Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cW0STOYOkt2DNIvyEWck2oy25wI.roa
File: cW0STOYOkt2DNIvyEWck2oy25wI.roa (raw, json)
Hash identifier: pMSBxqCKj5e5RBtlhWLBOVx+9EjF/GcZRM+Ian0d/FQ=
Subject key identifier: 71:6D:12:4C:E6:0E:92:DD:83:34:8B:F2:11:67:24:DA:8C:B6:E7:02
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01A1B01ECCF3ABFBD30C374B542B53F07EA7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cW0STOYOkt2DNIvyEWck2oy25wI.roa
Signing time: Fri 06 Nov 2026 09:09:30 +0000
ROA not before: Fri 06 Nov 2026 09:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.50.0/24 maxlen: 24
46.34.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:1e:cc:f3:ab:fb:d3:0c:37:4b:54:2b:53:f0:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 6 09:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=716d124ce60e92dd83348bf2116724da8cb6e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:68:45:1c:82:53:76:ba:33:f5:4d:72:7a:
b6:6a:e5:8e:4a:e4:e7:b0:9f:13:73:03:5e:ed:e7:
18:2b:55:77:17:a5:77:40:74:78:6a:c7:b2:41:0d:
de:3a:9c:dc:4c:ac:2e:b0:9d:d8:fc:24:09:c9:30:
08:01:57:6c:2e:77:e6:ed:e6:7b:a7:49:69:be:80:
34:02:28:ab:3f:1b:26:f8:57:69:23:c1:b3:68:44:
16:f2:03:9b:9b:22:89:46:85:65:c5:b0:e6:6a:8c:
6e:2e:e4:ce:8e:15:54:f5:58:c3:5b:c2:db:95:a1:
ba:a3:e3:54:9b:c6:c7:e8:cd:33:ca:62:82:62:6d:
b7:b1:61:cd:c7:6a:f5:fa:3e:c5:c2:e7:88:51:ca:
dd:96:df:23:68:19:ff:a2:87:47:32:38:af:5e:e8:
ad:e6:51:43:20:1c:f1:d0:db:9b:6a:8b:81:38:a0:
cb:e5:c9:61:1a:b4:ae:55:04:df:e6:3f:8a:55:fb:
81:d9:9c:d6:8f:78:1b:1b:64:c0:af:cd:c5:fe:56:
56:c4:0f:c5:e5:0c:1c:b6:46:d5:bc:a2:49:ee:1a:
d0:7d:42:26:61:81:3b:1a:83:45:20:00:97:ba:4f:
d6:0b:da:54:42:3f:31:31:9b:ea:cc:6f:eb:e1:18:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6D:12:4C:E6:0E:92:DD:83:34:8B:F2:11:67:24:DA:8C:B6:E7:02
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cW0STOYOkt2DNIvyEWck2oy25wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.50.0/23
Signature Algorithm: sha256WithRSAEncryption
06:21:b2:7a:05:6d:87:58:00:01:93:8a:85:f4:ae:f3:6b:33:
57:ac:72:de:21:ee:7b:d0:8e:49:2b:e3:0f:c2:8a:4b:3f:37:
61:b5:92:9c:0d:a8:cd:13:55:88:5b:59:d1:33:e9:c5:6c:d5:
37:5a:bd:c1:ff:c8:8b:fc:8a:ac:46:fd:f6:5c:25:f1:d2:bf:
b1:1f:f0:ed:c9:bc:ae:40:27:c7:4a:69:30:69:a1:7d:ab:f2:
d7:54:30:0b:e6:0d:b2:f0:60:ed:c7:d6:a7:a6:2d:7d:64:34:
7d:9b:bf:70:d2:cb:83:70:d4:09:02:ea:7f:96:c8:a8:6b:46:
4a:63:81:09:9a:91:14:9d:df:31:2e:f9:90:9d:a7:6d:a7:74:
8d:db:5b:62:64:4a:24:4f:92:5a:16:0b:1c:5f:73:f8:32:f6:
d0:47:ac:6e:d8:4a:fc:aa:53:35:fa:fc:bf:d5:09:cf:83:47:
42:24:52:53:04:14:84:f7:38:33:22:0f:a7:ed:ff:5c:c4:bb:
74:b7:e3:5a:3e:6e:d7:48:f7:1f:7a:f7:c4:eb:10:e9:0e:f4:
bb:29:f8:09:96:4a:ba:cb:53:38:53:e0:59:a5:86:26:ce:ec:
bd:39:89:88:eb:04:f1:38:1b:9a:3d:d6:bf:ec:df:67:6f:a4:
9a:fc:1a:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGwHszzq/vTDDdLVCtT8H6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYxMTA2MDkwOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTZkMTI0Y2U2MGU5MmRkODMzNDhiZjIxMTY3MjRkYThjYjZlNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuploRRyCU3a6M/VNcnq2auWOSuTn
sJ8TcwNe7ecYK1V3F6V3QHR4aseyQQ3eOpzcTKwusJ3Y/CQJyTAIAVdsLnfm7eZ7
p0lpvoA0AiirPxsm+FdpI8GzaEQW8gObmyKJRoVlxbDmaoxuLuTOjhVU9VjDW8Lb
laG6o+NUm8bH6M0zymKCYm23sWHNx2r1+j7FwueIUcrdlt8jaBn/oodHMjivXuit
5lFDIBzx0NubaouBOKDL5clhGrSuVQTf5j+KVfuB2ZzWj3gbG2TAr83F/lZWxA/F
5QwctkbVvKJJ7hrQfUImYYE7GoNFIACXuk/WC9pUQj8xMZvqzG/r4Rg2swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHFtEkzmDpLdgzSL8hFnJNqMtucCMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvY1cwU1RPWU9rdDJETkl2eUVXY2syb3kyNXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiImAwQB
LiIyMA0GCSqGSIb3DQEBCwUAA4IBAQAGIbJ6BW2HWAABk4qF9K7zazNXrHLeIe57
0I5JK+MPwopLPzdhtZKcDajNE1WIW1nRM+nFbNU3Wr3B/8iL/IqsRv32XCXx0r+x
H/DtybyuQCfHSmkwaaF9q/LXVDAL5g2y8GDtx9anpi19ZDR9m79w0suDcNQJAup/
lsioa0ZKY4EJmpEUnd8xLvmQnadtp3SN21tiZEokT5JaFgscX3P4MvbQR6xu2Er8
qlM1+vy/1QnPg0dCJFJTBBSE9zgzIg+n7f9cxLt0t+NaPm7XSPcfevfE6xDpDvS7
KfgJlkq6y1M4U+BZpYYmzuy9OYmI6wTxOBuaPda/7N9nb6Sa/BpO
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:02 2026 by rpki-client