Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/k424Nbk6SvvJjvOfKup0qsQXNRI.roa
File: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (raw, json)
Hash identifier: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=
Subject key identifier: 93:8D:B8:35:B9:3A:4A:FB:C9:8E:F3:9F:2A:EA:74:AA:C4:17:35:12
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019C4D0F48E8214CDC9AEB559353A56B19A3
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/k424Nbk6SvvJjvOfKup0qsQXNRI.roa
Signing time: Wed 11 Feb 2026 14:16:13 +0000
ROA not before: Wed 11 Feb 2026 14:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 46.19.50.0/24 maxlen: 24
46.19.51.0/24 maxlen: 24
46.19.52.0/24 maxlen: 24
46.19.53.0/24 maxlen: 24
46.19.54.0/24 maxlen: 24
46.19.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:0f:48:e8:21:4c:dc:9a:eb:55:93:53:a5:6b:19:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Feb 11 14:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=938db835b93a4afbc98ef39f2aea74aac4173512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:58:ae:b2:a1:ab:44:7f:4d:ba:b1:47:84:
2d:fe:0d:1e:2b:4b:12:ae:52:e1:96:3a:a9:f3:95:
8e:f4:50:0e:32:8d:c3:f2:22:ec:fd:b3:cf:a4:77:
e6:02:83:7b:9a:10:39:c1:b0:74:04:f5:fc:3b:b3:
16:5f:93:6b:fa:66:a2:00:28:d8:19:10:a1:ae:98:
c0:f3:70:be:b6:22:f8:39:0e:4c:52:09:c4:5c:1a:
85:6a:2a:c4:bb:eb:18:c8:34:e9:77:93:dc:73:bd:
07:e9:cc:91:81:01:08:53:77:fe:fc:42:bf:56:42:
24:f2:4b:eb:00:49:0f:26:71:c1:b8:2e:5a:af:bb:
21:89:c2:28:73:f3:2b:b5:91:f8:fb:45:43:40:90:
32:4f:55:b1:14:d1:75:61:fb:e4:c4:ed:7e:99:5e:
71:4e:01:46:44:b3:e3:d5:55:5f:fd:2f:14:59:c8:
fd:5f:fb:02:6f:08:e2:48:42:f4:58:40:22:b9:35:
ae:38:13:9f:8e:b5:da:7b:89:ed:b8:3f:d4:d9:e0:
5f:c0:23:04:f5:e7:d8:4d:49:1a:39:80:81:5d:c5:
13:28:9d:31:a9:00:d6:43:4f:c1:f1:20:f7:b1:8b:
76:3a:fd:84:ee:b4:ff:25:58:45:6d:ce:46:25:c4:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:B8:35:B9:3A:4A:FB:C9:8E:F3:9F:2A:EA:74:AA:C4:17:35:12
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/k424Nbk6SvvJjvOfKup0qsQXNRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.50.0-46.19.55.255
Signature Algorithm: sha256WithRSAEncryption
82:6b:47:51:1e:d6:3f:25:72:b0:dc:b8:41:f3:08:f3:7f:6b:
57:91:0f:9e:5e:ab:99:cf:1f:75:6a:9b:bb:f3:41:31:57:cf:
e4:eb:a8:5a:9f:9c:b7:f4:1f:f4:4d:be:2b:21:f6:c7:e3:23:
7c:71:d5:96:7c:f5:40:ec:23:1f:14:53:7e:33:29:04:f7:84:
f1:25:70:b4:bc:f6:46:30:37:54:9c:75:01:0b:3b:ed:71:0c:
3e:d8:8a:99:14:fb:c5:0a:ac:db:43:51:c3:fe:8f:6e:79:ba:
b5:7c:be:0d:f1:59:ab:3d:7b:fc:a4:a8:ff:39:6e:92:ad:c6:
6b:5a:dc:dc:a7:11:4a:c4:cc:6e:78:1d:3d:a3:37:ba:6f:af:
12:93:d1:c0:9e:3b:91:b0:91:c7:da:f4:44:2d:1b:1f:ef:9e:
b5:92:67:cc:27:42:ad:e3:90:8f:70:3d:5b:db:ab:83:ab:6a:
42:f7:8b:20:fc:e3:a0:74:f6:58:90:ca:5c:22:ad:a1:31:05:
ff:81:1b:85:91:0f:c5:2e:0e:e7:d3:8b:b7:78:1f:c3:88:4c:
d9:ca:00:aa:e2:46:eb:ed:fc:1c:d1:5f:83:44:3c:d2:e2:a1:
92:70:00:45:09:fd:08:34:83:66:97:83:c5:cf:e9:95:7b:d7:
03:88:87:a3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZxND0joIUzcmutVk1OlaxmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzVmNmE5ODU3ZDdiZTAyNjA3YTQ0ZDg5NTJhODhjYTRi
YTZkM2YwHhcNMjYwMjExMTQxNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzhkYjgzNWI5M2E0YWZiYzk4ZWYzOWYyYWVhNzRhYWM0MTczNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrVYrrKhq0R/TbqxR4Qt/g0eK0sS
rlLhljqp85WO9FAOMo3D8iLs/bPPpHfmAoN7mhA5wbB0BPX8O7MWX5Nr+maiACjY
GRChrpjA83C+tiL4OQ5MUgnEXBqFairEu+sYyDTpd5Pcc70H6cyRgQEIU3f+/EK/
VkIk8kvrAEkPJnHBuC5ar7shicIoc/MrtZH4+0VDQJAyT1WxFNF1YfvkxO1+mV5x
TgFGRLPj1VVf/S8UWcj9X/sCbwjiSEL0WEAiuTWuOBOfjrXae4ntuD/U2eBfwCME
9efYTUkaOYCBXcUTKJ0xqQDWQ0/B8SD3sYt2Ov2E7rT/JVhFbc5GJcRsXwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJONuDW5Okr7yY7znyrqdKrEFzUSMB8GA1UdIwQY
MBaAFCs19qmFfXvgJgekTYlSqIykum0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEt
MjNhYzUxMzQzZGE1LzEvazQyNE5iazZTdnZKanZPZkt1cDBxc1FYTlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEtMjNhYzUxMzQzZGE1
LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEuEzID
BAMuEzAwDQYJKoZIhvcNAQELBQADggEBAIJrR1Ee1j8lcrDcuEHzCPN/a1eRD55e
q5nPH3Vqm7vzQTFXz+TrqFqfnLf0H/RNvish9sfjI3xx1ZZ89UDsIx8UU34zKQT3
hPElcLS89kYwN1ScdQELO+1xDD7YipkU+8UKrNtDUcP+j255urV8vg3xWas9e/yk
qP85bpKtxmta3NynEUrEzG54HT2jN7pvrxKT0cCeO5Gwkcfa9EQtGx/vnrWSZ8wn
Qq3jkI9wPVvbq4OrakL3iyD846B09liQylwiraExBf+BG4WRD8UuDufTi7d4H8OI
TNnKAKriRuvt/BzRX4NEPNLioZJwAEUJ/Qg0g2aXg8XP6ZV71wOIh6M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:26 2026 by rpki-client