Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bpmPpns8NXqXhoBeSXEyl9tD3Wc.roa
File: bpmPpns8NXqXhoBeSXEyl9tD3Wc.roa (raw, json)
Hash identifier: Za08sUixpYHrDqtvn/E13lJZMTvN30Z+CFyeTnEQbSw=
Subject key identifier: 6E:99:8F:A6:7B:3C:35:7A:97:86:80:5E:49:71:32:97:DB:43:DD:67
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01A15E9857A6DD4664E011376BD728EDCB74
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bpmPpns8NXqXhoBeSXEyl9tD3Wc.roa
Signing time: Wed 21 Oct 2026 13:13:24 +0000
ROA not before: Wed 21 Oct 2026 13:13:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.46.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:98:57:a6:dd:46:64:e0:11:37:6b:d7:28:ed:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 21 13:13:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e998fa67b3c357a9786805e49713297db43dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:0f:8f:ad:52:3e:4b:0c:21:49:c8:33:14:
5e:4d:12:36:b1:9a:83:9f:cf:28:5a:90:aa:cc:42:
69:d6:96:e7:d0:6f:f4:a2:6e:0d:ec:9e:da:71:bf:
df:42:87:56:9e:04:4c:36:f0:ee:65:51:0d:e8:da:
d1:15:a6:e8:99:83:4f:3e:a3:54:6b:a9:93:3f:b2:
f5:c1:b4:d4:49:b4:a5:0d:bd:3f:cd:35:0b:d0:68:
57:09:7f:c0:56:78:9f:f4:67:c2:a8:f7:be:94:98:
fc:a3:61:1a:8b:ab:cd:28:b0:b8:1f:85:54:9b:70:
98:26:ef:5b:42:25:b1:46:e4:1e:29:79:2d:e5:82:
a7:97:73:81:87:bd:83:85:df:76:13:a0:80:ff:a5:
14:a9:8c:7b:1c:0f:7e:2a:05:db:7c:d7:f6:3e:73:
53:69:b3:9f:8c:5e:a6:96:dc:23:a5:ba:83:d8:63:
70:7f:a5:60:84:91:b9:77:2f:02:15:b9:3e:9d:a4:
b3:ce:49:e8:af:42:50:f4:ae:b1:6d:97:46:7b:bc:
0e:05:47:8e:73:23:ea:a3:52:4c:60:d3:32:eb:f1:
9e:b9:9c:ac:e6:3f:6a:f9:03:8b:9e:69:d4:2f:a1:
09:7e:b1:08:ac:ce:25:74:bc:d2:11:c3:83:d6:eb:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:8F:A6:7B:3C:35:7A:97:86:80:5E:49:71:32:97:DB:43:DD:67
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bpmPpns8NXqXhoBeSXEyl9tD3Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.46.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:be:40:82:3a:6c:0f:9d:67:f9:4e:4a:0f:c3:f9:31:d8:1d:
3f:9b:a8:38:3c:32:29:7c:bc:97:0e:80:d4:5a:30:ba:36:01:
82:aa:e5:17:9b:a3:dc:8e:2a:9d:ed:75:1c:cd:eb:0e:1c:45:
c7:3b:e8:e6:a5:94:f2:09:33:0e:c6:63:c3:74:0a:67:f4:c1:
24:02:30:f8:45:53:21:3d:2d:3e:96:6a:dd:67:30:18:03:8d:
bf:8e:6f:2b:50:1c:95:28:a3:c4:01:61:b9:91:54:16:f2:d1:
22:a0:5c:55:96:9a:9d:b5:83:a2:4d:05:d5:2b:ad:98:a0:10:
6d:f0:a4:b4:9b:a6:33:fa:1a:26:51:bb:8f:10:c2:e1:38:c6:
f1:00:af:a4:5a:30:b7:1e:fe:f2:5a:22:a6:76:83:02:b3:c1:
a9:01:85:b9:9c:df:b2:e7:7c:3d:f1:c4:3c:21:bb:f8:ff:0c:
8a:47:4e:d8:f9:16:69:f3:15:60:a9:95:3a:47:f3:c4:da:11:
c7:8f:2b:d0:c9:be:c5:4d:19:53:03:57:8c:86:8c:ef:78:73:
b8:56:a4:79:aa:b1:c5:b4:65:9e:4f:ff:98:fc:c9:53:6b:72:
c7:e7:5d:47:e4:07:f8:38:eb:22:6b:c1:dd:ee:0f:45:20:9f:
b5:48:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:28 2026 by rpki-client