Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/3MxkJ8oImusR-x6YZIDHo7H63Vw.roa
File: 3MxkJ8oImusR-x6YZIDHo7H63Vw.roa (raw, json)
Hash identifier: OGE63mhnkHU2lgMLydoR0MdyRE14meeXr8jQF5XZkts=
Subject key identifier: DC:CC:64:27:CA:08:9A:EB:11:FB:1E:98:64:80:C7:A3:B1:FA:DD:5C
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368D9AACFA4D91D388E029630042F0D
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/3MxkJ8oImusR-x6YZIDHo7H63Vw.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196925
IP address blocks: 46.32.169.0/24 maxlen: 24
46.32.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d9:aa:cf:a4:d9:1d:38:8e:02:96:30:04:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccc6427ca089aeb11fb1e986480c7a3b1fadd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:b6:65:34:af:47:b9:20:0f:a7:f5:4d:6e:e0:
5e:b0:f1:ed:14:21:ac:22:80:8b:64:db:dc:c8:90:
29:15:99:fd:4e:88:2d:3a:1c:97:f4:d8:07:93:9f:
8a:f8:18:94:9e:1f:49:ec:fe:73:c0:da:5c:99:d3:
39:1e:8a:65:9c:f0:61:0e:c2:19:1f:83:a0:23:ce:
74:52:53:cd:85:4d:29:7b:e1:ed:3c:04:58:84:24:
1c:32:93:ad:4f:df:ad:41:0d:7e:fb:03:67:7f:e3:
d6:ea:83:aa:57:09:cd:fc:d7:58:fe:ba:2d:f8:53:
81:d8:0c:0f:d2:d1:49:e0:a9:11:81:d7:11:af:b4:
ea:6f:bc:15:8b:e4:3f:c5:5b:89:80:78:5e:0b:f4:
0e:93:6c:93:f0:fd:b0:a8:4d:7f:d5:63:b6:eb:2c:
41:e9:5e:f7:50:75:ae:c2:f5:4f:0e:b2:22:d5:97:
bb:e8:6f:69:90:6a:da:e1:7b:57:c4:88:de:49:94:
72:cf:2a:09:3c:f0:e6:68:9f:2e:e0:fe:d7:92:5c:
d3:d4:9a:50:05:d1:12:0a:e7:de:b3:5c:8e:71:1b:
8c:f2:04:4f:fb:1c:e8:89:51:bc:ca:b0:08:47:6b:
d6:bb:6a:9b:ec:75:c1:2d:00:75:26:a5:5d:18:a2:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CC:64:27:CA:08:9A:EB:11:FB:1E:98:64:80:C7:A3:B1:FA:DD:5C
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/3MxkJ8oImusR-x6YZIDHo7H63Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.169.0/24
46.32.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:54:72:20:35:24:b3:e6:c8:7f:99:a8:2e:c5:86:b6:35:
7d:56:f3:c3:6e:7c:78:61:dd:e4:7e:4f:8a:7b:78:15:31:b3:
16:3a:6e:6b:91:72:6a:e1:20:19:20:d9:29:7f:a4:55:92:94:
c1:83:60:2f:26:7e:03:54:4d:83:46:36:23:62:09:74:70:93:
89:4b:d8:6d:24:3c:fd:8d:df:34:75:9c:18:98:53:4d:5d:17:
54:ae:84:08:4d:f2:4c:ba:6d:d7:be:0b:bf:63:26:4d:95:ab:
05:bc:b8:69:55:d9:93:5f:91:8e:68:37:69:0b:de:43:56:ff:
97:dd:0a:a4:d7:32:d4:a1:f8:1f:c1:a7:ce:82:54:8b:c0:39:
db:fb:15:70:ea:88:1e:f3:54:59:90:b2:77:0d:64:f7:fb:47:
9e:15:be:4d:d9:cc:8e:b7:89:24:6e:0f:16:55:bb:a5:d6:8a:
77:f4:c2:ae:dd:e4:dc:cd:2a:54:18:f1:42:61:cc:da:e3:20:
e9:eb:96:d2:6d:e0:00:b1:51:fc:cc:53:d7:aa:94:6c:4c:1b:
2f:fb:2a:34:7e:35:b7:98:f5:ec:c2:c2:6f:69:1e:70:c6:88:
84:b1:70:c3:27:b1:68:95:1d:4f:fa:72:7e:06:3d:ef:a5:6b:
ae:a9:03:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaNmqz6TZHTiOApYwBC8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjM1ODUzMTgzOTg0NDc5YTlkNjlmNDBhMTk0ZjBiOGI2
N2UxNjUwHhcNMjYwNzAyMTUxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2NjNjQyN2NhMDg5YWViMTFmYjFlOTg2NDgwYzdhM2IxZmFkZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/LZlNK9HuSAPp/VNbuBesPHtFCGs
IoCLZNvcyJApFZn9TogtOhyX9NgHk5+K+BiUnh9J7P5zwNpcmdM5HoplnPBhDsIZ
H4OgI850UlPNhU0pe+HtPARYhCQcMpOtT9+tQQ1++wNnf+PW6oOqVwnN/NdY/rot
+FOB2AwP0tFJ4KkRgdcRr7Tqb7wVi+Q/xVuJgHheC/QOk2yT8P2wqE1/1WO26yxB
6V73UHWuwvVPDrIi1Ze76G9pkGra4XtXxIjeSZRyzyoJPPDmaJ8u4P7XklzT1JpQ
BdESCufes1yOcRuM8gRP+xzoiVG8yrAIR2vWu2qb7HXBLQB1JqVdGKLCxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNzMZCfKCJrrEfsemGSAx6Ox+t1cMB8GA1UdIwQY
MBaAFG8jWFMYOYRHmp1p9AoZTwuLZ+FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvM014a0o4b0ltdXNSLXg2WVpJREhvN0g2M1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCpAwQA
LiCyMA0GCSqGSIb3DQEBCwUAA4IBAQB6OFRyIDUks+bIf5moLsWGtjV9VvPDbnx4
Yd3kfk+Ke3gVMbMWOm5rkXJq4SAZINkpf6RVkpTBg2AvJn4DVE2DRjYjYgl0cJOJ
S9htJDz9jd80dZwYmFNNXRdUroQITfJMum3Xvgu/YyZNlasFvLhpVdmTX5GOaDdp
C95DVv+X3Qqk1zLUofgfwafOglSLwDnb+xVw6oge81RZkLJ3DWT3+0eeFb5N2cyO
t4kkbg8WVbul1op39MKu3eTczSpUGPFCYcza4yDp65bSbeAAsVH8zFPXqpRsTBsv
+yo0fjW3mPXswsJvaR5wxoiEsXDDJ7FolR1P+nJ+Bj3vpWuuqQMC
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:45 2026 by rpki-client