Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R0mTp9vir836TNqeptvrf3qhbUg.roa
File: R0mTp9vir836TNqeptvrf3qhbUg.roa (raw, json)
Hash identifier: K5uLTC1+19xKc0+g7vOtltzv3puVVQjluXSadm/A8PQ=
Subject key identifier: 47:49:93:A7:DB:E2:AF:CD:FA:4C:DA:9E:A6:DB:EB:7F:7A:A1:6D:48
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FC790139E6F2A223109DF115959629761
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R0mTp9vir836TNqeptvrf3qhbUg.roa
Signing time: Mon 03 Aug 2026 12:18:55 +0000
ROA not before: Mon 03 Aug 2026 12:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51606
IP address blocks: 46.16.136.0/21 maxlen: 21
46.16.136.0/24 maxlen: 24
46.16.137.0/24 maxlen: 24
46.16.138.0/24 maxlen: 24
46.16.140.0/24 maxlen: 24
46.16.141.0/24 maxlen: 24
46.16.142.0/24 maxlen: 24
46.16.143.0/24 maxlen: 24
217.22.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:90:13:9e:6f:2a:22:31:09:df:11:59:59:62:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 3 12:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=474993a7dbe2afcdfa4cda9ea6dbeb7f7aa16d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:49:e0:d1:d2:dd:ba:fa:73:ee:6f:03:8a:
bf:d4:8f:f8:32:49:d7:b5:ea:74:01:75:c4:c0:6b:
b7:3e:74:8c:70:2a:b9:93:48:d0:f5:cb:fc:1f:3f:
12:f5:c5:a1:d9:4b:6b:28:35:09:82:05:22:82:92:
01:a3:09:c9:5b:ba:60:8a:90:6e:db:fe:ee:67:2b:
eb:e4:42:cc:40:16:97:0d:7f:72:09:5b:fe:62:23:
f6:6f:cf:16:47:1c:d1:b7:fc:47:c0:44:1e:27:77:
d7:0c:cf:dd:d6:85:56:db:e7:67:96:64:42:33:29:
ba:cc:d3:4b:fc:81:1c:38:e8:68:85:89:f4:7c:05:
0b:b0:2b:54:95:a8:dc:65:80:69:c6:c4:26:5a:4b:
a1:56:8a:2d:f7:67:53:14:22:1d:3e:4d:70:00:1a:
bb:07:ec:5b:d5:22:cc:06:37:cf:8a:99:00:d6:8b:
dd:58:32:70:36:ac:6d:76:7c:88:2e:26:aa:98:97:
9e:18:a2:bc:29:84:97:6d:27:65:33:1b:a2:d0:77:
ae:ee:6b:c2:96:b8:8d:3d:a2:ce:c8:34:f2:b7:61:
27:13:d8:96:05:03:07:d0:3d:cc:f4:d9:e1:62:42:
1d:d3:86:42:14:e0:8f:70:4c:7d:5b:2b:36:15:16:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:93:A7:DB:E2:AF:CD:FA:4C:DA:9E:A6:DB:EB:7F:7A:A1:6D:48
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/R0mTp9vir836TNqeptvrf3qhbUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.136.0/21
217.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
75:71:1e:f7:87:b1:d8:36:6a:f4:11:09:4d:52:e0:bb:a4:9a:
95:e1:a7:6b:71:92:87:1a:b9:e8:f7:ea:9b:f1:a9:69:0a:5b:
91:f9:43:a4:9a:43:1a:6a:cb:19:cd:3b:03:d2:69:41:9f:64:
e4:84:cb:6a:53:31:98:68:27:68:07:e6:24:2f:a7:6f:33:7a:
0d:5a:5a:e2:b4:65:96:9c:75:5d:09:5d:d1:19:28:da:32:63:
df:0e:2f:5d:e3:f8:a6:b1:32:30:c4:0e:d0:0d:a2:63:9a:f3:
9e:ce:1f:ae:05:83:eb:04:68:51:97:22:c7:b9:ee:c9:bb:4a:
87:2a:08:5c:85:70:12:4e:b7:ad:d4:70:16:e7:e7:20:6a:fa:
b8:bf:a7:15:98:9a:23:a3:87:e9:2b:3e:aa:88:26:d1:81:60:
27:d3:90:1d:47:d7:10:6b:c0:8b:a9:95:7e:e0:7c:6c:49:36:
cb:60:a1:02:4a:06:12:6a:81:dd:2a:50:0c:47:ef:fa:e4:b5:
5b:80:f7:e2:f3:90:da:ae:e0:e8:b2:0f:77:29:e8:1e:f7:23:
2f:45:38:e3:00:8b:24:1a:19:73:b3:05:bf:59:a4:c0:19:a9:
b3:06:2e:27:05:96:58:19:67:38:b3:1e:0e:1c:ee:55:3c:85:
c2:a0:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:19 2026 by rpki-client