Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/bLnM1uG-nQ6viHr57B8AwUnkTnA.roa
File: bLnM1uG-nQ6viHr57B8AwUnkTnA.roa (raw, json)
Hash identifier: OCKgZQ+96wyQvbUTGRhC4Cpss7jjoDQl/7EjdMtGagw=
Subject key identifier: 6C:B9:CC:D6:E1:BE:9D:0E:AF:88:7A:F9:EC:1F:00:C1:49:E4:4E:70
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019FDD74DD9CDF2456BF3E6D3D06C197B709
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/bLnM1uG-nQ6viHr57B8AwUnkTnA.roa
Signing time: Fri 07 Aug 2026 18:20:51 +0000
ROA not before: Fri 07 Aug 2026 18:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.160.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.166.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:74:dd:9c:df:24:56:bf:3e:6d:3d:06:c1:97:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Aug 7 18:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cb9ccd6e1be9d0eaf887af9ec1f00c149e44e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:bb:d6:d4:b1:76:cb:6d:df:09:bb:38:d2:
13:e6:61:90:3d:ae:50:b7:1d:20:d5:74:ec:2f:a3:
37:c4:42:b0:28:3a:f6:89:af:c6:48:47:58:0b:43:
2e:8a:30:90:d7:bc:3a:3e:fc:af:fc:24:9a:ff:bc:
9d:bc:c4:19:12:9d:63:65:0f:cc:ae:96:5c:dd:e2:
4d:8f:d6:26:f9:0f:14:5d:77:ba:29:8b:49:59:b9:
25:80:2a:81:ae:ea:4e:f3:6f:48:4a:31:8d:5f:26:
9f:a1:0f:7e:be:23:86:90:8b:f6:a5:06:f8:9e:b0:
9a:6e:0f:94:28:8a:85:9d:ab:75:0b:e1:4c:df:33:
76:9a:7a:4b:34:b1:ba:4c:0f:c7:34:82:d4:3b:25:
32:58:f5:86:ff:14:3a:3d:45:4a:ce:5d:72:74:65:
9b:2e:f3:e7:8d:2a:39:03:86:17:6a:4b:d4:1c:e2:
72:e9:ef:d5:05:3d:32:4b:87:93:c0:6e:68:5a:90:
0b:08:1d:fa:e6:71:b0:fc:b2:56:3a:18:63:9f:82:
ae:3f:25:59:41:64:f9:b2:d1:a8:0d:64:0e:bb:7a:
6a:ba:67:3c:d9:5c:a3:25:ac:77:53:38:2c:8c:35:
2c:10:89:84:b3:ac:c2:47:82:03:6d:fe:fb:6e:79:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:CC:D6:E1:BE:9D:0E:AF:88:7A:F9:EC:1F:00:C1:49:E4:4E:70
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/bLnM1uG-nQ6viHr57B8AwUnkTnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0/23
46.32.164.0/22
46.32.170.0/23
46.32.189.0-46.32.191.255
Signature Algorithm: sha256WithRSAEncryption
a6:76:cb:0b:a5:a7:27:a5:df:d0:00:a9:97:f3:46:7a:83:e9:
e0:ed:15:e6:f1:ec:4b:ef:ad:30:f2:7d:dd:da:a6:be:2e:58:
86:f7:64:d9:f2:c5:61:24:e2:af:f2:95:96:eb:c7:7b:ae:b6:
89:76:46:c4:10:9c:9e:23:05:a7:31:a5:54:80:17:17:90:a5:
6f:7d:c7:c5:df:cc:42:00:2b:08:fa:89:97:3e:a4:4e:b9:16:
ab:fd:16:86:68:cd:24:c2:6d:3a:b7:df:3c:72:8c:1c:94:dd:
38:7c:d3:c4:30:33:f3:17:56:e4:1f:17:89:fa:b1:52:be:df:
fd:46:6f:d9:20:c5:36:9c:85:ee:bd:9a:96:db:9d:79:16:0b:
ef:37:44:51:fc:cc:47:f0:7a:ac:48:2c:60:dd:e0:8f:89:d7:
54:2b:a1:17:aa:f8:1f:37:01:7b:41:bb:ad:25:d6:fb:92:92:
84:05:34:17:b6:e5:b8:a8:f7:a7:48:f3:ac:bd:d6:ba:23:46:
61:62:f9:8a:2b:55:91:85:84:92:a8:e1:a8:a6:a2:95:c3:a3:
6c:49:95:c9:29:08:cb:1d:95:88:22:2e:8a:2d:f1:ef:8f:09:
6d:71:5d:c6:bc:69:84:e0:82:16:12:b5:dd:c6:e5:e2:c5:87:
2c:f5:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:31 2026 by rpki-client