Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa
File: HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa (raw, json)
Hash identifier: el4hRvXmm03w/ouApdicwVDgwdfDa1Ax7skb82xPN74=
Subject key identifier: 1C:4F:5C:CA:6D:C9:19:CC:60:5B:83:47:8E:83:DA:E5:17:0C:A7:96
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DB06D22E4DCE659D2853930E8BCD
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.163.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:db:06:d2:2e:4d:ce:65:9d:28:53:93:0e:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c4f5cca6dc919cc605b83478e83dae5170ca796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:69:b5:ba:e8:25:62:e2:02:39:60:20:63:
79:12:b2:7d:da:81:69:cb:d7:67:f3:1b:28:51:94:
48:cc:7d:e5:45:eb:04:d9:b7:33:c3:f8:58:a3:95:
66:6f:b5:8d:de:de:ff:77:3f:de:a4:fa:06:30:7a:
3a:0b:06:61:50:b0:19:17:91:34:0a:44:f1:2c:78:
e2:a6:87:f2:dc:51:fe:af:8d:99:ae:1d:a1:db:65:
67:3b:f2:cf:52:c0:44:c6:26:63:b7:7b:9f:7d:5c:
88:a1:55:40:c0:d1:6f:63:6d:f2:44:e9:84:ac:e0:
e5:9f:c3:65:c3:83:0b:2a:bd:a8:48:c9:97:6d:b2:
ce:da:97:e8:b8:3f:44:09:ce:ef:19:56:1d:ce:e9:
91:11:15:d7:e9:79:55:65:56:81:c7:71:ff:9f:d0:
12:0c:f9:14:40:b8:b8:7a:88:96:c7:b9:eb:4e:f6:
7c:40:79:ff:d7:5e:98:25:e4:ae:38:80:40:b4:a3:
85:d4:99:f0:4d:ba:f5:e0:f5:e4:8a:6a:57:4c:72:
67:14:4f:98:fa:fc:25:40:c2:82:68:de:66:9d:b6:
df:17:cc:42:cc:f3:cd:08:4e:fd:6a:03:90:37:1d:
0d:0e:f4:34:dc:e4:65:29:cf:3c:0e:e1:09:50:a2:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:5C:CA:6D:C9:19:CC:60:5B:83:47:8E:83:DA:E5:17:0C:A7:96
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/HE9cym3JGcxgW4NHjoPa5RcMp5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.163.0/24
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8a:1f:ef:81:60:d6:a2:97:38:fc:1c:e4:b0:35:c4:60:7d:
ba:e3:9b:bf:0d:2c:41:26:f7:2d:d3:be:b1:32:e2:24:3a:1e:
61:de:72:30:20:ca:44:65:9a:86:5f:59:c6:c5:56:af:e2:9f:
7c:43:8e:6d:7d:20:28:2c:03:1d:18:14:de:09:9f:c7:1c:31:
41:b9:63:94:00:8f:1c:22:9e:93:e1:1f:ee:1d:5c:aa:09:b4:
86:43:7f:a9:95:40:1c:25:1a:7b:46:c2:57:5b:ea:24:e0:53:
ae:cd:8a:04:c0:d0:00:82:0c:ca:70:49:f8:4c:69:f7:9b:71:
81:ba:4e:f6:c1:47:9b:83:8a:c5:d9:47:74:ed:05:60:39:d5:
0f:23:99:66:45:05:88:25:18:78:26:70:c7:d2:33:5a:4a:16:
27:c0:08:1f:e3:4e:24:e8:08:70:18:a8:6b:73:18:52:7b:75:
8d:af:40:b3:c9:91:60:07:5c:09:40:db:7e:11:07:43:f3:e1:
da:6a:7a:c9:5c:90:57:1d:a7:12:89:5b:7a:8f:d0:0d:d7:08:
d0:18:d4:a1:48:a4:92:c6:f9:6f:21:5f:bc:80:8f:f9:7d:cd:
cd:8e:79:36:6d:fb:97:da:34:5a:e7:d8:00:d6:3d:75:a8:51:
a8:16:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:43 2026 by rpki-client