Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/46YPaJsxK-Hh8hedE4d_sKJPbo4.roa
File: 46YPaJsxK-Hh8hedE4d_sKJPbo4.roa (raw, json)
Hash identifier: Ln4mKYRG2M1uFSlkxDfyNh3L7AXwbRgdpA6kJaEdsKY=
Subject key identifier: E3:A6:0F:68:9B:31:2B:E1:E1:F2:17:9D:13:87:7F:B0:A2:4F:6E:8E
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019DCF78658DDF9CF00D651B22AFA3021143
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/46YPaJsxK-Hh8hedE4d_sKJPbo4.roa
Signing time: Mon 27 Apr 2026 15:04:27 +0000
ROA not before: Mon 27 Apr 2026 15:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198383
IP address blocks: 82.206.12.0/23 maxlen: 23
82.206.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:78:65:8d:df:9c:f0:0d:65:1b:22:af:a3:02:11:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Apr 27 15:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3a60f689b312be1e1f2179d13877fb0a24f6e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:e4:d0:fd:b5:85:0d:ee:37:17:35:8a:73:
3e:58:f0:b1:ce:01:9c:a3:2d:31:d1:97:c5:a4:42:
aa:d7:47:c3:63:9b:14:88:32:26:f5:cd:d8:bb:b9:
43:90:93:0b:60:60:81:cc:a5:1f:23:de:f6:54:6d:
20:d7:0e:87:9d:e4:84:d5:49:fa:44:39:2d:74:16:
a7:47:48:37:c0:83:15:fa:1c:9e:e7:f1:d9:82:ad:
11:df:72:17:46:15:12:de:c4:44:90:1b:f8:02:ca:
9c:f8:94:5b:c4:e1:d3:35:94:a2:6e:d3:4d:6a:79:
db:20:e3:77:2d:7b:47:44:80:3b:91:e5:0d:ee:e6:
01:ed:00:29:18:b4:4e:63:6b:8f:d1:5a:31:bd:b5:
2d:08:d5:b8:3e:64:8e:eb:8c:28:e7:d4:75:06:3c:
d9:03:95:c3:84:b5:9f:5b:27:2c:7a:70:53:65:37:
11:89:8f:5b:41:a4:01:5a:90:36:ee:55:4e:fe:33:
83:01:66:48:3a:b0:c1:2f:86:df:f5:d5:40:2c:c4:
b8:c9:e9:82:42:f3:26:02:d6:11:fc:86:bc:da:b5:
06:ef:28:3c:ca:5e:ee:68:0a:b8:01:41:ea:9f:97:
f4:5f:eb:77:41:ab:e8:50:eb:88:2d:09:5d:aa:17:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:0F:68:9B:31:2B:E1:E1:F2:17:9D:13:87:7F:B0:A2:4F:6E:8E
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/46YPaJsxK-Hh8hedE4d_sKJPbo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.12.0/22
Signature Algorithm: sha256WithRSAEncryption
88:6d:fe:23:0a:09:00:d8:78:81:24:c3:e1:c9:55:db:7d:fc:
1e:47:b4:71:05:17:44:91:98:4a:a8:35:ba:c3:3d:b4:6f:20:
e0:c2:3d:f9:5a:52:bd:65:fe:2a:fb:c3:eb:1d:2d:00:a4:6c:
11:0c:af:79:db:e5:df:13:28:2c:a4:eb:fe:27:1a:20:39:2b:
c5:d9:d4:95:d3:53:5f:99:13:90:2d:53:1f:42:32:9c:81:b5:
0f:15:64:c6:8c:18:15:47:2a:ac:28:1c:27:76:1f:e9:7a:99:
0d:fd:30:80:c1:e2:68:99:a7:48:be:32:ca:91:11:80:82:24:
37:05:80:7f:4f:63:88:82:cd:4a:ad:e3:12:1e:9b:b3:0b:f0:
f2:c1:55:53:19:85:c9:b5:e5:3e:31:13:7e:f9:46:b1:93:9c:
56:a7:17:13:23:93:c0:3c:10:bc:8b:ce:70:38:ad:56:6e:6f:
8a:c7:bd:54:12:e9:cc:7d:7d:33:13:44:6d:80:c0:54:2a:01:
ac:8c:b7:d8:b3:01:e6:a3:33:83:8f:e8:92:95:f1:2e:cf:1f:
c5:34:33:f4:5c:5d:98:fb:e4:3c:13:15:9e:e9:c9:24:a0:eb:
54:ea:80:84:3d:ff:db:bb:14:de:00:e5:68:d6:8b:b6:a0:af:
6a:ba:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 10:05:15 2026 by rpki-client