Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Rm3PPV17RGS6ncoj1AlUUc-ntcY.roa
File: Rm3PPV17RGS6ncoj1AlUUc-ntcY.roa (raw, json)
Hash identifier: nXf6jErEDRYthigF4Rk+n6rBZLzxa/vorux+nkxF4+I=
Subject key identifier: 46:6D:CF:3D:5D:7B:44:64:BA:9D:CA:23:D4:09:54:51:CF:A7:B5:C6
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A1AC761D4F3D21CAAB7963ED4AC4EE8DCB
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Rm3PPV17RGS6ncoj1AlUUc-ntcY.roa
Signing time: Thu 05 Nov 2026 16:06:24 +0000
ROA not before: Thu 05 Nov 2026 16:06:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44947
IP address blocks: 89.46.24.0/21 maxlen: 21
89.46.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:76:1d:4f:3d:21:ca:ab:79:63:ed:4a:c4:ee:8d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Nov 5 16:06:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=466dcf3d5d7b4464ba9dca23d4095451cfa7b5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:4f:73:b2:33:9c:59:25:9d:9c:73:b6:8a:
77:2d:b8:2c:18:8b:c5:8b:0b:26:43:4d:e8:f1:28:
5a:fa:ea:56:3a:d5:26:76:c8:62:df:e6:fc:55:98:
1c:d7:e1:1d:bd:9f:d6:6a:ee:a8:6a:bc:42:ff:4f:
27:f4:bc:f5:d2:14:69:36:22:80:80:2f:44:df:1e:
63:63:94:f5:26:e5:1f:1e:7b:61:cb:a2:aa:6c:f2:
34:dc:4a:9b:08:32:dc:14:a0:84:91:52:71:b1:f9:
ff:1c:b3:e8:27:bb:33:1e:de:96:98:db:f5:50:12:
83:56:06:d6:e0:3c:ec:46:a4:5e:0f:13:a9:ad:73:
9e:b9:cf:43:3e:53:b8:b7:3d:9a:9b:a5:4e:17:1e:
76:d5:4c:5e:27:c3:42:c2:c4:df:3d:f1:08:06:df:
ef:ab:f2:c8:6c:f8:fe:c6:17:53:3d:ee:71:f6:8e:
17:51:7c:87:2d:c5:94:dc:73:50:31:9f:f1:e2:08:
67:cd:89:ac:86:db:6b:ea:14:72:d7:9a:5d:5e:21:
76:31:f0:f7:34:31:fd:bf:55:c6:e4:20:65:49:43:
2f:73:7d:cf:f6:ef:53:8f:c3:4d:a6:83:33:8f:a4:
78:5a:f3:52:2e:32:22:40:a6:c6:85:38:d4:92:40:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:CF:3D:5D:7B:44:64:BA:9D:CA:23:D4:09:54:51:CF:A7:B5:C6
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/Rm3PPV17RGS6ncoj1AlUUc-ntcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:28:fe:99:cf:c4:d9:f0:10:fb:6e:8a:8a:2c:cf:38:b4:11:
7d:85:67:06:a5:b0:17:84:d9:0c:66:74:70:b2:29:be:6a:a6:
25:96:d6:35:f4:94:b9:35:8b:d3:52:b9:95:42:d0:a8:aa:5a:
ea:b4:a7:d5:5e:3d:b3:99:2e:60:28:93:f8:74:5c:e4:ee:90:
13:b5:09:81:d8:7a:b9:65:a6:a3:36:e0:08:38:74:11:94:e3:
81:d2:43:36:7b:74:5f:2a:9d:6d:bd:55:f2:af:5d:61:94:6f:
cc:fd:2a:85:ca:93:f8:b9:9b:04:bd:04:37:76:30:4b:f1:6d:
9c:e4:3d:df:ed:09:30:6e:bb:5c:a8:27:67:8c:82:5f:cc:6f:
6c:40:35:89:91:5b:bf:69:3d:87:99:0d:cd:37:36:2f:f3:1f:
6f:1f:c7:b4:05:e8:d4:ba:0c:c1:92:a5:43:b1:84:df:a3:c1:
34:36:9f:8a:7e:1d:37:02:8f:19:b6:00:fb:25:3a:7f:eb:03:
21:9f:6f:24:d5:5e:43:3a:68:85:05:9f:50:36:c4:2b:ab:e3:
13:b5:22:1f:24:33:9c:7f:8d:fe:3a:b7:e2:00:70:1f:d2:c4:
37:0b:d2:43:26:ca:fa:36:c0:a9:1d:92:8b:6a:dc:5b:76:84:
4a:d3:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:34:31 2026 by rpki-client