Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DGazjoROFzAVVZoFNpIq16oLhqA.roa
File: DGazjoROFzAVVZoFNpIq16oLhqA.roa (raw, json)
Hash identifier: J/nDNfCU9O7YuBZABYdEWzzVgUKTUk13naxmZD6FE4s=
Subject key identifier: 0C:66:B3:8E:84:4E:17:30:15:55:9A:05:36:92:2A:D7:AA:0B:86:A0
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019D6720F3C4DDDF466CD068C5DE21C55172
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DGazjoROFzAVVZoFNpIq16oLhqA.roa
Signing time: Tue 07 Apr 2026 08:48:25 +0000
ROA not before: Tue 07 Apr 2026 08:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:20:f3:c4:dd:df:46:6c:d0:68:c5:de:21:c5:51:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 7 08:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c66b38e844e173015559a0536922ad7aa0b86a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:b1:6c:5d:c9:92:a9:58:eb:e0:67:f6:97:
ac:73:67:84:38:48:76:94:15:56:08:e1:a4:1f:b7:
99:86:e9:3e:7b:b9:e9:af:3f:83:96:15:ad:60:1f:
85:f9:d6:a6:20:61:55:f8:f4:64:8e:99:b6:fb:cb:
25:33:c1:22:58:81:77:82:21:a1:2b:74:e9:2a:bb:
fd:0a:4a:f3:29:15:73:b8:76:72:9a:d0:ed:dc:f1:
cd:67:9c:98:c2:ab:8f:65:b7:50:0a:de:77:68:25:
e5:df:15:d9:79:50:2f:44:25:80:cf:3a:ff:aa:46:
a3:13:39:24:7b:55:e5:6f:22:de:48:16:88:b7:d3:
88:c2:72:01:6a:28:fc:25:84:9e:ca:79:85:2f:3b:
1f:a0:52:f8:51:7a:6e:22:05:ef:dd:82:b1:a8:90:
c3:8b:be:e9:a4:53:72:3b:e7:18:5b:e6:d2:28:de:
7a:83:90:e8:94:07:8a:95:07:b0:95:af:41:a3:42:
cc:6a:29:93:99:37:8f:94:68:bc:38:6a:49:15:32:
b9:c0:3f:e2:2e:1d:eb:62:12:dd:af:f4:c8:bb:02:
53:30:eb:1a:12:5d:de:97:17:f4:39:81:06:3a:e6:
5d:9f:f5:15:66:5a:9d:a1:41:a3:0a:67:7b:67:48:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:B3:8E:84:4E:17:30:15:55:9A:05:36:92:2A:D7:AA:0B:86:A0
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DGazjoROFzAVVZoFNpIq16oLhqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4e:63:a3:19:5f:cf:89:9e:9a:28:26:03:0a:4c:14:f2:b2:
b1:2b:50:e7:e9:7f:f1:bc:ca:61:19:03:a3:88:d8:a0:e5:f4:
26:98:02:2b:a6:3a:c6:f5:f9:ab:c6:ff:14:27:48:13:ef:44:
ff:bf:cc:47:dc:12:e0:21:2c:ba:1c:0d:f4:44:53:65:f3:f6:
61:00:36:74:29:c6:53:2f:f1:42:20:e3:79:73:6a:fa:59:0f:
62:48:6b:18:2f:a4:98:4c:68:93:60:6c:dc:c8:c1:6f:72:74:
ce:85:6f:b3:41:8e:7e:0d:c4:13:b7:69:2d:f2:d2:66:f1:65:
db:c0:4d:30:e1:61:de:68:88:b4:da:30:5e:a6:2e:a8:43:2c:
25:db:72:41:26:4d:03:4c:7e:3f:72:26:b3:62:fd:ab:bc:0f:
9d:13:e3:ac:a1:f6:23:65:0b:a2:eb:0c:8e:1d:f7:27:ba:b6:
0a:ed:2d:06:ee:bb:65:2a:d5:f3:97:84:35:fe:1a:cf:dd:e5:
32:6f:01:58:ee:cf:b5:da:61:d4:14:e9:db:34:ec:fc:04:75:
a3:3d:7c:c6:76:cd:8c:de:40:c3:5f:7b:b5:da:05:ea:2e:b5:
9a:bb:81:6c:82:e7:f4:54:13:24:f2:02:40:34:b5:6f:ac:0c:
85:12:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:34 2026 by rpki-client