e:c3:48:6f:cb:d3:ae:57:93:7e:a8:5a:c1:90:b4:
f8:fe:7a:e3:90:aa:30:c0:b1:a0:55:1a:33:ca:0b:b8:e3:e3:
f8:c3:57:10:fa:07:9c:ee:ba:8a:a9:ce:fe:15:f8:f8:88:97:
47:fe:bd:af:15:57:c7:7f:d5:eb:e2:d2:ea:8f:98:5f:0c:ce:
c7:eb:85:48:bc:04:98:79:43:d6:c7:03:99:87:a2:d1:f1:b6:
37:5b:69:d8:93:15:25:a4:04:40:94:97:f6:de:d7:18:02:c2:
53:36:27:27:7b:fe:6c:e8:ac:bb:25:d1:e5:81:e9:09:a1:51:
b2:e5:6c:9b:cd:1b:46:b5:94:0a:01:1d:d6:45:ae:4b:8b:f5:
2c:16:4f:8e:f1:57:88:2b:29:af:f6:ea:c8:48:09:b9:0f:fc:
29:1a:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:34 2026 by rpki-client