Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa
File: l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa (raw, json)
Hash identifier: 8p3Ow1BC3IyEN6V4cKS/NtLbfcoj764XTp5t/qdy/ck=
Subject key identifier: 97:62:20:66:0D:1D:D3:F2:4A:37:57:B0:CD:57:F1:50:95:99:BF:39
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A13046A77BD298F8030FF884F7A832B2D9
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa
Signing time: Mon 12 Oct 2026 13:21:39 +0000
ROA not before: Mon 12 Oct 2026 13:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49020
IP address blocks: 46.20.99.0/24 maxlen: 24
46.20.100.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
46.20.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:46:a7:7b:d2:98:f8:03:0f:f8:84:f7:a8:32:b2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 12 13:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976220660d1dd3f24a3757b0cd57f1509599bf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:d4:2e:4d:a0:81:ed:c1:e9:e6:22:7f:48:
b8:cb:c2:50:1f:08:92:f1:84:32:55:77:c0:d6:77:
50:3b:dd:37:50:8f:e8:01:83:53:dc:7a:b4:3d:45:
78:8e:5c:2a:77:7f:02:c7:dc:a1:77:3a:89:41:df:
72:ad:44:0c:25:49:52:1f:c8:42:2f:da:85:61:3a:
31:a2:85:68:f0:1b:cd:e6:7d:19:8d:f1:07:14:f5:
90:c2:e0:cc:38:33:88:ec:78:92:0f:52:b1:2a:cd:
de:e1:5b:49:69:03:07:73:b8:43:32:8b:71:99:c5:
96:35:9f:a9:0b:dd:74:ab:7b:0c:08:93:57:4c:be:
a4:55:57:35:a3:51:71:f1:e3:f2:3c:b3:b8:c4:44:
e0:be:d2:63:5c:51:f7:0f:26:58:34:0f:7f:ee:d6:
14:57:67:b8:9d:19:20:66:88:a6:f0:8e:20:0f:f4:
12:17:38:08:19:37:4b:82:46:bd:e3:bc:0c:19:f9:
58:be:0f:ed:61:a8:a7:b2:21:55:28:12:e7:8f:d7:
eb:84:04:51:ca:b4:66:ad:54:d0:4c:bf:58:1f:75:
dc:44:d9:72:16:ad:a7:98:70:d4:da:7d:21:87:8b:
73:97:d2:b7:31:cc:17:1b:3f:f7:67:7d:8d:b8:87:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:20:66:0D:1D:D3:F2:4A:37:57:B0:CD:57:F1:50:95:99:BF:39
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/l2IgZg0d0_JKN1ewzVfxUJWZvzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0-46.20.100.255
46.20.103.0/24
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
35:34:a5:bf:75:31:9b:2d:5c:32:06:cb:da:4c:00:6f:57:d4:
f4:af:9c:28:0b:ec:74:53:f6:5e:67:46:79:6f:3e:5f:ea:7c:
e2:b4:bc:6f:80:eb:d5:61:45:8f:02:7b:ed:a2:47:f6:36:cd:
f4:5e:58:ee:95:b9:0f:ff:c8:c7:6d:6c:f7:18:e9:ef:e8:26:
2f:4f:96:97:a1:48:68:6d:71:b3:6f:51:44:ef:be:de:bd:4c:
1b:7d:de:f9:71:dd:2a:77:87:7c:17:3b:db:22:1c:f7:e1:79:
c5:9e:d7:ea:62:ed:5d:a5:4e:52:ed:dd:87:56:da:a6:b6:51:
3c:0e:ad:58:48:47:e6:58:47:8e:36:49:bf:13:74:80:4e:a9:
43:d0:9c:89:99:e5:7e:5a:5f:b6:f3:50:72:34:a5:5a:82:30:
37:96:d8:55:6c:bb:10:6d:16:37:84:c2:0e:91:46:b1:f0:f0:
d3:6d:af:d0:c5:63:db:ac:80:f0:2d:9a:01:07:55:31:3c:dd:
7f:30:0d:10:db:d6:0b:1b:9d:12:e7:23:d0:1b:d5:f4:a7:d7:
41:d5:02:cd:00:28:8f:86:4e:bb:2d:1c:4c:56:f1:e3:c8:d1:
67:92:fa:dc:6c:dd:e1:89:b7:a8:ba:09:4b:f2:e7:88:91:19:
98:c9:c6:38
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaEwRqd70pj4Aw/4hPeoMrLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYxMDEyMTMyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzYyMjA2NjBkMWRkM2YyNGEzNzU3YjBjZDU3ZjE1MDk1OTliZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTULk2gge3B6eYif0i4y8JQHwiS
8YQyVXfA1ndQO903UI/oAYNT3Hq0PUV4jlwqd38Cx9yhdzqJQd9yrUQMJUlSH8hC
L9qFYToxooVo8BvN5n0ZjfEHFPWQwuDMODOI7HiSD1KxKs3e4VtJaQMHc7hDMotx
mcWWNZ+pC910q3sMCJNXTL6kVVc1o1Fx8ePyPLO4xETgvtJjXFH3DyZYNA9/7tYU
V2e4nRkgZoim8I4gD/QSFzgIGTdLgka947wMGflYvg/tYainsiFVKBLnj9frhARR
yrRmrVTQTL9YH3XcRNlyFq2nmHDU2n0hh4tzl9K3McwXGz/3Z32NuIeVOQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJdiIGYNHdPySjdXsM1X8VCVmb85MB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvbDJJZ1pnMGQwX0pLTjFld3pWZnhVSldadnprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAuFGMD
BAAuFGQDBAAuFGcDBAAuFGswDQYJKoZIhvcNAQELBQADggEBADU0pb91MZstXDIG
y9pMAG9X1PSvnCgL7HRT9l5nRnlvPl/qfOK0vG+A69VhRY8Ce+2iR/Y2zfReWO6V
uQ//yMdtbPcY6e/oJi9PlpehSGhtcbNvUUTvvt69TBt93vlx3Sp3h3wXO9siHPfh
ecWe1+pi7V2lTlLt3YdW2qa2UTwOrVhIR+ZYR442Sb8TdIBOqUPQnImZ5X5aX7bz
UHI0pVqCMDeW2FVsuxBtFjeEwg6RRrHw8NNtr9DFY9usgPAtmgEHVTE83X8wDRDb
1gsbnRLnI9Ab1fSn10HVAs0AKI+GTrstHExW8ePI0WeS+txs3eGJt6i6CUvy54iR
GZjJxjg=
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:50:54 2026 by rpki-client