Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/AUaN_d3P8p-a3G9MXBdbFbttw0I.roa
File: AUaN_d3P8p-a3G9MXBdbFbttw0I.roa (raw, json)
Hash identifier: SEOUmcZd0WH3BJHYd8E0islvyo0HeJdNxtoBcNVaYuQ=
Subject key identifier: 01:46:8D:FD:DD:CF:F2:9F:9A:DC:6F:4C:5C:17:5B:15:BB:6D:C3:42
Certificate issuer: /CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Certificate serial: 019A587B78305507024099C03D7F31F924C2
Authority key identifier: 72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/AUaN_d3P8p-a3G9MXBdbFbttw0I.roa
Signing time: Thu 06 Nov 2025 09:24:37 +0000
ROA not before: Thu 06 Nov 2025 09:24:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213059
IP address blocks: 46.247.34.0/23 maxlen: 24
2a06:e500::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:7b:78:30:55:07:02:40:99:c0:3d:7f:31:f9:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7246834d1e49a2fa2746dc3f66d70c22d50f46f9
Validity
Not Before: Nov 6 09:24:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01468dfdddcff29f9adc6f4c5c175b15bb6dc342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:f0:57:6e:bd:6f:d0:a8:2a:77:ec:cd:01:
28:98:f6:43:92:be:da:1b:e3:3d:b5:d1:dc:08:5d:
83:12:03:f3:5c:2a:eb:5a:b1:48:75:1b:44:2d:bf:
1f:7d:f2:a0:10:59:a6:34:7a:dc:3e:93:71:41:2c:
eb:0c:a5:a4:31:f2:1f:b8:53:8b:c9:fa:e5:3a:59:
50:a9:47:30:3b:40:b8:c7:0e:83:db:b8:6e:aa:81:
29:91:84:b4:53:78:90:52:ba:82:dd:32:20:3d:6a:
2e:d8:d5:22:9a:fb:02:82:24:bd:4c:9f:2e:57:23:
46:75:c0:e3:a6:4e:ee:42:35:e8:10:b6:d0:18:ef:
89:76:37:f2:f5:8e:6c:81:26:03:41:fb:8b:96:09:
fb:52:59:9d:1e:90:1f:f1:a0:9f:ca:6b:da:3a:8c:
b3:57:8d:ef:51:7d:eb:aa:13:5c:84:96:93:8d:3e:
c2:ba:c5:4c:86:9e:38:c8:f3:0c:c8:a0:e8:b6:9f:
c0:a4:87:d4:f4:a5:6e:ba:03:bd:07:bf:ec:7f:d2:
4d:63:19:35:1c:53:da:d2:cc:98:a4:7a:2c:c2:9b:
60:ab:3e:f3:0b:4a:8f:fe:a9:35:81:cd:eb:96:b0:
05:24:21:68:d2:0e:3f:f7:95:fa:46:bf:c9:ad:26:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:8D:FD:DD:CF:F2:9F:9A:DC:6F:4C:5C:17:5B:15:BB:6D:C3:42
X509v3 Authority Key Identifier:
keyid:72:46:83:4D:1E:49:A2:FA:27:46:DC:3F:66:D7:0C:22:D5:0F:46:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckaDTR5JovonRtw_ZtcMItUPRvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/AUaN_d3P8p-a3G9MXBdbFbttw0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/176e94-2ee5-4f2f-a740-832461b84df3/1/ckaDTR5JovonRtw_ZtcMItUPRvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.34.0/23
IPv6:
2a06:e500::/29
Signature Algorithm: sha256WithRSAEncryption
23:af:b8:86:57:3c:a0:4a:9b:64:0e:aa:70:75:d3:ea:8a:58:
f7:14:d6:fe:ba:7c:d9:ce:4d:28:de:d4:e1:a3:1f:14:26:2f:
de:3f:39:70:49:f0:ab:57:c0:29:1e:3e:bb:6b:ee:a7:e6:eb:
57:74:74:bf:0f:ea:26:82:1b:97:d1:9c:fa:24:a6:63:76:d5:
24:87:61:a4:cd:e0:b7:fc:ff:2b:8e:eb:2f:78:c0:41:5c:4d:
f1:72:c2:eb:d9:ef:30:89:35:07:f5:1f:61:ab:2d:6b:b6:f3:
af:17:b2:6b:72:3f:32:62:bb:6a:4e:a9:11:75:97:89:04:2b:
a0:2e:73:7e:0a:ad:29:5c:3e:0e:00:71:3f:c0:10:54:12:5a:
42:ae:94:a2:20:28:82:dc:ef:46:a1:50:53:2f:38:74:c4:35:
dc:4a:57:24:a9:67:b3:2c:c5:7b:71:90:2a:c2:41:19:a3:63:
fe:67:79:11:6b:64:83:96:06:47:3f:9d:0d:5e:b8:d6:42:86:
a1:f8:4a:f8:51:1c:8c:7d:3d:38:65:74:04:c1:83:15:76:d8:
67:8b:d3:36:dd:2b:96:05:a6:4e:4b:e3:90:3e:1e:ca:a4:ce:
e9:f3:7f:31:c5:ae:b0:3f:58:d4:33:66:99:6a:36:26:58:c0:
73:7e:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:02 2025 by rpki-client