Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/OnhrU_FmqJ9tXdThe7YMO5jiX-s.roa
File: OnhrU_FmqJ9tXdThe7YMO5jiX-s.roa (raw, json)
Hash identifier: MTURoEl1oG7dRGj+napAw2uJQy3KqrIBQCy0hhsO/IM=
Subject key identifier: 3A:78:6B:53:F1:66:A8:9F:6D:5D:D4:E1:7B:B6:0C:3B:98:E2:5F:EB
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 01A114BD321B023E633763899FEF0C9266D8
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/OnhrU_FmqJ9tXdThe7YMO5jiX-s.roa
Signing time: Wed 07 Oct 2026 05:01:45 +0000
ROA not before: Wed 07 Oct 2026 05:01:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51483
IP address blocks: 46.235.112.0/21 maxlen: 21
46.235.112.0/24 maxlen: 24
46.235.113.0/24 maxlen: 24
46.235.118.0/24 maxlen: 24
46.235.119.0/24 maxlen: 24
46.254.136.0/21 maxlen: 21
95.142.64.0/20 maxlen: 20
128.0.192.0/21 maxlen: 21
185.74.224.0/22 maxlen: 22
2a00:1100::/29 maxlen: 29
2a00:1100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bd:32:1b:02:3e:63:37:63:89:9f:ef:0c:92:66:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Oct 7 05:01:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a786b53f166a89f6d5dd4e17bb60c3b98e25feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:f1:07:85:2b:b3:0f:7f:60:6e:30:a8:8f:
d4:16:84:d5:6d:b0:c3:f7:2f:54:50:e9:d1:17:ca:
c4:cb:46:54:52:49:50:64:6f:e0:9a:ba:19:f1:36:
75:ea:0e:b8:e5:1a:e5:84:8c:9e:2a:04:fa:f9:b0:
0f:a9:7f:a7:28:5e:42:42:d8:1d:75:3b:a4:13:b6:
e1:0d:14:d7:b4:a3:a4:55:d1:b4:91:95:a6:dc:6e:
42:9a:02:9f:9e:9a:07:de:49:12:93:14:aa:bd:eb:
02:e8:6b:3d:3c:b3:90:d3:0d:e4:41:38:f1:9c:30:
b0:6e:f5:8c:c3:c1:cc:02:dd:00:51:de:5e:ed:6c:
32:95:a5:c5:10:66:09:63:43:81:08:ad:8b:46:56:
0e:43:78:d0:99:39:e6:c0:55:05:ed:f3:0d:7e:8e:
39:89:58:b0:55:2c:f8:7c:b0:d2:dc:79:43:44:ac:
60:22:d0:81:6d:cb:21:6c:7c:7a:59:17:9e:c5:d8:
aa:b6:27:44:f2:3a:e6:8f:c0:b9:0f:3b:27:7c:bb:
d5:c3:63:ee:94:af:94:ed:3a:ef:88:db:e5:dd:a4:
fe:93:2c:f3:f5:59:d8:73:ba:1c:53:e7:08:78:7b:
51:3b:ac:85:77:d4:aa:31:c3:d5:90:b6:6e:4a:a3:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:6B:53:F1:66:A8:9F:6D:5D:D4:E1:7B:B6:0C:3B:98:E2:5F:EB
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/OnhrU_FmqJ9tXdThe7YMO5jiX-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.112.0/21
46.254.136.0/21
95.142.64.0/20
128.0.192.0/21
185.74.224.0/22
IPv6:
2a00:1100::/29
Signature Algorithm: sha256WithRSAEncryption
77:5d:46:f4:51:4e:69:ce:a0:d9:bf:1d:65:55:d5:f1:36:5f:
a7:a3:d7:d4:42:a5:64:15:d8:78:aa:f8:c7:46:d3:c6:ca:c8:
99:0a:cc:73:2c:73:30:0f:64:0c:ae:48:45:73:3d:c1:a0:e8:
1f:42:4c:ca:71:64:1f:58:20:10:a8:f9:90:8d:72:d9:60:37:
27:45:35:93:8f:9f:07:05:74:86:ab:98:9c:00:93:5a:7c:fc:
42:ae:f8:11:8d:ba:c6:07:b0:10:ba:f0:7b:3b:02:45:b8:f3:
ad:fa:4f:c6:b7:29:17:d3:5e:0e:2c:af:a1:c7:37:c1:b5:cd:
0d:84:29:55:38:66:59:9b:a4:ef:ad:56:c8:69:a1:15:29:5f:
f5:e0:21:4e:a7:fc:11:4f:1a:68:9b:a8:51:6f:c2:d6:a8:b2:
cd:97:21:07:ef:ea:5e:87:67:5a:97:0d:f1:09:b3:ee:6f:3e:
27:1f:8d:03:cd:31:d2:a4:9b:34:c0:2f:db:86:cb:9b:c0:c1:
43:70:2c:be:e0:45:3c:39:7f:9c:b8:04:e3:c0:1e:78:ad:f7:
26:80:3d:87:1f:af:4f:44:ee:fe:83:3e:78:4b:40:8f:bc:f7:
d6:80:9b:28:e6:1a:02:65:b3:75:66:cd:ef:e9:fe:82:b4:28:
49:a6:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:21 2026 by rpki-client