Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/glL5NOj9LglCBQLgiXOEWS3h5uQ.roa
File: glL5NOj9LglCBQLgiXOEWS3h5uQ.roa (raw, json)
Hash identifier: 5gpGcLqc9DK/nM3/17B5Zd081yTv3H79+EWvMTEskhQ=
Subject key identifier: 82:52:F9:34:E8:FD:2E:09:42:05:02:E0:89:73:84:59:2D:E1:E6:E4
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A1A0CB243B6AC398FB57D6948764C01599
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/glL5NOj9LglCBQLgiXOEWS3h5uQ.roa
Signing time: Tue 03 Nov 2026 09:43:50 +0000
ROA not before: Tue 03 Nov 2026 09:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214687
IP address blocks: 46.243.136.0/24 maxlen: 24
46.243.137.0/24 maxlen: 24
46.243.138.0/23 maxlen: 23
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:cb:24:3b:6a:c3:98:fb:57:d6:94:87:64:c0:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Nov 3 09:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8252f934e8fd2e09420502e0897384592de1e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:30:79:e0:34:ad:2f:31:56:54:6c:f6:95:
1e:ef:bf:bc:51:2e:43:d5:57:0f:47:bc:b2:be:99:
33:ff:ec:28:9b:04:79:56:e8:69:52:f0:f6:c4:65:
00:66:7e:b4:fd:e5:cc:1c:b6:39:b9:46:9d:0c:e2:
82:fc:d2:35:65:90:b2:f1:34:08:f2:0e:e7:6e:ba:
af:b9:f8:fb:56:06:78:41:97:6b:ad:6c:ba:42:37:
d3:e5:a8:6d:77:c0:27:27:9e:df:8b:46:47:3d:c7:
df:e4:a7:d3:04:c6:b8:e6:a2:1e:12:84:86:d6:85:
33:db:ec:cc:67:07:52:47:ea:68:96:50:c0:11:04:
67:03:57:08:03:37:c8:97:98:d9:85:75:47:66:7f:
37:3e:a6:ac:09:12:ec:9a:1a:55:d6:90:35:b4:7b:
ab:9e:1b:61:5f:3d:44:41:6a:8c:16:ea:06:11:e7:
45:08:e1:56:b3:f8:5a:f5:40:f1:d7:56:52:7e:25:
fd:25:03:32:f3:3d:37:91:27:a0:fd:a4:46:79:b8:
b9:dc:3c:67:49:79:96:a0:6d:a6:a3:7e:51:3f:bc:
3c:7b:1b:51:48:3d:02:5b:b6:86:9f:ce:2b:92:2d:
d5:4a:ad:a0:5a:ab:53:ce:24:1f:df:c5:1b:8d:44:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:F9:34:E8:FD:2E:09:42:05:02:E0:89:73:84:59:2D:E1:E6:E4
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/glL5NOj9LglCBQLgiXOEWS3h5uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:bb:f9:94:e1:20:18:14:d5:fa:ce:72:d0:bc:66:b2:48:ff:
82:0f:24:b7:12:53:7c:2a:26:56:30:83:f4:59:11:ff:45:8f:
32:b8:90:90:c2:0e:2c:1b:20:40:9e:54:cc:fc:2d:0f:c3:f6:
f5:3f:d8:fc:da:6f:c0:8e:db:b2:50:36:ca:ee:2c:79:d5:dc:
ad:7d:96:7e:bd:af:51:74:82:96:96:42:93:88:7f:3c:11:df:
ca:bb:c8:9f:1a:8a:32:25:80:35:ec:10:e1:58:ce:3b:9b:57:
02:2b:5c:6a:77:1f:74:e9:79:65:3d:45:58:ba:de:34:b2:24:
f2:08:14:15:db:af:23:9b:1a:f4:36:64:43:71:ac:08:ec:ae:
c9:dd:bb:77:ad:83:7d:2e:7c:17:84:b9:f2:2d:ec:b8:40:31:
12:fe:d7:52:d6:f3:fe:37:52:fe:4f:56:c7:12:1e:6a:b8:f2:
c3:f8:c7:9e:1e:4c:fc:f4:3c:61:2f:85:c5:92:17:b0:2e:6e:
f3:c5:94:85:c5:3b:a6:57:6f:67:26:99:8a:34:6b:3a:f9:ea:
b5:b2:75:86:68:fc:b8:30:d6:74:83:a3:22:0c:67:ea:e7:94:
32:ba:83:e3:50:60:1d:b8:d5:d3:ac:96:80:13:bc:1c:b4:f1:
00:55:fd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:46 2026 by rpki-client