Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa
File: 9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa (raw, json)
Hash identifier: L9NVxLU8O9i95hEu9k7Po4V4b+iJv7NAW4494Hk5YUw=
Subject key identifier: F5:4F:54:66:C2:40:2E:83:B9:B9:81:5B:AF:CC:BF:64:41:BA:47:4A
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019F84337BF4F2FFED6FF5BEC55D51A06A4F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa
Signing time: Tue 21 Jul 2026 10:23:14 +0000
ROA not before: Tue 21 Jul 2026 10:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.47.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:33:7b:f4:f2:ff:ed:6f:f5:be:c5:5d:51:a0:6a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 21 10:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54f5466c2402e83b9b9815bafccbf6441ba474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:90:59:8b:6a:d9:87:f9:a1:40:67:36:7f:
3c:57:d8:bb:b6:e8:1e:e2:a3:ee:ae:3e:50:33:1d:
cc:d2:c3:6c:8e:ab:da:39:04:3c:54:0f:a6:53:70:
d5:3a:b1:da:fe:af:92:60:17:a1:00:24:4b:0d:56:
91:c4:61:44:98:5c:46:68:9d:6d:18:9f:82:a3:41:
9d:74:3c:c7:26:f4:42:4a:f0:76:89:a7:e1:33:71:
d6:22:20:ae:1c:7e:81:85:4f:e4:cf:8b:d0:ed:ab:
50:bf:1a:0f:28:59:9d:8d:5e:76:7d:fa:f9:0b:5e:
c1:87:2c:e5:f1:99:e9:54:84:c0:c8:78:01:e3:91:
2a:c5:12:05:e7:3c:f2:82:a5:21:1d:25:9e:a5:98:
85:78:de:56:ca:34:90:bb:9e:ea:26:17:6e:93:37:
63:0e:db:32:04:52:1a:cd:eb:00:75:09:e8:29:6d:
98:7d:c1:95:37:b8:ca:51:d7:f3:db:e0:c6:31:b0:
86:ad:c1:6c:12:fa:2a:e0:4d:98:bf:96:8b:1f:23:
35:63:cc:fd:7d:fe:f4:96:47:b4:b7:79:68:c7:7a:
35:65:cb:73:bc:11:2d:db:46:28:e0:ba:6e:da:8e:
59:c5:dc:f5:f2:5f:3b:eb:d8:c7:f6:1c:87:3b:e9:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:54:66:C2:40:2E:83:B9:B9:81:5B:AF:CC:BF:64:41:BA:47:4A
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9U9UZsJALoO5uYFbr8y_ZEG6R0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.42.0/23
46.34.47.0/24
46.34.49.0/24
46.34.55.0/24
46.34.58.0/24
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:34:c3:0d:81:79:61:97:ac:c4:9b:cf:90:de:e2:ee:05:03:
b4:4d:ce:3d:1c:8a:a7:ff:79:7d:68:b7:8a:8b:fc:b8:a6:92:
0d:a2:4e:4f:d4:e0:c6:ce:61:aa:ad:42:32:fe:d2:2c:41:bc:
1c:0a:78:70:da:d4:6b:59:ba:70:2e:8b:ad:5b:44:f9:9b:a9:
54:98:7b:a4:ed:d1:33:f5:46:9a:9b:52:fe:d2:3b:d6:fa:ec:
c5:62:06:a8:2b:ba:e3:b8:91:81:e9:3d:71:fd:e8:e9:fa:93:
4b:e7:6c:42:36:86:0b:2f:82:8f:67:52:64:a5:c9:22:c9:9c:
4a:b1:b4:4e:9f:3c:4e:42:68:7b:1b:cd:34:0c:91:0d:67:10:
fc:d4:26:6b:a8:03:60:9d:bc:d6:37:9a:95:ae:06:56:14:07:
ca:c6:21:59:d7:47:a9:d0:6b:f6:16:cc:75:83:dd:aa:e8:73:
76:28:6b:9a:d7:6c:df:09:8a:f4:66:62:df:76:ff:19:8d:5f:
2e:f0:66:a3:eb:a9:89:04:93:71:c2:a0:60:23:77:96:72:83:
54:03:c7:a2:8c:0d:d7:7e:a0:7a:68:78:6a:8b:12:35:9b:f2:
4f:72:65:0e:bc:f8:a6:29:35:ca:37:5f:8a:20:27:99:81:05:
69:e7:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:09 2026 by rpki-client