Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/j-uU8XQlwViTYTY7MMI9THoHjU8.roa
File: j-uU8XQlwViTYTY7MMI9THoHjU8.roa (raw, json)
Hash identifier: jVFaUQIB9Y2fTUDqumECkc/IKMgCwoMMHfvoWihijHQ=
Subject key identifier: 8F:EB:94:F1:74:25:C1:58:93:61:36:3B:30:C2:3D:4C:7A:07:8D:4F
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019F122D25465B1C0A02C79754377A597B74
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/j-uU8XQlwViTYTY7MMI9THoHjU8.roa
Signing time: Mon 29 Jun 2026 06:59:36 +0000
ROA not before: Mon 29 Jun 2026 06:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.46.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2d:25:46:5b:1c:0a:02:c7:97:54:37:7a:59:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 29 06:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8feb94f17425c1589361363b30c23d4c7a078d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:90:61:16:60:fa:86:30:96:54:96:42:a1:
b6:14:36:df:6c:ac:87:7e:54:a0:be:93:be:96:1d:
fe:61:fd:04:c1:47:9e:f9:d5:3f:90:8a:95:77:29:
60:9e:6f:14:bb:58:a0:2c:b7:a8:5a:f8:9e:f8:d4:
aa:f7:97:30:02:b1:c4:5f:34:0c:a2:ff:30:49:0a:
8e:b6:b2:94:08:c0:5e:8d:0f:95:84:6b:15:4d:db:
fb:38:75:76:c9:63:50:ed:9f:d6:74:56:e4:49:16:
d0:c8:59:09:f8:09:ca:70:88:51:7c:99:b7:d9:41:
bc:59:46:da:63:40:7c:36:01:07:a5:c6:dc:26:29:
0f:24:9c:d1:17:08:a2:61:8e:11:c4:07:c6:68:c0:
29:67:2b:4c:a6:6d:d9:6e:ea:6c:60:b1:d8:8a:db:
69:21:c1:0d:50:43:6c:2d:6e:ac:19:e6:8d:fb:6d:
e9:86:75:ba:83:70:3d:39:23:a1:22:19:88:22:64:
43:a5:62:6e:5d:87:10:db:33:db:22:e8:24:f0:e2:
5e:25:52:ed:4d:db:39:e6:79:15:ae:29:18:32:4b:
b2:77:a1:a9:83:88:ce:dd:c8:68:17:1a:27:96:3b:
a0:16:9c:9c:6e:c0:16:6b:82:3d:7d:bd:8e:19:03:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:94:F1:74:25:C1:58:93:61:36:3B:30:C2:3D:4C:7A:07:8D:4F
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/j-uU8XQlwViTYTY7MMI9THoHjU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.46.0/24
46.34.61.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:34:82:89:9e:b4:00:12:1b:71:d0:3e:db:17:bc:bf:8b:86:
2e:03:9b:b2:7e:b2:ec:99:8b:03:1c:10:eb:95:52:47:b3:96:
1d:c7:99:0f:8c:dd:c3:71:0d:07:ea:6f:b3:99:80:f9:d0:6a:
37:2a:e7:b4:8f:69:d6:06:38:9b:0d:c6:0d:7c:7b:48:95:15:
82:35:e9:8b:a7:27:4a:47:c9:05:5f:fb:76:51:3d:38:8c:fc:
1b:3d:85:1a:6b:5b:7f:d4:0c:5a:96:6b:66:0f:f9:e0:1f:ed:
dd:49:ff:90:6f:fe:0d:b8:f7:e5:9a:41:55:9b:a0:51:47:68:
b1:59:c8:5d:de:f7:86:79:86:10:58:6f:69:7c:fe:5a:ae:22:
1a:91:d4:af:38:23:b3:57:de:04:e5:81:2e:56:4f:ab:ce:0f:
48:bf:d3:3a:f2:da:7e:f9:1a:d1:14:d8:3b:12:e2:9a:4b:cd:
82:f3:0c:88:97:f8:3a:18:5e:9e:79:c9:4f:07:7d:1c:0f:c5:
d2:31:c3:dc:7b:d4:6d:23:11:fd:60:38:c7:df:1d:3f:cc:bd:
f4:5e:6d:99:9a:df:7c:84:f8:e5:e3:ae:63:de:69:bb:ea:bf:
20:46:c1:07:80:ff:5f:f8:7d:46:34:34:b9:c4:4b:10:82:e0:
d9:32:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:37:05 2026 by rpki-client