Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9EELKgk7YXr6QiSeinApyGlwoOg.roa
File: 9EELKgk7YXr6QiSeinApyGlwoOg.roa (raw, json)
Hash identifier: 65EuDdRjxCNjT0cpt3YcmI/39MhqamhYj7mC3NNKwG4=
Subject key identifier: F4:41:0B:2A:09:3B:61:7A:FA:42:24:9E:8A:70:29:C8:69:70:A0:E8
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DC3E4459C1DBB0B5334F4697424A
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9EELKgk7YXr6QiSeinApyGlwoOg.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.160.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.166.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.172.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:3e:44:59:c1:db:b0:b5:33:4f:46:97:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4410b2a093b617afa42249e8a7029c86970a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:44:6f:7d:3e:a7:ce:50:57:10:81:b7:36:
16:a5:21:f5:bc:c1:65:4a:f8:2a:55:9c:1d:cb:82:
57:d2:4b:0e:b7:42:78:40:46:3d:d5:bf:3e:95:8b:
c2:95:76:b0:a5:ad:8a:0a:0c:67:72:9b:af:84:f5:
bf:20:70:31:81:b4:19:4a:25:4e:4c:3e:11:4d:1c:
13:ae:e5:51:2d:dd:32:31:5d:57:3f:ca:cc:ae:86:
6f:77:be:85:28:8d:d4:8b:19:c9:69:90:66:22:3e:
3d:2c:0a:b4:6d:36:53:9b:a7:dc:63:ff:27:ab:8b:
71:e8:e4:5a:59:59:50:01:7c:43:9e:cd:d1:bd:82:
ce:62:a7:f5:e8:8e:c9:a3:73:4f:89:8b:e6:60:39:
30:3a:9b:48:dc:ce:3b:65:18:0c:f3:16:00:1c:ee:
05:83:66:04:a2:e9:ff:44:9b:24:e2:d0:8c:8b:72:
8b:60:cd:21:ca:f5:74:fe:5f:a8:d2:5a:e7:8f:7c:
0a:a3:50:d1:5a:9e:82:23:22:ea:20:ec:ce:bb:56:
6f:55:d8:17:82:1a:d4:27:aa:2e:8c:6c:3e:33:03:
f7:b2:64:b4:94:36:15:87:ed:c5:ff:ae:8b:ab:a6:
38:19:3e:fc:56:65:7c:7c:f3:59:37:dc:2f:1a:5c:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:41:0B:2A:09:3B:61:7A:FA:42:24:9E:8A:70:29:C8:69:70:A0:E8
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9EELKgk7YXr6QiSeinApyGlwoOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0/23
46.32.164.0/22
46.32.170.0-46.32.172.255
46.32.189.0-46.32.191.255
Signature Algorithm: sha256WithRSAEncryption
5a:da:7f:dc:10:f0:c6:7d:70:86:ee:b6:3e:77:0f:6b:0a:48:
f7:a2:2a:19:85:25:d7:1b:b4:47:2c:e3:fd:69:48:ba:1a:f2:
c7:1b:24:11:87:95:d1:0a:34:c0:b8:e2:e1:e7:14:75:0d:c4:
bd:79:8d:1a:1b:bc:70:6b:93:e6:46:4d:d4:3f:ba:fe:0c:10:
94:61:6d:47:2b:76:99:59:81:8a:40:6b:29:43:8d:57:9a:64:
9b:95:54:34:52:51:77:cf:6f:40:55:fa:b5:97:12:48:70:55:
ab:24:ea:a0:6d:9d:36:d9:a8:1a:3a:2b:6d:5e:a1:4c:e6:e1:
ac:4d:cd:b4:ac:02:3d:c8:b7:f1:24:6e:8d:6f:21:1e:4a:10:
82:db:92:94:a8:5f:ee:c5:64:35:cd:e6:ff:b4:e3:81:9c:21:
da:b7:96:32:ac:84:d5:a1:ca:3e:1b:3f:fe:cc:9f:c9:35:48:
de:6f:da:b5:37:56:f5:d7:6f:f8:19:ea:59:fd:60:39:f7:69:
90:55:eb:af:91:f2:a9:7d:7f:b2:90:6f:88:65:2c:fc:36:12:
92:be:e0:fa:38:8c:46:dc:69:92:3e:48:57:2b:27:ef:a5:a8:
93:77:18:1c:fe:da:b8:30:36:51:a2:1e:5b:de:ff:f6:4b:96:
ca:54:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:17 2026 by rpki-client