Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/UoWE9x7yjFZiDaO-MudWtt7j5v8.roa
File: UoWE9x7yjFZiDaO-MudWtt7j5v8.roa (raw, json)
Hash identifier: JDYuDSxsb8TqP1khTo+IPnsAnYGiJGphoDEBMwEfni4=
Subject key identifier: 52:85:84:F7:1E:F2:8C:56:62:0D:A3:BE:32:E7:56:B6:DE:E3:E6:FF
Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial: 01A0584C9B3BA85533C222B76B4F35D16214
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/UoWE9x7yjFZiDaO-MudWtt7j5v8.roa
Signing time: Mon 31 Aug 2026 14:50:10 +0000
ROA not before: Mon 31 Aug 2026 14:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208066
IP address blocks: 46.45.64.0/20 maxlen: 20
46.45.64.0/21 maxlen: 21
46.45.64.0/22 maxlen: 22
46.45.68.0/22 maxlen: 22
46.45.72.0/21 maxlen: 21
46.45.72.0/22 maxlen: 22
46.45.76.0/22 maxlen: 22
2a03:24c0:ffcf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:4c:9b:3b:a8:55:33:c2:22:b7:6b:4f:35:d1:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Validity
Not Before: Aug 31 14:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528584f71ef28c56620da3be32e756b6dee3e6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:c1:61:e9:0e:5f:39:ef:50:26:7e:69:36:
36:7b:19:f4:08:a9:30:74:00:2c:2c:65:bf:ad:36:
fd:9b:5b:b4:1d:50:76:1d:f3:47:12:03:5a:1d:57:
f6:46:fc:3f:25:ff:44:46:68:d2:cc:45:4e:00:67:
01:42:77:84:22:58:96:4b:93:4f:67:1b:73:8b:96:
01:3f:fe:48:4e:6f:e7:5a:2e:99:66:3f:8e:d2:4d:
0e:87:47:8b:f9:85:75:7d:94:14:33:ae:2f:b1:90:
05:76:c3:93:24:2d:13:10:c3:22:30:b6:9c:5e:86:
1d:2f:56:f0:03:f9:2e:a6:b4:54:7c:0d:ed:30:6d:
22:56:ad:0a:dc:c9:ca:d6:01:6c:be:1f:97:79:3b:
73:2f:2b:fa:fd:6e:2a:87:ea:08:fb:b3:a1:52:d1:
ff:70:c6:1a:29:2d:a4:48:38:73:44:b6:a6:55:95:
ca:cd:74:3f:37:20:e8:59:7d:9f:77:ef:1b:f8:e8:
a2:bd:83:a9:68:da:7a:0f:7b:15:e3:2d:b7:8d:6c:
84:4a:bf:70:9a:11:25:f2:90:f9:a8:c5:f6:24:67:
b3:31:7d:33:2a:80:1a:62:0b:22:65:b8:09:5f:2b:
f8:79:a7:22:08:74:7a:94:88:b3:9f:4c:8e:3f:3c:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:84:F7:1E:F2:8C:56:62:0D:A3:BE:32:E7:56:B6:DE:E3:E6:FF
X509v3 Authority Key Identifier:
keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/UoWE9x7yjFZiDaO-MudWtt7j5v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.45.64.0/20
IPv6:
2a03:24c0:ffcf::/48
Signature Algorithm: sha256WithRSAEncryption
9a:74:f9:ef:ae:6d:fb:35:cc:19:6a:54:f3:07:bd:88:34:bf:
ee:e4:b2:9e:0c:9c:99:49:30:4d:77:2b:eb:94:a4:c3:69:07:
42:9e:d8:fa:59:ed:f7:51:34:3c:06:bf:cb:44:b3:de:cf:76:
5b:bd:61:36:7d:35:3f:85:cf:ab:ab:85:97:a5:9a:65:43:95:
91:63:97:bd:4a:9c:b6:25:7d:38:b7:77:7d:1b:1a:06:78:35:
88:ed:98:50:4c:08:4c:83:e0:9e:5f:95:70:4a:84:d2:48:81:
50:59:14:16:38:82:88:ef:ad:ba:a2:33:09:4d:0c:e1:b8:5e:
1f:56:63:b4:b3:ed:38:20:2b:f6:5a:61:81:01:c1:7a:34:88:
98:16:09:36:ee:27:ff:17:c8:73:a7:f7:73:aa:4a:e2:4a:a5:
f3:ed:de:f0:64:89:b0:e9:e1:a9:db:fb:e9:46:99:ef:97:dd:
b1:3b:a3:58:b5:6c:2a:dd:b0:40:47:22:e1:9c:d4:15:0f:a1:
70:0e:50:db:fe:fb:9a:ef:5e:a8:d9:2b:d3:77:67:87:7f:86:
da:cd:88:1b:e3:de:fd:98:4a:a4:43:eb:f6:06:2e:7a:cf:04:
eb:26:ee:2d:77:35:98:cf:6c:af:91:4f:35:c3:55:3e:a2:72:
5c:e0:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 22:59:28 2026 by rpki-client