Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ORNW44m8RdcNVpFZG8hsgjTX22A.roa
File: ORNW44m8RdcNVpFZG8hsgjTX22A.roa (raw, json)
Hash identifier: 0r/AfH49OKXcT0RgTMF9LPCSRih9Kgd8UD9KRbj5CU8=
Subject key identifier: 39:13:56:E3:89:BC:45:D7:0D:56:91:59:1B:C8:6C:82:34:D7:DB:60
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019E020007A67C868A65682FA7CCE82E9DEE
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ORNW44m8RdcNVpFZG8hsgjTX22A.roa
Signing time: Thu 07 May 2026 10:33:36 +0000
ROA not before: Thu 07 May 2026 10:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:00:07:a6:7c:86:8a:65:68:2f:a7:cc:e8:2e:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: May 7 10:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391356e389bc45d70d5691591bc86c8234d7db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:95:94:fa:6d:ae:42:36:97:dd:1e:1a:84:
80:03:39:d4:20:ab:8c:b2:2b:64:61:10:a5:0c:18:
a4:56:7b:fb:2e:24:e1:5a:b4:57:cc:fe:f7:95:37:
81:00:ab:88:d4:32:86:f9:c9:2f:3c:c9:89:81:c2:
54:b9:07:e7:ea:df:d4:ca:06:e8:8f:b8:b0:e5:5a:
a0:29:05:21:72:83:48:52:91:52:47:a9:1f:f8:e1:
e4:46:6a:48:88:03:a5:e8:50:d4:5f:bc:82:20:1f:
23:99:59:1c:b2:34:b1:7b:b8:5c:0e:fa:88:30:e9:
ee:94:d2:5e:b4:1f:1e:9d:46:c9:cd:3d:28:ec:6f:
37:7a:af:aa:0b:c8:f3:a4:34:62:8a:b2:f3:57:3b:
fa:3b:8c:b4:3e:2f:21:a4:65:fc:fa:ca:37:1c:94:
1d:88:83:97:55:1c:b0:63:33:0a:fb:50:23:32:b0:
b5:41:9e:c1:7f:5f:5c:59:f8:84:53:1c:2a:42:6d:
e4:a4:99:28:7c:66:dd:b4:52:d3:8c:f6:e3:02:17:
35:db:7b:c5:a7:7a:d7:5a:48:db:3f:e5:05:a6:84:
f2:ee:cb:be:bd:6b:41:ca:5a:2b:9e:ef:3f:15:6c:
08:e5:04:12:a7:af:f5:68:2c:17:d4:39:99:4b:77:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:56:E3:89:BC:45:D7:0D:56:91:59:1B:C8:6C:82:34:D7:DB:60
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ORNW44m8RdcNVpFZG8hsgjTX22A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c0:5f:b2:7c:68:5b:08:27:4f:24:9b:26:b5:b6:d7:58:8c:
da:07:d8:05:7e:b6:f3:07:30:bf:25:d6:5c:22:54:a5:5b:3d:
72:b1:d9:94:7e:11:62:1c:65:17:db:a5:88:0d:47:83:ea:21:
e6:13:1c:95:1e:70:1d:f2:ea:e6:62:64:ed:7f:c0:fe:ff:0e:
e0:58:2b:9e:f4:a6:08:a8:2e:0c:dd:ec:ab:c1:42:69:e9:0d:
2e:b9:08:2e:e5:c1:4d:94:f2:84:39:89:c5:79:ab:ab:86:66:
83:63:35:c5:1d:a6:9a:d9:0f:c6:44:6f:6d:ab:41:c5:90:24:
5d:13:50:4b:5f:ca:aa:5b:27:20:71:34:fc:7d:88:36:07:5d:
92:7f:7b:96:57:08:a2:a6:1a:c1:cc:c7:a2:53:01:e2:9b:c6:
d7:4e:35:83:7c:6a:f3:b8:02:0b:bc:16:6b:d2:f3:32:b1:66:
ae:4a:e2:80:b8:93:ed:e1:f4:bc:4e:14:8d:2d:19:50:b8:4e:
31:0b:d9:00:38:c4:a6:13:10:3c:11:3e:5a:09:a6:f8:af:42:
07:04:5d:2d:ed:0b:3a:ac:0b:60:21:58:49:ff:93:20:6d:cf:
ce:30:b8:7c:4c:91:77:74:8c:8b:23:c0:36:30:e7:f0:a8:2c:
a3:b2:8a:79
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ4CAAemfIaKZWgvp8zoLp3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYwNTA3MTAzMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTEzNTZlMzg5YmM0NWQ3MGQ1NjkxNTkxYmM4NmM4MjM0ZDdkYjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts+VlPptrkI2l90eGoSAAznUIKuM
sitkYRClDBikVnv7LiThWrRXzP73lTeBAKuI1DKG+ckvPMmJgcJUuQfn6t/Uygbo
j7iw5VqgKQUhcoNIUpFSR6kf+OHkRmpIiAOl6FDUX7yCIB8jmVkcsjSxe7hcDvqI
MOnulNJetB8enUbJzT0o7G83eq+qC8jzpDRiirLzVzv6O4y0Pi8hpGX8+so3HJQd
iIOXVRywYzMK+1AjMrC1QZ7Bf19cWfiEUxwqQm3kpJkofGbdtFLTjPbjAhc123vF
p3rXWkjbP+UFpoTy7su+vWtBylornu8/FWwI5QQSp6/1aCwX1DmZS3eg5wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDkTVuOJvEXXDVaRWRvIbII019tgMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvT1JOVzQ0bThSZGNOVnBGWkc4aHNnalRYMjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBADrAX7J8aFsIJ08k
mya1ttdYjNoH2AV+tvMHML8l1lwiVKVbPXKx2ZR+EWIcZRfbpYgNR4PqIeYTHJUe
cB3y6uZiZO1/wP7/DuBYK570pgioLgzd7KvBQmnpDS65CC7lwU2U8oQ5icV5q6uG
ZoNjNcUdpprZD8ZEb22rQcWQJF0TUEtfyqpbJyBxNPx9iDYHXZJ/e5ZXCKKmGsHM
x6JTAeKbxtdONYN8avO4Agu8FmvS8zKxZq5K4oC4k+3h9LxOFI0tGVC4TjEL2QA4
xKYTEDwRPloJpvivQgcEXS3tCzqsC2AhWEn/kyBtz84wuHxMkXd0jIsjwDYw5/Co
LKOyink=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:54 2026 by rpki-client