Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa
File: 4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa (raw, json)
Hash identifier: cyoCTuFn1vjpLgXxKEUMlZpj5yZCfKc5JRVXpWpJdPM=
Subject key identifier: E0:9A:28:4F:57:6D:68:9F:8E:8F:D6:71:4F:28:B6:5A:71:29:28:C1
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 019C99DB8726F751E80F118852DD237CD872
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa
Signing time: Thu 26 Feb 2026 12:10:26 +0000
ROA not before: Thu 26 Feb 2026 12:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39337
IP address blocks: 46.235.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:db:87:26:f7:51:e8:0f:11:88:52:dd:23:7c:d8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Feb 26 12:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e09a284f576d689f8e8fd6714f28b65a712928c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:d8:7d:55:05:7f:f9:e5:77:41:76:5d:b4:
fc:96:f5:83:08:11:2f:fb:26:48:d4:7c:b5:f3:dd:
59:ae:12:6a:60:38:ee:98:b2:cc:7b:05:2d:2c:44:
27:79:8c:29:5c:7a:12:39:cb:da:dd:f9:3a:27:62:
20:c5:44:9f:b6:60:72:ca:51:bf:5f:c7:e7:b5:45:
f1:4a:63:22:a1:a7:9b:eb:6d:22:7e:11:17:dc:4a:
39:6a:11:5b:ec:09:d2:32:38:3d:e7:bc:e2:4c:50:
e8:e4:87:e8:cd:62:e4:24:be:f3:09:5e:c4:c9:95:
06:5f:ca:2a:d9:69:88:a3:73:a0:df:d3:86:d2:a1:
13:40:0c:f8:05:c0:35:2f:bc:9c:1b:52:27:6c:32:
04:29:7a:e6:58:46:4b:e2:6b:d6:d3:d0:48:44:4f:
6c:cb:76:c6:8c:08:be:7b:5f:f2:02:95:5f:f4:99:
e5:18:4b:38:36:7c:47:2e:ad:16:ea:60:50:41:56:
35:e1:45:2f:57:94:2e:0e:05:c5:b0:3e:66:c0:3c:
25:e1:c1:45:c2:66:7b:83:a0:e5:32:89:a1:cf:31:
b8:7c:49:38:ff:4a:bf:ea:61:3e:8e:43:47:a8:49:
34:e2:ae:3d:60:90:8d:be:91:7e:35:61:8c:fd:22:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:28:4F:57:6D:68:9F:8E:8F:D6:71:4F:28:B6:5A:71:29:28:C1
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/4JooT1dtaJ-Oj9ZxTyi2WnEpKME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:fa:eb:57:57:6c:a3:e9:78:99:d2:97:65:a1:59:f2:5d:ca:
54:2f:08:80:f0:35:73:ba:43:4b:b4:18:4c:06:a7:34:2c:77:
9c:31:6e:47:f2:f8:1e:ba:10:28:a5:41:70:f1:ec:06:91:25:
8d:fe:80:4c:ac:6c:d2:83:74:76:d3:d1:da:35:de:9d:39:54:
2a:b2:11:ed:00:3a:eb:9c:a3:18:c4:e1:9c:91:89:20:09:64:
a1:6e:d0:13:52:d7:d4:ca:14:02:4a:6b:8b:5a:89:fe:1e:3d:
c7:a8:e9:5c:de:93:f7:fe:50:6e:49:d2:65:6e:2c:c9:c4:0b:
d5:1f:9a:16:2b:78:3b:af:dc:54:3d:42:0d:8a:4c:b5:56:ec:
48:13:58:91:a5:87:6c:ed:c3:41:c9:c6:80:24:ed:ba:29:c7:
5d:6a:f3:f3:6b:b6:7f:cf:18:0c:82:35:f0:67:53:18:44:64:
4d:5d:7a:10:df:e2:ad:0d:5e:ea:ba:88:27:6a:ce:c8:1e:22:
0d:7d:d1:4e:64:37:b3:de:fd:e7:13:70:20:dc:83:51:b6:07:
bd:8a:56:24:b1:41:87:ec:19:fc:54:b0:18:32:cf:a1:52:59:
16:a2:7d:1a:36:8e:4d:94:72:7c:5a:d0:4e:ff:aa:94:36:49:
ff:f9:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:56 2026 by rpki-client