Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/46tVnxWXBd54uDnUWiQrDEewYbs.roa
File: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (raw, json)
Hash identifier: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=
Subject key identifier: E3:AB:55:9F:15:97:05:DE:78:B8:39:D4:5A:24:2B:0C:47:B0:61:BB
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 019F23684F541D4846BFC63F19C83D7F07B1
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/46tVnxWXBd54uDnUWiQrDEewYbs.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203318
IP address blocks: 45.153.84.0/22 maxlen: 24
2a05:b000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:54:1d:48:46:bf:c6:3f:19:c8:3d:7f:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3ab559f159705de78b839d45a242b0c47b061bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:08:c9:51:aa:cb:c9:eb:05:49:3a:6e:06:
d2:b6:38:20:e9:83:f6:1f:dd:37:68:d6:91:66:90:
b3:47:e4:d7:5c:33:c4:ca:f4:85:d1:86:e1:75:11:
69:18:05:d6:8c:3d:d1:78:cb:87:db:54:1e:a7:cf:
b3:4c:ba:89:d3:7a:11:93:ba:ca:df:af:14:76:21:
d5:8f:bd:95:9d:6c:ae:bb:cd:4d:00:02:16:4a:3b:
56:e3:13:41:70:02:f1:1a:b8:be:27:3c:a0:b0:2f:
80:3b:5e:80:5d:df:0d:2f:42:d7:f9:d0:0b:aa:93:
03:4b:9d:8e:04:74:60:af:71:cd:b8:b2:f2:35:43:
f9:bf:ba:3c:e6:5c:d8:71:3c:6e:f6:2a:e4:cd:8e:
3c:38:0e:cd:d8:5d:ea:45:24:4f:d5:10:41:1a:63:
ce:b4:76:79:f5:84:75:1d:a3:64:d2:c9:b9:05:b5:
6a:46:58:d7:06:b6:57:5a:67:ce:3d:71:af:c6:57:
10:ee:ec:b2:25:aa:2e:6e:76:81:30:d9:9c:5c:bf:
84:c7:b3:de:1e:8e:33:10:da:84:47:cb:3d:20:0b:
bd:72:a5:ec:33:7b:57:ad:a4:aa:7e:e1:f9:9a:90:
a0:00:12:6e:3e:85:55:69:36:6e:53:bd:bf:ce:fe:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:55:9F:15:97:05:DE:78:B8:39:D4:5A:24:2B:0C:47:B0:61:BB
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/46tVnxWXBd54uDnUWiQrDEewYbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.84.0/22
IPv6:
2a05:b000::/32
Signature Algorithm: sha256WithRSAEncryption
69:0f:8d:09:82:ec:05:d5:bd:9a:75:81:1f:3e:64:a6:3a:70:
b7:c4:5e:d2:12:8e:d7:05:ce:a9:2e:29:7d:ce:a3:c4:b8:47:
0f:7d:4d:b0:b2:db:10:ad:c2:a6:5f:c2:37:e8:c2:aa:66:2f:
8b:3c:c1:b3:f9:c9:9c:14:f4:f8:4b:e1:76:c8:e0:1b:46:e3:
ea:9b:79:94:1f:a5:5f:30:51:dc:6e:ec:93:46:05:7b:72:dc:
17:ac:66:13:c7:dc:60:f0:98:e4:80:88:4c:66:c8:04:8f:49:
02:57:ce:9e:d3:3c:f3:32:05:bd:74:c2:e6:10:0e:d8:ab:c4:
aa:b9:c7:aa:fd:94:f3:7f:d1:d2:d5:1e:66:da:a2:06:bc:e3:
3b:ba:55:eb:08:61:1b:ed:79:60:dc:b5:0a:0b:ba:36:bb:23:
d2:15:6c:58:4f:0b:8f:5a:03:4b:79:8a:5c:54:f5:6e:ae:cc:
ef:df:47:55:ee:88:b2:84:52:bf:8b:13:2e:6e:b1:a9:56:ef:
7b:41:7f:dd:fa:ce:ca:a3:0d:0e:1d:f6:2a:05:a1:59:ce:f1:
92:4c:50:6e:75:89:2a:8d:58:0e:c5:09:da:01:12:c1:2d:97:
60:81:97:b9:42:45:b1:57:c2:c0:2a:18:88:e6:46:9f:80:b1:
dc:65:05:dd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaE9UHUhGv8Y/Gcg9fwexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzkxNTQxMzk0ZWQ3ZTc2OWMxZmQ4OTk1NWMxZjI4MThi
NDQ1YjIwHhcNMjYwNzAyMTUxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FiNTU5ZjE1OTcwNWRlNzhiODM5ZDQ1YTI0MmIwYzQ3YjA2MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXAIyVGqy8nrBUk6bgbStjgg6YP2
H903aNaRZpCzR+TXXDPEyvSF0YbhdRFpGAXWjD3ReMuH21Qep8+zTLqJ03oRk7rK
368UdiHVj72VnWyuu81NAAIWSjtW4xNBcALxGri+JzygsC+AO16AXd8NL0LX+dAL
qpMDS52OBHRgr3HNuLLyNUP5v7o85lzYcTxu9irkzY48OA7N2F3qRSRP1RBBGmPO
tHZ59YR1HaNk0sm5BbVqRljXBrZXWmfOPXGvxlcQ7uyyJaoubnaBMNmcXL+Ex7Pe
Ho4zENqER8s9IAu9cqXsM3tXraSqfuH5mpCgABJuPoVVaTZuU72/zv5pZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOOrVZ8VlwXeeLg51FokKwxHsGG7MB8GA1UdIwQY
MBaAFEx5FUE5TtfnacH9iZVcHygYtEWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhrVlFUbE8xLWRwd2YySmxWd2ZLQmkwUmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYt
YjFlMzEzZDc5ODkzLzEvNDZ0Vm54V1hCZDU0dURuVVdpUXJERWV3WWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYtYjFlMzEzZDc5ODkz
LzEvVEhrVlFUbE8xLWRwd2YySmxWd2ZLQmkwUmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZlUMA0E
AgACMAcDBQAqBbAAMA0GCSqGSIb3DQEBCwUAA4IBAQBpD40JguwF1b2adYEfPmSm
OnC3xF7SEo7XBc6pLil9zqPEuEcPfU2wstsQrcKmX8I36MKqZi+LPMGz+cmcFPT4
S+F2yOAbRuPqm3mUH6VfMFHcbuyTRgV7ctwXrGYTx9xg8JjkgIhMZsgEj0kCV86e
0zzzMgW9dMLmEA7Yq8Squceq/ZTzf9HS1R5m2qIGvOM7ulXrCGEb7Xlg3LUKC7o2
uyPSFWxYTwuPWgNLeYpcVPVurszv30dV7oiyhFK/ixMubrGpVu97QX/d+s7Kow0O
HfYqBaFZzvGSTFBudYkqjVgOxQnaARLBLZdggZe5QkWxV8LAKhiI5kafgLHcZQXd
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:04:26 2026 by rpki-client