Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/SsHf06xOWrlCWVTG69AgmfaIF38.roa
File: SsHf06xOWrlCWVTG69AgmfaIF38.roa (raw, json)
Hash identifier: WFulXiv+vBDYVgDZOZP+zJDwRj47bNqs7i96m1/EHoY=
Subject key identifier: 4A:C1:DF:D3:AC:4E:5A:B9:42:59:54:C6:EB:D0:20:99:F6:88:17:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019F4E31A446575CD932045BC3FF30FD14B4
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/SsHf06xOWrlCWVTG69AgmfaIF38.roa
Signing time: Fri 10 Jul 2026 22:41:43 +0000
ROA not before: Fri 10 Jul 2026 22:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
46.243.18.0/29 maxlen: 29
46.243.18.8/29 maxlen: 29
46.243.18.16/29 maxlen: 29
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:31:a4:46:57:5c:d9:32:04:5b:c3:ff:30:fd:14:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jul 10 22:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ac1dfd3ac4e5ab9425954c6ebd02099f688177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:5d:14:0f:3e:a1:06:24:0f:0c:bf:d1:83:
05:c0:a6:bf:ff:b4:5b:fe:4b:60:af:04:f7:49:14:
32:5e:d3:91:0a:4b:2a:ad:ac:9e:bf:21:69:89:4c:
1c:98:d8:99:19:31:96:c7:64:76:15:ed:4b:4b:3e:
73:35:1c:94:0e:33:53:6c:b0:18:31:77:0c:67:74:
d2:ae:8c:fe:0b:11:c6:90:8d:e6:63:c5:a1:f0:66:
67:a5:42:66:fc:3f:93:7c:62:49:8d:fe:b2:f5:d7:
92:37:23:61:c2:a2:ac:ba:69:72:e2:bf:52:0e:31:
35:0c:e5:b6:c0:dc:14:57:73:6b:ef:35:2a:19:a8:
18:24:1e:65:70:fa:20:ea:79:b2:81:0e:34:bf:80:
8e:a9:86:bf:62:65:ee:4e:da:68:f1:6b:9d:5f:1f:
05:ec:30:82:38:1b:aa:9e:89:79:f5:97:40:3e:d6:
a8:13:2e:55:e0:63:8b:a5:ee:7e:14:4b:81:8b:b6:
6a:5e:88:e5:d2:37:b6:2a:47:d0:fd:ce:7a:55:4c:
4e:b7:2e:44:4d:79:8e:1b:a3:c3:88:43:5f:1a:ba:
5a:76:8f:b2:41:2c:ee:e6:67:04:35:ff:41:e6:2b:
1d:8a:6d:54:22:8b:68:c9:aa:aa:08:8a:75:32:87:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:DF:D3:AC:4E:5A:B9:42:59:54:C6:EB:D0:20:99:F6:88:17:7F
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/SsHf06xOWrlCWVTG69AgmfaIF38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d2:ad:e1:e8:22:55:70:fe:a3:32:91:84:28:a9:9d:e0:59:
89:8b:6c:eb:ea:ba:69:5f:5f:0e:ce:3f:5f:1c:1b:7b:c7:18:
4e:52:89:9e:7a:48:d1:0a:26:38:8d:5c:9d:45:76:68:30:c6:
ef:47:a5:2e:96:f4:1e:86:fe:45:54:c6:47:37:9e:3d:09:e6:
fa:97:73:36:28:09:1c:1f:6b:d7:58:cb:97:c5:65:ff:69:49:
9a:20:e8:62:38:8c:8a:b4:59:e1:0b:de:2c:9f:48:1f:66:81:
0d:3a:49:c0:10:60:cf:2f:0a:ee:e0:ff:d4:57:ec:bd:5d:a6:
a2:98:41:48:fb:96:fb:f7:63:de:53:10:42:ba:97:0f:2d:33:
98:54:57:0e:17:4c:27:c4:18:71:8b:67:bd:c7:0f:a0:18:9b:
48:93:79:9f:c2:6c:fc:59:47:12:90:64:90:eb:fd:c6:75:e6:
79:56:9f:7a:b3:07:f3:57:ed:20:cf:fd:eb:9d:39:f2:9e:4e:
53:ce:3b:99:36:98:40:1b:60:3c:52:ac:58:8e:ac:cb:c1:99:
a1:bb:4d:bf:cf:e3:cd:fa:c7:f1:7d:48:f7:98:95:58:1b:e4:
c4:54:0b:61:cd:b2:18:1f:27:df:c0:72:40:b7:15:a0:61:5e:
54:3d:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:25 2026 by rpki-client