Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YUalHwONloA1HCeGhCFxHWUYPHs.roa
File: YUalHwONloA1HCeGhCFxHWUYPHs.roa (raw, json)
Hash identifier: OGOOVE/GGWvwkr0Z5n+67yKWHiNlfjNF5i4K8Oncfn4=
Subject key identifier: 61:46:A5:1F:03:8D:96:80:35:1C:27:86:84:21:71:1D:65:18:3C:7B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1499A8F1D5ACFBC2F2FF4538BE56CA6D8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YUalHwONloA1HCeGhCFxHWUYPHs.roa
Signing time: Sat 17 Oct 2026 11:23:48 +0000
ROA not before: Sat 17 Oct 2026 11:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.34.0.0/24 maxlen: 24
82.108.123.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.84.233.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
87.86.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:9a:8f:1d:5a:cf:bc:2f:2f:f4:53:8b:e5:6c:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 17 11:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6146a51f038d9680351c27868421711d65183c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:d5:36:65:bb:c8:30:89:a4:3b:8e:37:94:
c0:eb:13:9f:cc:fa:20:fc:84:11:d0:28:59:5e:a3:
d4:0d:9e:00:a4:1e:b9:ab:08:04:84:b3:b5:75:4a:
8f:3c:ce:b2:5d:b3:84:84:d2:96:5e:5e:69:79:0f:
92:8f:1f:05:83:59:10:2c:79:bf:92:6d:be:e7:03:
90:a6:57:5e:ac:9d:9a:62:1d:80:20:10:a4:20:11:
bc:c0:63:fe:b7:1d:2d:b9:55:6e:75:7e:f3:02:e6:
68:f0:02:5d:95:29:a1:30:9e:c6:32:d7:36:5c:30:
b1:7e:6d:f1:51:3e:fb:a7:34:7e:de:bb:27:30:a8:
dd:a2:fa:36:38:19:a0:1e:e8:04:a6:3f:8f:d8:11:
37:e5:aa:be:16:1f:a6:17:d4:fa:4c:c9:ec:f6:79:
d7:af:70:37:c2:05:fc:36:e3:b5:af:c7:1e:8c:ef:
cc:9c:63:45:1e:e8:28:c2:ed:e5:06:29:49:5b:a7:
f7:16:92:0b:c9:9f:b9:df:b0:34:af:bc:60:8c:bc:
4c:fc:c3:76:68:fd:dc:21:7d:65:b1:87:aa:dd:25:
e3:ba:94:71:b9:0d:e8:04:94:c8:64:a7:2c:b1:bb:
cc:87:e3:ad:4c:7b:49:51:92:12:ed:28:34:7b:d8:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:A5:1F:03:8D:96:80:35:1C:27:86:84:21:71:1D:65:18:3C:7B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YUalHwONloA1HCeGhCFxHWUYPHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.108.123.0/24
82.110.124.0/22
87.84.233.0/24
87.85.64.0/24
87.86.212.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:fc:29:90:e5:e3:bc:8c:67:98:d9:97:9b:8d:a6:80:eb:4b:
bc:19:74:bf:dc:a6:83:6d:9f:ed:93:bb:b4:9e:c1:a1:db:3e:
ca:7f:8d:a3:a6:9d:8f:4f:00:18:ab:9a:cb:4f:0a:dc:62:71:
c7:4e:04:11:01:67:19:6e:9d:9b:e3:84:b7:55:5e:9d:b9:9a:
c5:e9:dc:1e:93:f4:88:ef:96:10:5a:36:23:b2:c5:29:bb:ec:
7e:39:56:8b:cc:7b:55:39:0a:ec:d0:0e:3f:80:4a:a0:a5:b9:
84:5d:c8:4a:5b:11:ba:a1:d7:36:9d:54:5a:bc:28:d4:60:e6:
9e:f4:b4:ce:64:2e:a7:c0:05:8d:81:d7:e9:bf:39:50:17:27:
1c:17:ba:ec:98:ec:6a:a5:61:e8:dc:2f:d5:c3:39:cb:95:63:
73:0d:9e:fe:e7:a5:46:21:e2:06:b6:c6:53:5b:93:bd:7a:d6:
31:b5:2d:1e:bb:67:3f:7c:be:7b:66:66:2d:84:c9:28:94:62:
a5:77:fb:2d:95:58:3f:7a:7f:ca:44:53:1c:6c:ba:a5:88:f2:
1f:cb:85:53:73:cb:53:f9:1d:a4:32:f5:a9:5f:e8:02:da:53:
e4:94:d2:4b:b7:9b:1d:63:ce:5c:ba:42:57:8c:2f:66:f1:ef:
e7:e8:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:02:03 2026 by rpki-client