Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/T_xDi95HD1nteKJli0cMn3EBkj8.roa
File: T_xDi95HD1nteKJli0cMn3EBkj8.roa (raw, json)
Hash identifier: Xq8IzBwDCYJWesEBpVmQoKkNHCu712jGtRR1YJUwPvE=
Subject key identifier: 4F:FC:43:8B:DE:47:0F:59:ED:78:A2:65:8B:47:0C:9F:71:01:92:3F
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01A15E985741238E1068EDF69315039E9B8F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/T_xDi95HD1nteKJli0cMn3EBkj8.roa
Signing time: Wed 21 Oct 2026 13:13:24 +0000
ROA not before: Wed 21 Oct 2026 13:13:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:98:57:41:23:8e:10:68:ed:f6:93:15:03:9e:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 21 13:13:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ffc438bde470f59ed78a2658b470c9f7101923f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:3c:df:9a:5d:9a:72:d1:f3:a8:1c:5a:ed:
eb:ed:62:b3:8e:66:ce:5c:d6:53:7e:f4:6c:fc:94:
47:f6:4a:cb:bc:90:47:08:25:3f:fe:61:69:8b:86:
1e:30:61:c2:16:f5:c7:b5:61:71:e1:a3:b6:06:f6:
e4:42:b0:74:a8:f2:50:0f:f9:2e:56:c9:14:5c:35:
9b:ba:2c:d8:3b:7e:d4:85:93:a0:f0:51:7f:1f:f4:
b5:1b:d5:7d:c0:2b:67:98:cf:24:9c:aa:b1:9e:4e:
22:dd:7e:1a:25:1b:5c:42:af:ed:f3:88:e3:05:a2:
ab:f3:11:d7:97:d1:24:4e:5e:d0:91:82:0c:62:53:
8f:53:9e:80:71:ce:81:b5:f1:f7:1d:0e:7c:11:bd:
96:29:30:80:02:14:e4:eb:dc:ae:4b:d2:0c:76:28:
db:c2:3d:54:6a:9a:a6:eb:23:f5:b6:95:88:65:ad:
ab:6e:13:92:02:ce:3c:ea:2e:68:59:ff:51:ee:cc:
5a:57:1c:c4:0f:47:54:f1:c6:61:c7:51:f7:c9:37:
6f:cd:7f:38:ec:12:28:97:17:4f:1b:42:55:b5:c6:
5f:15:7d:33:62:aa:70:e8:a1:04:2b:b8:33:1d:61:
e3:80:d3:29:27:64:fa:56:38:45:a5:d6:cc:44:65:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FC:43:8B:DE:47:0F:59:ED:78:A2:65:8B:47:0C:9F:71:01:92:3F
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/T_xDi95HD1nteKJli0cMn3EBkj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6c:6f:70:f5:2a:7f:b7:2a:55:9d:26:6d:21:db:9a:c2:06:
8f:00:64:81:dc:46:36:41:d5:29:71:37:91:41:0c:eb:9d:49:
a9:6c:62:1c:5b:da:d0:1c:05:42:18:60:cb:e3:a7:9a:e4:f6:
b0:1b:98:1f:98:2d:73:63:ce:3f:98:30:96:7b:7d:9e:a4:a8:
85:6e:8d:3e:d7:32:59:10:55:14:19:99:bd:d7:16:28:46:1a:
6d:bc:cb:f8:6e:12:85:97:97:d2:00:72:a8:92:71:5b:6f:58:
5c:dd:84:b9:ff:a2:08:1e:92:84:7b:ee:8d:90:bb:3a:e4:33:
58:13:bd:91:bd:1a:f6:e2:01:1b:53:4a:22:99:72:eb:f5:d5:
08:8f:49:95:ee:a4:b4:53:2a:ac:a7:94:cc:75:c6:e6:a9:94:
dd:10:7a:26:8f:b2:48:eb:db:d6:74:ad:8b:c8:ff:f1:75:0c:
0a:e4:5e:2f:89:24:2e:b4:83:9a:c1:fe:ac:d8:f4:29:a0:2f:
20:44:50:71:50:5d:6a:f2:c9:e2:5e:a4:4a:b0:92:d5:0e:b7:
a4:7e:39:0b:72:c0:94:00:54:f9:6f:c7:7e:fd:35:ba:b3:69:
87:61:d4:7f:2c:37:ef:41:b6:6b:99:f9:49:a0:19:40:6b:bb:
78:73:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:32 2026 by rpki-client