Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f4zwtL9yDlyUnjdAJ1R4k7af1kw.roa
File: f4zwtL9yDlyUnjdAJ1R4k7af1kw.roa (raw, json)
Hash identifier: wP+Vy/THsBjGNZ87voV+yAh7tZJziVysnjOpiYLM/Nk=
Subject key identifier: 7F:8C:F0:B4:BF:72:0E:5C:94:9E:37:40:27:54:78:93:B6:9F:D6:4C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01A01A6083D34C42601242D7B979A7AFCE5B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f4zwtL9yDlyUnjdAJ1R4k7af1kw.roa
Signing time: Wed 19 Aug 2026 14:15:27 +0000
ROA not before: Wed 19 Aug 2026 14:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.47.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:60:83:d3:4c:42:60:12:42:d7:b9:79:a7:af:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 19 14:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f8cf0b4bf720e5c949e374027547893b69fd64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:64:c2:d5:ab:d3:15:d4:e2:d2:ba:3d:c9:
f3:a9:ae:ea:96:1f:ca:88:07:88:5e:77:84:8b:77:
f7:53:77:7c:22:14:c8:bb:ff:51:e2:6e:4e:a7:94:
ef:0c:46:ad:47:6c:02:1d:f5:dc:60:eb:53:2c:3e:
7d:ab:6d:1c:d6:73:57:07:2f:f0:cf:c7:1b:9c:06:
12:3e:7c:ec:74:1d:98:f0:b5:37:8e:73:91:f7:19:
19:b9:60:c5:47:7e:58:7c:7e:c1:fe:79:8f:f4:9f:
81:f1:73:a4:6d:a0:b6:02:36:17:d2:c5:51:6c:5d:
8e:d5:41:75:04:12:ce:2d:92:ae:f1:9f:9c:1b:e7:
01:07:2f:5d:0b:11:1f:67:cb:05:71:96:d5:9d:87:
5d:12:85:29:fc:fb:8c:8c:df:5e:10:a0:9b:68:f6:
c1:ea:3e:cb:b3:4b:6c:b6:ed:d6:eb:43:91:90:b0:
74:40:8d:50:e1:2c:b6:fc:a3:d0:44:9b:7c:2b:84:
16:f7:5d:01:35:5b:85:1e:e2:e6:ac:bb:02:be:01:
3b:62:89:b4:14:eb:cc:5d:12:0f:47:e5:38:8d:eb:
a0:0a:16:eb:40:6f:84:d6:2b:21:bc:3f:70:48:0b:
e6:f8:56:32:82:4b:15:d0:99:f6:77:7b:62:fe:0a:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:F0:B4:BF:72:0E:5C:94:9E:37:40:27:54:78:93:B6:9F:D6:4C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f4zwtL9yDlyUnjdAJ1R4k7af1kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.42.0/23
46.34.47.0/24
46.34.49.0/24
46.34.55.0/24
46.34.58.0/24
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fa:2b:76:fe:1b:7e:7b:1b:08:01:ef:be:d4:0e:fa:b7:de:
cf:d0:e2:b3:69:40:09:ba:55:aa:5a:bd:0d:4e:0c:52:78:96:
56:1e:e8:ad:21:85:6b:3f:ab:52:26:1d:c7:f0:6d:a6:e7:6e:
4d:1a:9c:ba:f3:29:94:3d:27:04:15:1c:a3:af:bf:57:e6:12:
3f:26:b9:50:05:5d:99:73:59:cf:8d:c2:a9:a0:c5:3b:60:58:
2d:b7:e0:6e:e5:82:b4:69:09:2a:87:fc:8f:0b:1c:25:32:00:
a1:54:1f:c7:31:a5:bb:bd:7b:23:fb:9c:22:d2:9c:5e:54:5d:
3b:d7:94:bd:75:e0:1d:9d:ec:b0:4c:bf:e2:41:54:7b:64:55:
6b:a5:64:e4:3c:1d:dc:81:72:b2:5a:06:2f:ee:eb:ff:d6:c9:
ec:03:43:b2:e3:43:b1:2f:bf:8b:e0:05:a6:58:4a:cd:f6:46:
d1:73:38:29:ed:27:6a:48:5b:26:29:14:51:64:9a:ca:4d:8e:
c4:f2:d2:d9:d7:9d:97:da:b9:61:99:ad:63:4a:68:42:b0:66:
44:07:1b:6a:8c:1b:e9:22:f4:14:65:1b:8b:f4:c5:d1:03:c5:
37:6f:2f:13:bf:d4:94:a3:78:15:17:97:ca:da:08:18:15:74:
81:64:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:52 2026 by rpki-client