Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/RnW8mw6auGzAwgGJMMkeUw4UtZI.roa
File: RnW8mw6auGzAwgGJMMkeUw4UtZI.roa (raw, json)
Hash identifier: aQYLaHfotglpolPiwXg2/L/hTTGuu2mTWfrCqJ8SGHo=
Subject key identifier: 46:75:BC:9B:0E:9A:B8:6C:C0:C2:01:89:30:C9:1E:53:0E:14:B5:92
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A0B7F6E8F3695B16173062305A17BDFCD5
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/RnW8mw6auGzAwgGJMMkeUw4UtZI.roa
Signing time: Sat 19 Sep 2026 04:40:07 +0000
ROA not before: Sat 19 Sep 2026 04:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204106
IP address blocks: 46.20.202.0/23 maxlen: 23
46.20.202.0/24 maxlen: 24
46.20.203.0/24 maxlen: 24
77.247.198.0/24 maxlen: 24
109.74.72.0/24 maxlen: 24
2a13:1b00::/29 maxlen: 29
2a13:1b00::/32 maxlen: 32
2a13:1b00:1000::/48 maxlen: 48
2a13:1b00:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:f6:e8:f3:69:5b:16:17:30:62:30:5a:17:bd:fc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 19 04:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4675bc9b0e9ab86cc0c2018930c91e530e14b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:b9:9f:b8:80:59:05:09:a1:c1:54:65:d3:
83:1c:1b:9a:6b:32:f1:0f:f8:81:5c:13:21:58:bd:
63:8b:99:2e:d2:09:e3:a6:a6:62:55:3d:6c:a3:c8:
2b:f3:9b:4f:4b:f2:11:76:00:cf:88:06:0b:16:dd:
23:15:f6:e0:e7:30:cc:2a:6d:2f:fe:a5:7e:b8:c9:
11:8d:2e:d7:a3:9d:63:00:8b:76:7a:8a:22:94:11:
c5:f4:24:c0:46:3d:fb:d8:83:f3:09:3b:e1:dd:d2:
a2:8e:f4:cc:ca:c6:c9:81:04:0f:1f:73:60:50:1a:
66:11:79:50:2f:55:6f:80:ae:01:55:65:90:cd:7d:
52:c3:ce:94:3d:ff:a2:ef:c1:3b:8f:76:fd:32:31:
eb:68:b9:de:40:15:48:04:22:96:be:61:e2:ef:2d:
49:3f:04:be:d6:03:03:94:74:79:91:12:da:15:d1:
cf:dc:ab:ba:a5:f9:b2:0a:e8:e0:d8:2b:87:b3:e8:
48:ec:e1:72:88:20:f9:dd:b0:b6:eb:53:48:2a:6e:
7f:12:7e:a7:d1:9a:83:93:f4:c1:c2:7e:e7:90:01:
4c:f3:e0:30:17:42:b0:74:5c:58:8b:c4:d6:ba:3f:
80:ae:82:5f:ff:df:45:be:c2:e3:a6:fc:b3:85:5b:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:BC:9B:0E:9A:B8:6C:C0:C2:01:89:30:C9:1E:53:0E:14:B5:92
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/RnW8mw6auGzAwgGJMMkeUw4UtZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/23
77.247.198.0/24
109.74.72.0/24
IPv6:
2a13:1b00::/29
Signature Algorithm: sha256WithRSAEncryption
00:e2:73:c7:ea:5a:12:33:7f:34:c0:8c:17:d6:a7:31:53:3a:
58:d8:36:83:0a:a6:d1:da:b2:09:a8:6b:40:82:34:f1:04:1c:
2b:8a:d0:ce:a8:84:6b:ba:1c:64:4e:df:75:dc:50:89:ec:42:
a4:d3:77:23:10:a2:71:a5:8b:83:55:b0:62:80:a0:b6:79:47:
07:9d:2b:c4:6e:1e:86:a6:1d:eb:6b:a8:df:21:52:ce:94:f8:
5b:f7:e7:ed:9d:56:50:23:2f:6d:03:8e:3c:30:96:33:02:7a:
bc:42:ca:f2:13:9f:3e:63:85:8c:af:e1:ce:ce:19:54:87:ef:
8d:93:d3:30:7f:e5:5d:5e:ef:bc:bf:bd:b6:19:08:eb:d7:fe:
0e:64:04:e1:58:f0:79:18:20:68:b2:03:12:d5:63:bd:e3:d6:
da:8d:52:32:07:89:f4:24:b1:89:21:74:6e:14:ac:86:20:18:
4b:7f:7c:b6:fb:54:3f:60:29:c4:2b:e2:c5:d9:6d:f9:9f:5d:
f0:19:bb:fb:00:52:7f:d0:32:c8:94:26:b6:eb:dc:c7:40:ab:
99:09:48:ef:dd:0d:b7:ba:30:0f:d2:ab:57:46:20:64:20:d2:
05:24:35:2a:48:31:39:8e:e1:5b:ac:e7:13:d8:c8:cd:83:67:
11:ab:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:01:57 2026 by rpki-client