Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/u6D6IhT01RFHYtXcDxjfNMZBM8M.roa
File: u6D6IhT01RFHYtXcDxjfNMZBM8M.roa (raw, json)
Hash identifier: m6UqHoD9Mb+jAm+l2P3nH+xVGpm69d2EaiSe7G0I0NQ=
Subject key identifier: BB:A0:FA:22:14:F4:D5:11:47:62:D5:DC:0F:18:DF:34:C6:41:33:C3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019D0582C6407DD6DD20E53CC2081F9CEC4D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/u6D6IhT01RFHYtXcDxjfNMZBM8M.roa
Signing time: Thu 19 Mar 2026 09:52:29 +0000
ROA not before: Thu 19 Mar 2026 09:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.47.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:82:c6:40:7d:d6:dd:20:e5:3c:c2:08:1f:9c:ec:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 19 09:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba0fa2214f4d5114762d5dc0f18df34c64133c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:90:00:51:f8:9d:83:1e:c4:83:b9:e3:66:
5e:36:87:f9:1e:de:82:13:bb:37:b5:b6:73:0b:7a:
6d:d2:91:ac:b4:3e:56:fa:d5:6e:33:f1:f4:13:e5:
55:48:85:18:f9:48:05:b0:40:56:39:0d:20:9e:78:
d6:69:d0:d0:8b:c3:4a:77:1b:75:e8:d7:25:88:fb:
77:a3:84:22:ed:68:51:32:47:d4:c0:47:1f:91:61:
b7:c5:b5:b1:3b:2a:a7:f4:d1:3f:73:a8:84:ed:71:
64:cd:2c:0e:87:14:e8:d3:be:34:7d:fa:28:72:29:
6d:50:c3:49:14:03:10:59:42:32:51:67:e3:23:8e:
5f:38:00:32:a7:d0:7b:c3:32:b5:00:3d:5a:aa:33:
d2:02:72:61:f5:30:f2:e5:02:70:f6:51:ab:1f:87:
8b:6e:49:b6:ab:47:2c:e3:41:b7:59:1c:9b:ab:73:
a2:c6:b6:9a:c9:d1:d3:dd:5a:9f:d2:e9:48:63:2d:
23:52:03:08:3a:6e:bb:12:74:8c:29:3e:27:17:91:
f6:73:bb:82:8b:21:57:47:20:9d:12:5d:4a:0d:38:
99:20:ac:17:05:03:f8:dd:84:8e:02:da:9b:b2:7a:
5d:56:0e:2f:e4:91:aa:25:3c:ec:bd:6e:d9:26:41:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:FA:22:14:F4:D5:11:47:62:D5:DC:0F:18:DF:34:C6:41:33:C3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/u6D6IhT01RFHYtXcDxjfNMZBM8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.42.0/23
46.34.47.0/24
46.34.49.0/24
46.34.55.0/24
Signature Algorithm: sha256WithRSAEncryption
48:76:9c:39:25:b3:11:23:70:e6:cd:32:75:17:0c:7f:e6:75:
df:7d:fd:98:97:e0:ba:a6:c1:f1:9e:40:86:3d:8a:5c:ce:ae:
3b:52:39:3c:5a:69:d8:46:e0:01:24:ef:a7:e9:0c:07:f1:de:
f8:5c:3e:31:0f:7e:e6:91:8b:6e:d7:d6:ec:d4:0c:8e:a7:db:
e4:cc:71:ac:99:a0:6e:d4:3c:a5:08:7b:9e:67:3e:f0:f2:98:
3d:36:32:c9:44:fc:8f:51:4a:cb:f6:f6:09:3b:aa:a2:66:c9:
be:42:84:61:b5:b3:14:e6:43:df:62:5b:42:a1:4b:46:c2:60:
55:9d:6d:fa:be:80:36:62:5e:6c:b9:16:db:e4:83:ea:18:d9:
c3:41:85:04:53:80:a7:6a:b9:52:14:91:de:01:ed:58:92:51:
b9:8b:cb:80:af:d9:13:cb:0e:fb:59:0a:6b:90:5a:03:58:f0:
90:76:34:cf:3e:02:66:3e:d2:b8:d0:af:1f:a7:68:8d:5b:66:
78:a3:9c:20:94:b6:08:36:e3:40:61:b0:23:f9:1e:29:65:7e:
85:31:ad:75:29:6c:01:ff:36:72:a2:d6:cf:d5:a5:b6:84:5d:
e8:b5:8e:68:30:00:8d:f1:38:44:c0:6b:f5:2d:64:d7:2c:04:
58:ac:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 16:01:54 2026 by rpki-client