Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa
File: SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa (raw, json)
Hash identifier: q61fVl8G0xd8YOxD/9y87v0yu9OdiosdP3gG41Oey+8=
Subject key identifier: 4A:E2:EC:FC:99:92:09:0F:61:9D:02:D1:31:04:84:73:D2:9F:8C:A1
Certificate issuer: /CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
Certificate serial: 019E2BA1AE24428D4F4D1ABC887859B27DBF
Authority key identifier: 6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa
Signing time: Fri 15 May 2026 12:34:36 +0000
ROA not before: Fri 15 May 2026 12:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199081
IP address blocks: 46.226.193.0/24 maxlen: 24
46.226.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:a1:ae:24:42:8d:4f:4d:1a:bc:88:78:59:b2:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
Validity
Not Before: May 15 12:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae2ecfc9992090f619d02d131048473d29f8ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:c6:fa:1c:32:5b:dc:6f:b7:e4:d3:94:5c:
b1:59:80:6f:d3:ab:fa:4a:7b:c9:01:08:20:5a:27:
6d:23:3b:9e:d1:4b:c9:a4:40:1a:bb:58:77:2f:7a:
1b:fd:3a:51:94:75:61:3d:5f:61:1a:1b:c9:3b:6a:
07:f7:0d:9a:1f:b4:1e:e7:66:fd:11:15:00:5d:65:
49:de:f5:e9:27:02:26:e4:19:e5:fb:b3:04:c1:69:
49:0c:a8:e1:8f:77:b7:40:57:34:34:cb:7b:32:86:
56:b0:ca:b6:1c:ca:7d:13:07:26:08:5c:a4:c7:21:
67:c3:2c:bd:9c:3b:3e:0c:ce:a4:56:dc:fa:94:bd:
6a:79:5f:a2:aa:3d:49:9e:bb:9e:25:44:60:92:97:
3b:bf:0a:f0:ad:0b:c9:86:5e:00:56:1a:0f:96:eb:
92:bd:27:d7:3c:82:10:d3:e6:c7:f5:04:95:03:de:
28:99:71:39:c3:11:8e:c5:8f:d4:74:fb:8b:c2:5e:
58:83:6b:58:7e:ab:12:f6:d9:fa:b9:e3:b4:b7:07:
c1:1a:b4:a7:d4:e1:12:7a:bb:7d:85:2b:03:f9:e7:
07:c0:93:57:6f:92:26:88:90:7b:ba:5f:75:42:45:
d5:0d:fa:34:65:6e:46:ed:98:cd:02:50:03:36:61:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:EC:FC:99:92:09:0F:61:9D:02:D1:31:04:84:73:D2:9F:8C:A1
X509v3 Authority Key Identifier:
keyid:6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.193.0-46.226.195.255
Signature Algorithm: sha256WithRSAEncryption
0b:9b:ca:b9:fe:fa:59:ba:f9:5c:b8:cf:5d:c1:24:97:2a:b8:
f0:af:b6:7c:78:ae:af:db:fb:f5:b2:16:69:37:9b:fc:5f:bb:
9c:03:43:2e:89:27:cc:c8:a7:67:07:ca:63:79:70:29:a8:5d:
85:d6:48:23:6d:84:63:c8:38:fb:e7:94:ff:67:78:6c:9d:fa:
a6:a4:08:86:f4:23:25:0b:67:92:de:fb:45:1c:19:9e:ee:2a:
0d:09:3f:ec:fd:f3:2a:8c:9f:b0:7c:0b:52:4b:d0:1d:69:99:
db:72:dc:f9:87:c8:49:bd:1a:b1:e0:53:40:24:2c:a2:b7:8e:
72:c8:7a:a2:ea:89:8e:2e:a7:ba:2c:6b:6a:fd:b4:1d:03:81:
4f:7e:74:48:00:71:31:93:c0:2f:85:ed:6f:f3:ed:17:95:2c:
bf:c7:b1:d6:a3:53:58:63:13:c3:e2:0e:f2:ad:a1:3e:de:ac:
b5:de:df:21:b7:f8:c0:dc:fc:a2:a2:90:8f:b2:50:af:bb:99:
ea:3c:9a:e2:4f:0e:3d:20:8b:19:bf:19:1a:c9:d0:1b:3b:e6:
2c:60:3b:24:ef:1e:47:4c:7d:f2:9e:43:6d:2c:84:da:6d:00:
a7:cb:db:90:3f:4b:92:94:be:82:a0:d7:f8:cc:b7:32:18:1b:
76:6e:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:24 2026 by rpki-client