Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/wkMyARVAEK6ngoKTk8EgMpnUcVk.roa
File: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (raw, json)
Hash identifier: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=
Subject key identifier: C2:43:32:01:15:40:10:AE:A7:82:82:93:93:C1:20:32:99:D4:71:59
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 019F3A8CA5045611152585B342288C9C0205
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/wkMyARVAEK6ngoKTk8EgMpnUcVk.roa
Signing time: Tue 07 Jul 2026 03:08:43 +0000
ROA not before: Tue 07 Jul 2026 03:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219291
IP address blocks: 46.166.232.0/23 maxlen: 23
46.166.232.0/24 maxlen: 24
46.166.233.0/24 maxlen: 24
46.166.234.0/23 maxlen: 23
46.166.234.0/24 maxlen: 24
46.166.235.0/24 maxlen: 24
46.166.236.0/23 maxlen: 23
46.166.236.0/24 maxlen: 24
46.166.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:8c:a5:04:56:11:15:25:85:b3:42:28:8c:9c:02:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jul 7 03:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2433201154010aea782829393c1203299d47159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:89:67:07:22:84:1f:75:9c:cc:97:28:b0:
91:d7:b5:2c:91:9d:91:ff:e5:8f:88:52:cb:ec:89:
6c:46:6f:ba:e5:85:3b:eb:31:74:df:f5:99:99:f6:
54:ce:c6:59:9e:a5:04:16:da:4c:a1:42:c5:ba:3e:
4a:28:34:69:62:4a:16:3b:c3:6f:e6:78:a1:0e:20:
e6:b5:44:39:f6:8e:22:79:36:4b:e5:77:23:44:97:
da:8c:00:e2:e2:b2:47:19:fb:35:c3:a2:40:4b:6f:
fb:90:94:b5:47:67:a5:20:ba:76:c3:36:54:90:ad:
14:bf:1a:f2:56:46:09:3d:39:c7:a4:97:7f:85:c0:
c3:0e:27:96:4b:28:d3:24:e6:07:62:58:b9:73:f9:
b5:45:e5:89:90:7c:54:df:cc:37:0d:e5:38:8e:01:
42:e8:9e:eb:5c:8d:14:ee:e9:e6:46:b1:8a:97:e4:
87:31:b3:4c:6f:94:a6:02:61:c6:ec:b0:70:2c:da:
c9:69:68:78:d1:d2:25:71:8e:e5:2e:a7:65:6f:b8:
c2:f7:c4:36:0d:25:50:8f:3e:76:82:eb:b1:77:79:
0b:0d:b6:43:c8:45:51:ca:32:a5:f7:d5:44:e1:61:
51:0b:f9:8b:83:fe:34:77:59:2a:00:1d:c8:cc:19:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:32:01:15:40:10:AE:A7:82:82:93:93:C1:20:32:99:D4:71:59
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/wkMyARVAEK6ngoKTk8EgMpnUcVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.166.232.0-46.166.237.255
Signature Algorithm: sha256WithRSAEncryption
4e:63:fd:d9:98:6b:01:6f:0f:db:1e:37:d0:87:ed:af:91:2b:
12:db:f1:d7:21:cd:02:40:ef:18:bf:d2:4c:f1:36:3d:ba:51:
c6:0b:a7:50:e7:df:18:f5:de:20:96:d5:03:1b:c6:9b:e5:12:
b2:36:de:33:2e:13:45:ad:5d:0a:32:b9:55:e7:c3:ef:ed:70:
d1:89:6b:9c:52:66:ae:93:bf:fd:56:20:58:10:3a:3b:95:6b:
f3:16:75:f6:7e:35:c1:5f:e6:3d:9b:27:7b:80:bf:7b:3c:9b:
64:14:26:0a:47:8f:5c:a7:f2:bd:79:95:0e:f3:44:a7:fe:67:
09:35:8f:20:82:22:11:f8:f8:0b:c8:fa:5d:82:4c:de:2d:1b:
7b:40:6e:1e:0d:0e:ca:42:3e:6e:0c:3b:ad:d5:f6:f1:2a:ce:
31:0a:80:e1:ec:30:b8:39:d1:2e:e8:8c:af:27:b1:28:1e:f2:
c4:4a:22:cc:05:3c:cc:a6:07:5f:fe:c2:1b:7a:54:8d:7f:61:
f1:05:66:3d:7e:71:b9:31:65:28:50:d7:10:c2:c5:e9:5f:8e:
41:88:ac:d8:c9:f1:28:d2:1a:4a:37:46:74:11:d1:65:7f:32:
50:d9:14:24:c9:ea:6b:15:de:a9:6b:30:01:32:1f:ea:4e:7a:
b6:ee:e3:c6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ86jKUEVhEVJYWzQiiMnAIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjYwNzA3MDMwODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjQzMzIwMTE1NDAxMGFlYTc4MjgyOTM5M2MxMjAzMjk5ZDQ3MTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7WJZwcihB91nMyXKLCR17UskZ2R
/+WPiFLL7IlsRm+65YU76zF03/WZmfZUzsZZnqUEFtpMoULFuj5KKDRpYkoWO8Nv
5nihDiDmtUQ59o4ieTZL5XcjRJfajADi4rJHGfs1w6JAS2/7kJS1R2elILp2wzZU
kK0UvxryVkYJPTnHpJd/hcDDDieWSyjTJOYHYli5c/m1ReWJkHxU38w3DeU4jgFC
6J7rXI0U7unmRrGKl+SHMbNMb5SmAmHG7LBwLNrJaWh40dIlcY7lLqdlb7jC98Q2
DSVQjz52guuxd3kLDbZDyEVRyjKl99VE4WFRC/mLg/40d1kqAB3IzBmGPwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMJDMgEVQBCup4KCk5PBIDKZ1HFZMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvd2tNeUFSVkFFSzZuZ29LVGs4RWdNcG5VY1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMupugD
BAEupuwwDQYJKoZIhvcNAQELBQADggEBAE5j/dmYawFvD9seN9CH7a+RKxLb8dch
zQJA7xi/0kzxNj26UcYLp1Dn3xj13iCW1QMbxpvlErI23jMuE0WtXQoyuVXnw+/t
cNGJa5xSZq6Tv/1WIFgQOjuVa/MWdfZ+NcFf5j2bJ3uAv3s8m2QUJgpHj1yn8r15
lQ7zRKf+Zwk1jyCCIhH4+AvI+l2CTN4tG3tAbh4NDspCPm4MO63V9vEqzjEKgOHs
MLg50S7ojK8nsSge8sRKIswFPMymB1/+wht6VI1/YfEFZj1+cbkxZShQ1xDCxelf
jkGIrNjJ8SjSGko3RnQR0WV/MlDZFCTJ6msV3qlrMAEyH+pOerbu48Y=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:42 2026 by rpki-client