Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fykbCHzRibVEcWVad6TchAMiWrs.roa
File: fykbCHzRibVEcWVad6TchAMiWrs.roa (raw, json)
Hash identifier: Kbv7N0q9UC5ILNGECr+bkKin5ys28eiwG1Q3Ng7FBWQ=
Subject key identifier: 7F:29:1B:08:7C:D1:89:B5:44:71:65:5A:77:A4:DC:84:03:22:5A:BB
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019FDDA38E4E14CB45FF698F558E1BD8D02D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fykbCHzRibVEcWVad6TchAMiWrs.roa
Signing time: Fri 07 Aug 2026 19:11:51 +0000
ROA not before: Fri 07 Aug 2026 19:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.46.0/24 maxlen: 24
46.34.51.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:a3:8e:4e:14:cb:45:ff:69:8f:55:8e:1b:d8:d0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 7 19:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f291b087cd189b54471655a77a4dc8403225abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:b4:da:d8:a1:36:28:2c:2c:d9:32:33:d6:
af:f4:80:55:04:cc:37:55:ac:c0:e8:93:bb:f6:85:
4c:c2:2d:68:51:2a:99:98:85:b3:dc:c5:27:ba:32:
64:9c:ef:8d:9c:fe:72:5d:b1:8b:2e:e4:e3:95:5e:
e8:1b:d8:e9:45:b7:e6:a7:aa:8c:5e:2b:21:69:22:
30:fa:d5:ea:eb:c9:28:a7:47:4c:99:53:38:66:5d:
61:60:c6:9e:fe:d7:df:f2:82:68:ed:71:7e:57:87:
37:a4:95:ab:02:f0:0f:b1:7d:40:5b:d6:9a:ad:52:
c6:45:09:27:46:44:b5:c7:e3:08:e4:39:88:16:6e:
d5:fc:fd:6c:d2:28:a3:82:53:e5:d7:b4:63:a4:6f:
13:28:e4:da:22:70:1e:73:b9:84:bc:b8:4e:01:82:
2f:6a:8d:c9:cd:cb:ce:f6:32:4c:c9:fe:a4:05:fd:
72:f5:1f:33:8d:4a:7d:f6:44:36:7a:c1:66:77:00:
ef:9f:cc:96:60:63:27:45:c0:73:43:f6:17:5c:8d:
7f:81:46:d8:88:da:0a:5f:a2:8a:52:ab:cd:96:85:
88:37:8b:fa:0a:62:bb:1a:86:76:f4:a4:b2:87:c8:
b4:11:fa:fc:e0:e2:d1:1e:03:3a:7b:04:23:b7:b8:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:1B:08:7C:D1:89:B5:44:71:65:5A:77:A4:DC:84:03:22:5A:BB
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fykbCHzRibVEcWVad6TchAMiWrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.46.0/24
46.34.51.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b3:78:0e:60:53:10:84:11:04:8d:7c:48:6d:08:b0:be:ec:
18:c8:aa:1d:1e:13:38:da:94:b7:ef:ff:d9:48:1a:11:54:08:
ac:bd:6b:65:2b:80:ca:df:39:44:31:28:9a:ae:5c:48:54:58:
3c:db:14:8b:2b:dc:ab:d0:ff:32:d2:27:16:a9:d2:f5:67:0b:
0c:25:4b:0a:9d:e5:82:1d:19:96:cc:a4:43:02:99:98:f9:ad:
74:4d:d4:60:b5:a2:b8:1f:8f:84:b9:3e:89:93:2e:f1:fc:8d:
63:86:88:43:41:b7:75:af:3b:c2:c3:81:33:9f:f8:85:ee:dc:
27:6d:c2:d0:20:5b:ae:dd:2f:f0:9d:02:97:98:c2:d2:3e:d6:
69:e9:4b:4b:97:62:8f:71:4e:eb:0b:47:76:ce:e2:8b:c0:9e:
31:3f:97:20:af:6a:ba:c0:69:e9:f8:92:50:68:97:aa:49:f5:
02:8c:b4:f9:5f:59:40:9e:b7:c7:3e:e2:f9:31:9c:a4:ac:51:
63:6e:8e:9a:d3:8c:12:de:b1:12:62:8e:ed:77:60:9b:b2:67:
bc:77:59:a0:d2:bd:53:34:25:56:f8:13:39:98:04:e1:dc:e7:
bc:89:ec:f4:26:fc:50:f3:72:a8:ec:c6:87:28:85:45:d8:cd:
79:50:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:32 2026 by rpki-client