Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/XYmpeIJH65YjUC567k5-bXCwOIk.roa
File: XYmpeIJH65YjUC567k5-bXCwOIk.roa (raw, json)
Hash identifier: TGzLmdVFRaaxUmp41ZkLMQjAlcJfk2nKegIqrkGQ02I=
Subject key identifier: 5D:89:A9:78:82:47:EB:96:23:50:2E:7A:EE:4E:7E:6D:70:B0:38:89
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019FDDA38DD0E0433FF6A4A2D6011E6A55D8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/XYmpeIJH65YjUC567k5-bXCwOIk.roa
Signing time: Fri 07 Aug 2026 19:11:51 +0000
ROA not before: Fri 07 Aug 2026 19:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 46.34.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:a3:8d:d0:e0:43:3f:f6:a4:a2:d6:01:1e:6a:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 7 19:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d89a9788247eb9623502e7aee4e7e6d70b03889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:63:f7:10:7d:79:be:d7:5c:06:6e:79:56:
93:fc:cc:57:54:a9:cc:92:3a:c4:b7:e6:48:b2:3d:
b7:11:05:73:cd:2d:96:57:7b:c2:8c:a4:38:a2:2f:
30:b2:12:69:70:43:19:24:d8:eb:a7:c8:37:7e:6f:
80:5d:d2:2d:86:8d:c0:cf:55:ea:76:09:5a:78:28:
9f:ac:b9:d5:e2:08:17:78:8c:6f:68:e2:ea:9c:d7:
eb:e6:0a:f0:e7:d5:50:df:5c:70:30:db:99:6e:b4:
2d:fe:05:5a:bd:3c:bd:af:85:ea:a4:d1:4c:69:30:
a7:83:50:01:9f:d6:f2:a7:57:f5:94:b9:3b:81:cf:
d7:62:c0:77:c6:ef:53:79:e8:34:fd:a3:0d:93:c4:
a3:4a:21:e9:a1:5e:14:4e:f2:b5:02:5d:56:6c:8c:
29:ab:45:2a:84:44:e5:6c:c2:54:c2:8e:f9:d8:d6:
bd:ef:f9:29:14:a3:04:dd:2a:71:d5:48:27:d3:a3:
34:fe:e1:66:aa:34:21:ff:b4:d9:24:5e:33:22:ed:
7a:66:0b:4d:81:15:4b:cc:53:78:d8:0d:77:68:93:
74:a0:ea:2f:8b:df:9d:66:cc:fb:8a:7a:40:a5:52:
e3:18:ca:24:3c:be:3d:dc:02:c2:3b:3d:b0:cd:43:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:A9:78:82:47:EB:96:23:50:2E:7A:EE:4E:7E:6D:70:B0:38:89
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/XYmpeIJH65YjUC567k5-bXCwOIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:05:2e:c6:64:7c:96:36:99:3d:b0:35:79:3a:bb:ff:5b:d0:
d1:1c:15:c3:67:82:67:f8:99:b4:ab:8d:96:34:ea:e4:75:fe:
7d:b6:a8:09:ad:36:b2:e7:6c:92:fb:7d:6e:c6:fa:ca:76:b9:
37:a1:e4:a6:06:ec:b0:4f:75:8c:59:a4:bc:f0:b4:ca:40:ba:
2b:6e:03:b9:99:34:b1:aa:78:9c:f7:a9:8c:99:f3:35:92:65:
ed:ad:ce:e8:e9:f3:d6:70:83:97:42:4e:47:4c:1f:88:64:03:
2e:c1:84:e8:b7:dd:af:d5:f3:40:f4:f3:17:1f:8d:67:27:42:
93:21:dc:eb:2e:31:63:de:f3:21:00:7a:94:27:f8:54:10:2e:
b2:5e:ce:1c:54:b5:d0:31:50:88:1a:82:87:45:cc:f9:d4:8c:
e2:c7:8b:d1:47:85:5c:b7:56:5d:3d:e0:46:fc:93:aa:be:c5:
60:8d:76:4d:59:f6:f7:48:c4:00:67:a3:93:3c:9c:a8:a2:29:
3a:02:02:ad:dc:95:49:0a:0e:84:c3:21:f3:95:89:79:2f:39:
d8:a9:52:3b:31:a6:f6:6c:09:fd:17:64:b9:e1:2a:ed:ac:52:
85:9d:49:d0:29:5f:e3:c3:df:ef:4a:1a:1a:da:4c:a4:d5:af:
35:c7:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:14 2026 by rpki-client