Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IbohXdTLOI5jMkwRsX5bUmXSpAc.roa
File: IbohXdTLOI5jMkwRsX5bUmXSpAc.roa (raw, json)
Hash identifier: UBaFG47zbBGMBn4xKaby4a1MFrL+PkMMbb8aT7/JD8s=
Subject key identifier: 21:BA:21:5D:D4:CB:38:8E:63:32:4C:11:B1:7E:5B:52:65:D2:A4:07
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019EBB055F7EAC63082FE3BBE20B22FE576E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IbohXdTLOI5jMkwRsX5bUmXSpAc.roa
Signing time: Fri 12 Jun 2026 08:49:11 +0000
ROA not before: Fri 12 Jun 2026 08:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200658
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:05:5f:7e:ac:63:08:2f:e3:bb:e2:0b:22:fe:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 12 08:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21ba215dd4cb388e63324c11b17e5b5265d2a407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:17:05:84:08:91:a4:2e:15:44:a4:68:a9:
0e:70:1b:ed:39:bf:06:51:af:75:53:93:f9:b3:97:
cc:16:10:2d:bd:29:39:9e:07:84:48:2a:82:ff:50:
8d:bb:05:21:37:87:c2:0d:cb:23:3a:fb:ce:4a:f2:
62:b7:ae:26:6c:09:70:ef:40:7a:57:64:f8:9f:95:
62:ac:fe:82:70:30:49:11:45:be:8e:7f:b5:ab:16:
a2:9d:7f:53:7e:5e:23:a3:1e:c4:6e:dc:dc:5d:1e:
03:3b:fc:03:21:3a:15:44:63:94:ee:71:01:9d:ca:
20:d2:8b:2d:c9:e7:37:d7:8f:4f:b1:52:bf:54:89:
48:be:9d:51:97:bb:88:ff:e2:58:6f:08:46:3f:96:
7e:8a:d4:80:db:59:5d:64:56:9f:35:c8:5b:a2:dd:
ee:02:72:95:0c:7e:b9:24:b2:7d:48:34:31:39:ec:
0b:30:23:1b:8d:a9:41:b0:f9:63:01:29:b3:c7:13:
e1:9e:6d:cf:b8:57:3a:6f:34:22:b2:17:a7:01:b4:
e3:8d:56:74:55:5a:45:e5:f9:60:84:02:32:d0:3d:
9c:5f:05:76:cd:76:ff:bb:8e:fb:ba:7c:2b:55:99:
d8:40:85:6b:02:9d:98:04:31:72:be:a0:9e:fc:fe:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:21:5D:D4:CB:38:8E:63:32:4C:11:B1:7E:5B:52:65:D2:A4:07
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/IbohXdTLOI5jMkwRsX5bUmXSpAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:16:ef:ec:6c:31:6d:31:80:65:22:60:fc:1c:7a:db:b2:3b:
91:8e:9b:32:0b:ac:31:8c:c1:8d:c1:b2:98:75:53:4c:df:97:
df:25:c2:55:35:68:df:99:2a:ab:53:80:1f:2b:26:82:d3:a6:
05:db:c6:af:69:2c:6f:eb:9d:36:26:23:54:4b:b9:5f:e6:62:
a9:62:33:b4:96:8d:63:fd:14:68:cb:87:37:08:c9:1a:e6:4c:
2e:82:51:33:e9:83:89:d1:0c:ac:c1:c3:36:fc:16:c1:61:56:
0c:f6:42:16:37:97:9e:5a:21:03:ba:02:8b:87:48:81:34:40:
bc:29:3b:b6:4a:fc:93:4f:75:24:2d:9d:39:fa:f8:0d:ac:07:
90:67:05:f9:dd:3e:89:b2:b6:66:b9:1d:82:c0:f4:6d:f5:be:
50:9b:da:bc:2e:94:4a:e9:27:f0:64:7e:2f:e2:7b:15:e7:36:
4a:11:78:1d:19:b7:08:1c:b1:48:91:6d:24:fa:90:b3:c1:54:
1f:d0:60:e2:d2:57:48:e8:2a:82:08:fe:ca:61:79:e4:71:7d:
cd:32:f8:25:05:f7:4d:7d:a2:10:21:d3:f6:94:12:57:bc:51:
a0:81:25:2c:ff:8c:03:b1:6e:0b:24:b4:d7:05:f4:8d:23:24:
8f:0b:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:44 2026 by rpki-client