Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/jB-pXT3KHXNOoaaKQc8iYyAN1ck.roa
File: jB-pXT3KHXNOoaaKQc8iYyAN1ck.roa (raw, json)
Hash identifier: Rf6LF+7sxrPPKgijtWpTCrWgf9UthvrJgEkubBMOVTE=
Subject key identifier: 8C:1F:A9:5D:3D:CA:1D:73:4E:A1:A6:8A:41:CF:22:63:20:0D:D5:C9
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 01A1AA5151C05E5C43AAEF3DD81E5A680456
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/jB-pXT3KHXNOoaaKQc8iYyAN1ck.roa
Signing time: Thu 05 Nov 2026 06:06:58 +0000
ROA not before: Thu 05 Nov 2026 06:06:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35779
IP address blocks: 46.174.136.0/23 maxlen: 23
46.174.136.0/24 maxlen: 24
46.174.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:51:51:c0:5e:5c:43:aa:ef:3d:d8:1e:5a:68:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Nov 5 06:06:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c1fa95d3dca1d734ea1a68a41cf2263200dd5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:c7:0a:26:5c:49:3f:d3:bf:2b:ab:c3:92:
7f:ac:d9:42:54:b0:04:92:e3:eb:d0:45:0f:c8:0f:
55:b6:1b:80:70:2e:0d:99:8d:70:d3:85:35:57:6e:
82:26:76:92:7d:04:83:4e:32:da:e8:d9:68:2e:20:
d1:8b:2d:05:57:fc:52:66:3f:2a:cb:3f:ac:69:39:
34:4b:cb:66:77:25:cd:95:ab:1b:36:32:65:27:1a:
91:fa:c1:4b:cb:77:c7:6d:eb:10:e1:6c:a8:31:df:
63:3a:8c:ae:be:1b:e6:b6:2b:5f:46:3d:4d:e1:ea:
42:79:f1:dc:22:49:f1:98:fc:ba:56:65:32:4d:f8:
d0:24:61:34:82:6b:d1:bc:8c:64:7f:83:18:25:49:
6e:dd:31:a9:11:b5:a1:dd:8b:c7:4f:18:18:1f:67:
de:48:04:ed:2d:76:4e:1a:8f:78:f0:52:aa:6b:1a:
30:67:25:27:7b:88:42:7a:fb:f9:86:10:66:95:e8:
49:eb:ee:52:b3:8b:4c:d3:9a:78:cd:55:9b:19:be:
1f:b5:01:70:8d:7d:59:01:66:de:60:4b:a1:43:57:
39:0c:f0:ea:cd:6d:da:55:f7:5d:68:6b:c9:5f:dd:
2d:27:d1:a7:9c:01:6d:8c:94:b0:f8:81:23:ca:dc:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1F:A9:5D:3D:CA:1D:73:4E:A1:A6:8A:41:CF:22:63:20:0D:D5:C9
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/jB-pXT3KHXNOoaaKQc8iYyAN1ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0/23
Signature Algorithm: sha256WithRSAEncryption
21:7d:14:dc:6f:2a:4c:a3:45:cb:4b:79:a4:d6:4c:c4:b3:93:
45:52:04:2a:41:f5:f9:68:16:6a:45:4c:55:d0:fb:95:ec:de:
51:97:97:98:cb:7f:9c:0e:88:bc:25:c7:2c:55:27:6a:2b:39:
04:c1:f7:6b:99:a5:da:32:de:c3:d0:65:15:e9:74:19:e9:b5:
a8:5a:6d:c2:8e:61:4a:fb:9c:6a:1f:bd:44:70:da:11:3e:08:
a4:3c:15:34:cd:34:3b:e1:86:f3:e3:a7:42:2a:e0:73:2a:ce:
60:d1:73:ef:7e:ca:67:ce:91:fb:ee:30:c7:84:8e:17:7b:2f:
5f:bc:8c:3b:2d:a4:21:92:b9:a5:79:6c:d1:97:f9:20:6f:26:
ad:77:ba:b3:4e:76:2c:f1:f2:fb:f9:73:77:10:4e:20:3f:43:
d4:7b:27:9b:5b:c1:fb:15:87:ca:60:20:d3:16:bc:7e:ba:bd:
56:a0:c6:97:d4:eb:66:c5:9d:c0:e3:56:34:8b:44:12:11:ad:
3d:1e:25:64:2c:18:ea:ad:c3:8f:2c:26:f4:d5:e3:b8:56:b5:
b1:88:f9:f4:08:2e:e3:33:0c:1b:a0:16:eb:f4:ea:1c:69:41:
05:35:14:f5:df:bf:e2:3f:9a:cf:6e:fe:c0:ef:39:3e:06:ee:
5a:54:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:08 2026 by rpki-client