Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/TdMhRHczxWCfuj6WCF3aHSZcWoE.roa
File: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (raw, json)
Hash identifier: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=
Subject key identifier: 4D:D3:21:44:77:33:C5:60:9F:BA:3E:96:08:5D:DA:1D:26:5C:5A:81
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0198A7ED512B6E2EA8D8CE44DE086A3E28BA
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/TdMhRHczxWCfuj6WCF3aHSZcWoE.roa
Signing time: Thu 14 Aug 2025 09:33:24 +0000
ROA not before: Thu 14 Aug 2025 09:33:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.47.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:ed:51:2b:6e:2e:a8:d8:ce:44:de:08:6a:3e:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 14 09:33:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd321447733c5609fba3e96085dda1d265c5a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:02:bb:07:2b:b2:75:cb:dc:24:ce:59:a6:
a6:ac:1f:a6:52:de:4c:36:f9:1f:f5:ad:cf:e0:4a:
9d:5d:50:f0:1c:25:74:c7:b7:f6:85:ef:30:b0:7a:
f1:64:d1:7f:cf:cc:f8:c8:cd:1a:68:f1:87:cf:d5:
2e:a1:51:e2:69:68:31:ae:03:f3:e4:ea:77:b7:cb:
df:81:b6:1d:7b:33:75:34:7b:4f:9a:b3:97:16:14:
81:c4:e1:23:98:5c:ab:f6:7b:45:5a:78:88:7e:26:
a1:ce:f0:65:2e:87:e7:e3:4f:4f:9a:af:ae:ab:b0:
71:d2:c7:0c:9c:d8:4c:56:b9:fc:28:3f:6c:99:75:
69:f1:9d:a7:f4:04:92:a8:46:0d:d5:b6:3d:bc:09:
3b:97:eb:90:67:f5:38:96:bf:d3:a8:7b:30:3b:23:
39:7b:b9:1b:44:d7:31:f8:56:ac:01:62:76:7c:4e:
03:23:12:4e:d1:91:83:d0:8b:71:5b:91:46:ee:e3:
8d:93:80:8c:14:f2:d5:2b:13:ec:1c:7a:66:43:19:
ff:4d:42:fb:97:20:1f:f6:3b:1a:e5:94:2d:aa:62:
17:d2:86:64:b6:0b:15:b9:d2:5a:be:82:fb:79:e2:
d1:9d:85:90:d2:25:ca:b6:88:2a:08:ed:2b:1b:d8:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:21:44:77:33:C5:60:9F:BA:3E:96:08:5D:DA:1D:26:5C:5A:81
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/TdMhRHczxWCfuj6WCF3aHSZcWoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.42.0/23
46.34.47.0/24
46.34.49.0/24
46.34.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a6:19:2d:46:be:e9:f4:da:60:36:8f:7f:bf:a6:cf:f8:73:
f4:99:b6:85:76:06:54:53:30:d8:4a:45:90:fd:53:5d:2c:dc:
0e:67:3f:e1:9d:0d:9b:ca:79:e3:cf:d8:aa:df:95:ce:05:1e:
68:7d:5e:98:c7:44:1a:3e:23:5f:67:01:4a:0a:bf:3b:1d:a5:
db:e9:60:99:2f:6b:e2:a5:e4:17:f4:bf:8c:12:5f:c9:d2:8d:
9e:a4:f8:ce:95:41:bb:1a:98:89:fc:64:cd:f5:90:20:60:44:
29:14:cd:8f:0c:ec:64:33:22:b6:61:c1:64:41:69:73:43:fb:
35:d1:9e:b1:f9:27:4e:ec:30:d8:2a:32:d1:8b:ee:66:d0:d6:
f8:38:b4:a6:e1:93:a9:cf:b3:0a:1a:e4:f4:22:d7:0c:fa:51:
a1:d4:2d:ad:4f:2d:79:75:1f:b5:8b:c7:28:d5:98:8c:b7:fa:
51:60:53:83:15:54:c4:ae:8f:a6:cc:20:12:ae:d5:db:32:81:
c4:a9:cb:5b:3c:bf:1b:de:2a:ba:92:37:1f:8c:65:b1:aa:2d:
18:d1:06:6e:8e:88:ca:2e:e1:9c:af:36:15:74:7c:95:2c:16:
87:7c:ff:2f:a7:9b:ac:e2:d4:85:17:b0:2e:da:45:51:07:07:
85:22:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:33 2025 by rpki-client