Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/x62fdnQHTG86kc8QeNrs-Fg3oVE.roa
File: x62fdnQHTG86kc8QeNrs-Fg3oVE.roa (raw, json)
Hash identifier: Q5HR/EB53DA3xDXZeryGNxJzH4ahXtlYt7caGd1WQn4=
Subject key identifier: C7:AD:9F:76:74:07:4C:6F:3A:91:CF:10:78:DA:EC:F8:58:37:A1:51
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A0CFBF1B57F9F82C961EA71BEEE8D2C4E7
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/x62fdnQHTG86kc8QeNrs-Fg3oVE.roa
Signing time: Wed 23 Sep 2026 19:30:03 +0000
ROA not before: Wed 23 Sep 2026 19:30:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213277
IP address blocks: 94.46.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:bf:1b:57:f9:f8:2c:96:1e:a7:1b:ee:e8:d2:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Sep 23 19:30:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7ad9f7674074c6f3a91cf1078daecf85837a151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:00:29:1c:37:79:50:25:4a:cf:19:32:fb:
7f:0d:7d:ce:fb:8a:38:0a:c7:aa:9c:17:d6:d7:71:
43:52:d5:81:c7:ad:a6:f0:17:75:b8:5e:1b:e9:16:
c5:3c:24:51:b4:cb:37:61:8b:68:a7:ef:b7:b5:a7:
37:82:71:55:71:fb:d7:49:5b:f5:2d:dc:72:b5:61:
b2:45:86:1b:bf:d2:1b:bd:6b:1e:52:a4:0f:a0:a9:
3b:11:fb:e1:1b:d3:6f:02:0e:23:ef:91:4c:b0:f2:
11:9c:d8:35:e5:83:4b:dd:9b:d0:0b:8c:4c:e6:fe:
b0:56:b3:85:7b:8a:4d:3e:2a:0c:8f:8b:25:13:3c:
5a:f8:85:e3:d0:eb:25:2e:1a:77:4d:bb:65:10:2d:
4c:a8:16:f3:9b:c9:c5:9d:82:70:34:60:26:00:b2:
64:c7:16:24:7c:d7:9c:71:13:7a:ca:c6:73:0b:2c:
1d:0c:62:a3:e8:a9:59:35:dd:e9:6b:3f:ad:18:af:
61:26:50:cc:be:eb:a5:28:31:85:cf:72:6c:d2:cf:
66:3c:69:0c:07:b9:34:e1:12:78:05:11:28:41:43:
f6:1b:b1:3a:2d:f5:fe:5c:cb:04:be:a6:74:d0:68:
6c:ed:ee:a6:47:9d:4f:21:0e:fb:ff:f0:b0:e6:7b:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:9F:76:74:07:4C:6F:3A:91:CF:10:78:DA:EC:F8:58:37:A1:51
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/x62fdnQHTG86kc8QeNrs-Fg3oVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.24.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e2:3e:98:a6:e6:43:bd:bc:ca:f6:c6:f1:cc:43:b3:a1:5d:
5f:d2:e6:4c:c5:33:97:a3:2e:8f:a1:f4:83:83:8e:58:90:b6:
22:c1:eb:83:e2:f5:6e:2b:c2:9e:8a:cd:a9:6f:a6:07:4d:8d:
86:73:16:a4:5e:c6:49:e7:85:2a:6a:2a:8e:82:6f:9b:96:e7:
63:2a:d7:8f:ad:ef:82:1e:d1:36:b9:b9:1a:a1:d9:5e:d3:38:
48:ec:d2:2b:98:91:0e:af:4a:bf:8f:f3:fa:7e:0b:d1:9b:ac:
67:ff:6f:40:89:d3:ff:22:2d:39:28:18:19:3d:29:70:a0:bf:
41:17:87:7a:b3:52:4d:a9:0f:22:9f:53:26:58:f6:63:74:89:
ea:af:bf:5c:54:12:e9:58:69:9c:ba:2b:82:be:d2:34:db:c5:
da:3a:63:c0:23:a8:2a:55:db:aa:5e:be:90:62:c3:42:78:71:
46:0a:76:80:b5:80:03:fb:ad:16:eb:f8:cc:a8:2b:64:8a:44:
5a:ae:1a:da:14:52:88:f9:57:e6:ff:bf:d7:e3:95:ec:e8:e3:
74:6a:c2:88:2e:77:bf:d0:33:97:ec:91:d7:25:a3:20:f9:93:
f2:8d:54:47:a9:15:05:cf:85:d9:60:95:c2:6a:c3:33:01:d9:
e4:cf:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:20:11 2026 by rpki-client