Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2exHTG_aSt5CNo1rRMuerRwv_74.roa
File: 2exHTG_aSt5CNo1rRMuerRwv_74.roa (raw, json)
Hash identifier: LuGUCyvu2+O9sllmPapMGeR+ZZztVyQW5v2eV1Q6t+U=
Subject key identifier: D9:EC:47:4C:6F:DA:4A:DE:42:36:8D:6B:44:CB:9E:AD:1C:2F:FF:BE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01A13F51E11B2DCDD5DA82042C80A9D03EB0
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2exHTG_aSt5CNo1rRMuerRwv_74.roa
Signing time: Thu 15 Oct 2026 11:28:12 +0000
ROA not before: Thu 15 Oct 2026 11:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 46.34.50.0/24 maxlen: 24
46.34.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:51:e1:1b:2d:cd:d5:da:82:04:2c:80:a9:d0:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 15 11:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9ec474c6fda4ade42368d6b44cb9ead1c2fffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:df:9e:f1:1f:5a:a6:8b:84:9a:f5:9b:08:
0c:ba:cb:45:65:ce:75:ba:36:90:55:c8:0c:60:14:
55:64:ab:47:48:e6:10:21:9a:db:47:9e:86:4f:a3:
ad:b3:76:de:be:b1:d4:e0:91:92:1f:73:a8:f3:5c:
d7:44:77:cc:bf:11:02:d0:eb:bf:14:65:40:2d:0c:
5d:e8:f4:4c:bd:5c:db:5a:00:c8:a9:4a:b4:b6:04:
27:6d:77:5c:8b:3f:9a:68:97:cb:da:f4:9a:5e:4f:
40:c5:ae:c9:84:13:64:f4:a7:e0:53:8c:fd:72:3c:
08:ba:63:c8:75:44:f2:78:ef:1f:53:65:7c:b6:24:
9f:28:09:c3:f0:4c:95:d6:70:77:fd:30:d9:54:2c:
e7:65:19:7f:a5:b5:6a:96:89:a0:22:1b:b6:e3:a5:
55:8c:70:59:10:ce:45:e7:36:b0:c7:ec:ad:fc:f6:
58:79:f5:b4:ce:6d:d8:c3:5e:23:26:b3:4f:2e:e6:
72:60:a7:cf:e0:73:35:75:9d:31:ee:f0:94:23:04:
25:79:c9:f5:41:90:57:6d:8a:fc:74:10:04:e1:63:
44:d6:d0:10:34:de:78:21:6b:fc:29:f7:ac:01:ba:
69:3d:6f:8d:f4:ee:dc:19:d4:41:cf:c3:bb:cd:1b:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:47:4C:6F:DA:4A:DE:42:36:8D:6B:44:CB:9E:AD:1C:2F:FF:BE
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2exHTG_aSt5CNo1rRMuerRwv_74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c2:e8:7f:da:53:cd:50:9c:73:85:12:19:df:c2:f7:28:f7:
b4:d6:ef:9b:01:e3:b6:b6:8e:7c:35:e5:56:72:7d:df:02:67:
55:ad:fd:02:d5:26:91:35:97:9c:e1:58:b0:1d:ff:f1:fb:37:
89:84:16:14:df:70:a9:cb:4d:dc:1d:2b:b1:7e:bf:38:b0:6b:
e5:1d:1a:e4:db:da:3e:2c:bf:78:04:21:53:20:f3:d3:7b:5a:
6d:14:aa:03:38:7d:d3:6d:4a:c5:3a:52:8b:0a:ca:c3:3d:0e:
c7:24:44:eb:a0:b6:44:3d:70:ed:cd:55:e6:e4:01:25:44:92:
0f:6e:17:ea:92:5c:38:52:a5:3a:e7:e4:63:a2:b3:c2:8c:bf:
1a:14:4c:7e:cd:54:eb:a5:5b:f5:3f:8a:67:b6:ee:47:e8:62:
b7:93:f0:6c:ca:65:8b:04:91:1f:14:21:df:db:3d:e7:2a:42:
41:68:fe:a0:7b:43:3e:5e:2d:ca:66:ae:c6:01:fe:1f:b7:fe:
9f:ee:34:d7:9c:4a:34:e1:99:5d:d6:eb:3b:b5:f3:1c:ed:a6:
e9:4f:54:36:5b:7c:2f:37:b2:2b:20:d6:92:bb:eb:a4:46:50:
46:da:67:f5:93:d4:de:51:9d:ff:44:75:c8:cc:bf:19:c4:31:
d7:d8:fb:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/UeEbLc3V2oIELICp0D6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYxMDE1MTEyODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWVjNDc0YzZmZGE0YWRlNDIzNjhkNmI0NGNiOWVhZDFjMmZmZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpHfnvEfWqaLhJr1mwgMustFZc51
ujaQVcgMYBRVZKtHSOYQIZrbR56GT6Ots3bevrHU4JGSH3Oo81zXRHfMvxEC0Ou/
FGVALQxd6PRMvVzbWgDIqUq0tgQnbXdciz+aaJfL2vSaXk9Axa7JhBNk9KfgU4z9
cjwIumPIdUTyeO8fU2V8tiSfKAnD8EyV1nB3/TDZVCznZRl/pbVqlomgIhu246VV
jHBZEM5F5zawx+yt/PZYefW0zm3Yw14jJrNPLuZyYKfP4HM1dZ0x7vCUIwQlecn1
QZBXbYr8dBAE4WNE1tAQNN54IWv8KfesAbppPW+N9O7cGdRBz8O7zRvuVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNnsR0xv2kreQjaNa0TLnq0cL/++MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvMmV4SFRHX2FTdDVDTm8xclJNdWVyUnd2Xzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiIyMA0G
CSqGSIb3DQEBCwUAA4IBAQBfwuh/2lPNUJxzhRIZ38L3KPe01u+bAeO2to58NeVW
cn3fAmdVrf0C1SaRNZec4ViwHf/x+zeJhBYU33Cpy03cHSuxfr84sGvlHRrk29o+
LL94BCFTIPPTe1ptFKoDOH3TbUrFOlKLCsrDPQ7HJETroLZEPXDtzVXm5AElRJIP
bhfqklw4UqU65+RjorPCjL8aFEx+zVTrpVv1P4pntu5H6GK3k/BsymWLBJEfFCHf
2z3nKkJBaP6ge0M+Xi3KZq7GAf4ft/6f7jTXnEo04Zld1us7tfMc7abpT1Q2W3wv
N7IrINaSu+ukRlBG2mf1k9TeUZ3/RHXIzL8ZxDHX2PtV
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:39:53 2026 by rpki-client