Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/bB5UOGtaW3bmYPDi-XSbPXnJypA.roa
File: bB5UOGtaW3bmYPDi-XSbPXnJypA.roa (raw, json)
Hash identifier: TRSmRYFBPN7gXYsMVb0i78QJVCNcqZcaOHJzCwFEn4E=
Subject key identifier: 6C:1E:54:38:6B:5A:5B:76:E6:60:F0:E2:F9:74:9B:3D:79:C9:CA:90
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019FD343A746668CEAE7F412B88F78A88B01
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/bB5UOGtaW3bmYPDi-XSbPXnJypA.roa
Signing time: Wed 05 Aug 2026 18:50:54 +0000
ROA not before: Wed 05 Aug 2026 18:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36040
IP address blocks: 46.228.221.0/24 maxlen: 27
46.228.223.0/24 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:43:a7:46:66:8c:ea:e7:f4:12:b8:8f:78:a8:8b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Aug 5 18:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c1e54386b5a5b76e660f0e2f9749b3d79c9ca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:8d:8d:a3:f5:5c:0b:31:dd:0b:5f:5f:65:
38:d7:af:75:db:a7:e4:65:cc:3e:ab:a6:3b:9e:59:
20:49:db:c5:81:06:1e:d2:f6:00:f2:8e:ab:de:be:
b8:52:49:1b:bd:a9:3e:49:57:42:7a:61:17:36:18:
40:4e:c1:12:5b:23:b7:22:b8:37:ad:7c:6b:32:e3:
e7:71:a2:29:0a:17:44:ee:db:ec:e2:f7:e8:1d:37:
4d:fa:9a:3d:bd:8c:36:43:20:cc:fe:5b:88:ad:c7:
93:01:f3:16:4e:a1:b0:8c:2b:d8:59:e4:b2:e5:ff:
a0:9e:4c:14:50:57:5b:31:8a:52:b0:df:7f:00:26:
2d:91:64:c9:ed:b2:46:91:4c:b5:2f:dd:79:d1:dd:
78:80:a9:87:3b:55:8f:02:6a:0f:bb:04:bf:5a:ec:
f5:73:9b:8c:da:02:f4:f4:fc:49:e0:2e:a5:30:6e:
5e:7a:ee:12:99:4b:d0:9d:01:7f:dc:a7:aa:70:74:
67:0f:27:1a:3a:a0:65:51:d7:a0:cf:78:59:04:3c:
12:09:2b:4e:a2:5a:d9:7f:9a:8b:fe:ae:f2:5a:e3:
a0:7c:5b:e4:61:71:3e:cd:e6:87:b3:7d:80:d3:23:
1a:07:af:07:9f:17:e5:2e:94:55:85:09:1f:3b:89:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:54:38:6B:5A:5B:76:E6:60:F0:E2:F9:74:9B:3D:79:C9:CA:90
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/bB5UOGtaW3bmYPDi-XSbPXnJypA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.221.0/24
46.228.223.0/24
Signature Algorithm: sha256WithRSAEncryption
90:35:b9:2f:1e:dc:29:85:0f:74:5d:12:af:77:42:c9:5f:6f:
fd:04:86:19:df:af:f3:ba:47:6f:fe:bf:d6:40:86:91:63:25:
2b:27:1a:2d:44:c9:36:cf:8f:74:d4:08:78:e3:02:0d:57:50:
9c:b1:e2:f3:ab:41:2b:0f:d4:b9:a2:d6:d1:ca:d8:62:74:74:
9f:6c:7b:e4:79:e2:e6:6a:1a:bd:9f:22:f1:88:5e:69:a4:64:
ae:6f:20:4e:42:a4:29:f9:c4:8f:fb:ff:6e:7d:2b:05:4e:e2:
5c:dd:82:cb:d3:9b:7e:02:af:a6:a2:4b:b1:95:f3:68:60:e0:
7b:a1:02:64:89:b3:58:70:2d:8c:16:8b:2d:e1:f1:97:00:d8:
6a:77:33:2c:7b:6f:38:e6:e7:49:66:b3:d9:1d:ba:6f:55:5a:
21:97:3c:89:39:d3:eb:ec:d0:be:f1:00:e0:95:67:19:8d:55:
4d:90:dc:b4:df:c3:f3:4f:70:79:96:d1:c4:31:78:ab:d7:6b:
4d:61:71:f8:e6:7e:3d:41:e1:69:41:5f:7e:d2:a6:90:89:08:
d6:71:13:9e:cd:25:6c:e0:62:40:24:03:22:c5:40:88:94:c3:
b3:96:46:18:52:f5:3b:c1:d7:f4:eb:bb:5c:0e:85:10:c9:a1:
d7:fe:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:56 2026 by rpki-client