Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/saXncTu8Jyn9wHWn8gtxElcn7uk.roa
File: saXncTu8Jyn9wHWn8gtxElcn7uk.roa (raw, json)
Hash identifier: IsO7tvAcqIRqvr9qvI5jdboB3g/FW6hvUsM1vnYO7yQ=
Subject key identifier: B1:A5:E7:71:3B:BC:27:29:FD:C0:75:A7:F2:0B:71:12:57:27:EE:E9
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019F1CDCDAE7C051C7886DD48A6C5D9640A4
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/saXncTu8Jyn9wHWn8gtxElcn7uk.roa
Signing time: Wed 01 Jul 2026 08:47:43 +0000
ROA not before: Wed 01 Jul 2026 08:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206206
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:dc:da:e7:c0:51:c7:88:6d:d4:8a:6c:5d:96:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jul 1 08:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1a5e7713bbc2729fdc075a7f20b71125727eee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:e6:7a:ca:aa:f7:38:90:a6:fd:cd:e6:3c:
81:7a:3f:e6:1a:26:c8:ef:c0:1b:f9:c2:0d:66:35:
bd:a8:33:0e:7e:44:6c:9c:77:ab:86:bd:9d:94:97:
3b:f6:76:72:8b:f0:a7:4b:51:cd:72:29:ec:88:3e:
08:ca:18:29:42:1c:21:24:79:93:1a:be:af:a2:17:
81:32:03:9a:bd:b1:94:a6:6e:0a:a5:72:30:cf:5d:
32:b5:32:64:5e:6b:57:0b:77:1c:45:e4:95:2f:8e:
30:a4:ce:58:1b:1e:b6:e4:8d:58:b0:70:a6:07:6b:
4f:62:89:64:ab:8c:56:ae:6c:f7:2b:09:6c:ab:73:
0e:87:48:64:9d:31:b9:b8:24:ff:50:d6:cd:01:9a:
37:cd:a0:50:1e:5a:07:a8:d8:c8:10:29:13:e0:b5:
e2:84:ce:4d:c6:b8:c7:0e:22:de:7c:87:9e:a2:e8:
5c:ca:ad:09:fe:fe:9d:45:c2:ec:49:e3:fb:28:3c:
0c:2c:7b:9c:d1:a4:54:83:b7:0b:6e:09:08:c1:d4:
cd:98:41:5e:6c:e7:8a:bd:32:45:5f:74:97:2d:ce:
b8:6a:2e:48:3b:1d:03:3e:d6:1d:36:30:21:8e:fc:
54:f1:68:be:ab:a2:0e:58:74:6d:df:91:8d:b9:f9:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:E7:71:3B:BC:27:29:FD:C0:75:A7:F2:0B:71:12:57:27:EE:E9
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/saXncTu8Jyn9wHWn8gtxElcn7uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/24
46.243.21.0-46.243.22.255
Signature Algorithm: sha256WithRSAEncryption
42:ea:85:3e:2f:83:4a:dd:92:43:d7:21:8e:81:8a:37:55:3c:
c1:14:34:57:b3:79:16:b1:ac:4b:bf:11:26:8f:50:c6:f5:c7:
21:7d:4e:bd:d1:8d:24:b6:11:8f:d9:4c:b7:c4:c2:cd:ff:16:
a7:28:8b:9e:fd:ce:1e:13:f7:74:11:1a:c7:21:c8:c1:1a:c7:
8c:e7:61:37:fc:b5:99:7f:a3:14:b8:4f:52:5d:fd:30:1e:0d:
0d:49:33:0e:d8:43:43:eb:13:88:1d:95:5a:c6:0d:36:3d:4e:
23:89:38:01:c2:7f:b5:65:0f:8d:39:25:98:4c:b1:3f:76:85:
08:bd:3a:ec:27:2b:4f:20:fc:50:a4:d0:51:34:54:78:3a:a9:
34:a8:1b:fe:01:32:aa:0e:26:ca:6c:be:a2:4c:7b:e1:3c:32:
7b:84:5f:5f:64:b5:ff:4c:a7:e8:8c:8d:96:8d:86:ce:c1:41:
a9:07:fe:43:64:8e:f3:29:68:82:00:40:47:7c:63:af:c4:70:
43:a5:bf:4f:da:d9:42:07:35:49:09:5d:14:fb:29:57:4b:7c:
d4:86:6f:c9:f3:3d:11:1b:14:fa:5c:78:ac:6b:ef:f9:9a:fa:
79:72:f3:bb:c8:a7:58:67:63:bb:25:2e:19:be:cd:8f:21:43:
05:20:4a:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:18 2026 by rpki-client