Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa
File: gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa (raw, json)
Hash identifier: zRXOYl9PkTzrkMP8UCwOsXf5eAi2L1/FabDUe5aeP6I=
Subject key identifier: 82:2E:97:CA:D9:FD:22:ED:06:1E:84:B6:6F:3F:3E:0F:6F:F1:B9:8C
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019C240E1C8262500D80A7CF8474694CBCFE
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa
Signing time: Tue 03 Feb 2026 15:10:30 +0000
ROA not before: Tue 03 Feb 2026 15:10:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215056
IP address blocks: 46.32.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:0e:1c:82:62:50:0d:80:a7:cf:84:74:69:4c:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Feb 3 15:10:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=822e97cad9fd22ed061e84b66f3f3e0f6ff1b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:5c:ad:29:3b:57:8c:5e:f0:97:4e:07:9a:
26:1e:13:21:45:a1:05:a2:39:3d:6c:2d:aa:aa:f7:
7a:ca:f1:fc:79:64:e7:fd:51:af:2f:20:3a:28:de:
b0:ff:7e:64:04:8e:4e:08:8f:9a:62:0d:ec:f0:90:
d8:10:3a:24:92:ac:a1:08:e2:28:a4:fe:27:fe:70:
d4:41:7d:0c:3a:bf:12:b9:de:3b:74:23:19:34:a8:
47:c7:50:2f:fa:25:3f:45:1d:ea:a3:2d:3f:1a:ce:
f3:46:da:5e:f1:d1:c1:4e:0b:15:d6:9e:f1:45:8c:
31:6b:71:d7:78:e1:6d:41:27:2b:47:67:41:2e:33:
4b:10:1e:57:da:1d:cd:6d:ca:fc:b1:15:78:e5:1d:
e7:5f:9b:56:b6:5c:4e:ef:fe:d0:59:bc:25:50:10:
d1:9c:a0:79:35:95:bc:0d:1d:5f:b3:d8:61:3a:8e:
f8:10:84:22:81:1c:d0:01:8b:da:20:40:be:a0:eb:
64:3d:f3:c3:07:e5:cb:1a:b3:54:4b:70:64:69:cd:
ce:c5:5a:6a:9b:32:04:c3:d9:7f:40:e9:a4:c4:14:
bc:2f:57:c2:f2:33:9c:26:6d:98:d7:4f:65:d6:0a:
30:2e:f4:05:67:f5:1e:8e:59:22:84:b3:50:e0:83:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:97:CA:D9:FD:22:ED:06:1E:84:B6:6F:3F:3E:0F:6F:F1:B9:8C
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/gi6Xytn9Iu0GHoS2bz8-D2_xuYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.173.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0f:82:72:8f:8c:0d:3b:73:af:31:8b:5e:b5:c2:a8:7d:15:
06:df:9a:c8:74:11:0a:78:92:09:56:fd:02:33:97:a1:d9:05:
cd:c9:39:bc:ae:41:e5:87:64:e3:1b:68:40:d9:d5:cc:23:43:
51:5d:ba:c9:08:7b:72:04:0a:5b:c6:9c:7f:00:bc:fe:e6:65:
c8:0b:0b:d4:6c:db:ae:d0:f8:0e:a5:f3:46:76:b5:90:b8:71:
13:03:0c:ab:9d:dd:43:35:32:65:ba:70:4f:55:1a:ff:85:c7:
76:a0:59:91:ae:f8:0a:5b:d3:4b:53:63:af:aa:ce:23:93:83:
4b:e8:2e:a0:e8:21:56:6f:59:e6:09:44:62:b1:0c:1f:38:d2:
d0:8c:a4:81:b7:40:4d:bf:aa:bd:c4:45:80:23:22:b4:f4:79:
07:4f:cc:9c:d4:6d:12:51:60:9b:8b:2c:ec:03:37:35:6c:9c:
5c:0c:df:ae:93:15:34:09:32:22:43:35:fa:c9:38:c5:ef:ef:
bf:9d:03:99:99:eb:3d:7a:8a:00:f6:7c:db:e4:1b:f0:ef:29:
14:95:2e:4f:fa:e3:f1:28:33:c7:6d:d4:ea:f8:79:13:4f:d1:
c5:f7:cd:34:6e:62:b3:0a:45:93:c8:fb:0b:73:d5:6e:30:ed:
c3:29:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:11:07 2026 by rpki-client