Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/46zvNBZCo-c9XYVGN-ZXdtVBytE.roa
File: 46zvNBZCo-c9XYVGN-ZXdtVBytE.roa (raw, json)
Hash identifier: B64da+QgvR78fPZU9F0LEqc1Y10rbNkapDnzkp8XJLY=
Subject key identifier: E3:AC:EF:34:16:42:A3:E7:3D:5D:85:46:37:E6:57:76:D5:41:CA:D1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019C10B7DCFCABD09548B6427071829030D8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/46zvNBZCo-c9XYVGN-ZXdtVBytE.roa
Signing time: Fri 30 Jan 2026 21:03:30 +0000
ROA not before: Fri 30 Jan 2026 21:03:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214309
IP address blocks: 2a12:bec4:14d0::/44 maxlen: 44
2a12:bec4:1f50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:10:b7:dc:fc:ab:d0:95:48:b6:42:70:71:82:90:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 30 21:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3acef341642a3e73d5d854637e65776d541cad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:a5:85:54:4d:58:af:12:fa:2f:1f:fc:d0:
e3:06:1c:d5:ae:10:c0:93:20:c7:6c:83:af:5e:38:
af:44:be:5b:20:32:43:ca:0a:5c:27:74:07:4c:dd:
13:e8:b4:08:8a:24:17:bb:67:d4:2b:c6:6d:9e:8f:
48:e7:d7:6c:38:2d:2b:2c:a6:4f:ec:90:85:43:b1:
50:dc:be:68:51:a2:b3:ed:85:c2:df:d2:d4:c6:a1:
d3:6c:5a:9e:d5:30:93:3a:a5:8b:74:1f:b1:6c:ce:
fc:39:19:e4:8c:10:c0:83:c4:e9:85:c1:05:76:5f:
31:32:21:50:79:8c:38:42:8c:fd:8f:22:ee:af:29:
6f:36:e6:e8:b4:5f:12:50:16:52:65:8b:15:ec:d4:
4e:bc:d1:fe:2f:84:83:48:68:a5:4d:b0:d0:4f:f9:
77:90:19:0c:e5:1b:5f:30:42:f7:f7:9d:66:2a:dc:
d4:4d:3f:ec:9e:3c:9f:da:1c:49:4a:18:61:f0:c8:
1a:df:39:bc:7c:73:06:d4:bb:56:17:c1:df:83:e1:
97:84:51:81:5d:65:5b:c0:2e:c4:64:ed:02:ba:e8:
50:67:35:47:5f:99:1f:41:be:f6:24:eb:38:08:05:
7f:cc:bd:4e:26:09:e6:a3:df:71:77:85:e2:fa:bd:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:EF:34:16:42:A3:E7:3D:5D:85:46:37:E6:57:76:D5:41:CA:D1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/46zvNBZCo-c9XYVGN-ZXdtVBytE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14d0::/44
2a12:bec4:1f50::/44
Signature Algorithm: sha256WithRSAEncryption
40:e5:e4:42:9a:5b:29:97:ae:fd:e2:18:fe:f6:02:4b:af:4a:
6a:e0:2d:d7:3d:1e:93:f3:c8:30:b2:d8:a5:a5:66:68:a8:c6:
9d:be:f0:63:4b:d9:a4:8f:51:c2:0c:2a:fe:f5:90:c7:5d:73:
95:3f:c6:e3:ea:c1:eb:1b:9e:17:7e:86:6b:5e:f5:b9:dc:93:
2b:70:ac:63:4a:d6:05:39:48:4f:9f:e6:c5:04:81:51:8d:b1:
c7:6e:6c:d6:d7:d8:91:fb:47:13:6f:b0:81:a5:24:d3:e8:2a:
58:c1:b7:ae:ec:6f:93:84:e9:99:3a:71:5a:0c:4e:d8:9a:eb:
5f:9a:ac:e3:1c:f4:46:66:1a:ad:90:be:1e:94:ea:7c:d9:36:
88:cb:24:38:54:95:a9:d5:fa:1d:d5:f5:f2:2f:41:dc:63:93:
d9:89:1f:fe:54:c4:88:4c:da:5a:13:92:0b:3f:6c:6c:aa:1e:
94:69:3d:73:c3:d0:d5:86:3e:3a:50:52:81:5e:d3:ad:20:1d:
0d:4a:b3:aa:00:d2:e7:bc:a3:3f:14:1e:92:ad:d2:8b:71:ea:
26:8b:b7:a8:94:b6:2c:3f:1b:c0:d6:f1:7c:e1:6c:af:8c:52:
4f:f3:ec:f8:98:c5:66:00:70:5d:2c:59:0f:d1:6d:0e:d6:a7:
0c:17:fd:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZwQt9z8q9CVSLZCcHGCkDDYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwMTMwMjEwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FjZWYzNDE2NDJhM2U3M2Q1ZDg1NDYzN2U2NTc3NmQ1NDFjYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQqlhVRNWK8S+i8f/NDjBhzVrhDA
kyDHbIOvXjivRL5bIDJDygpcJ3QHTN0T6LQIiiQXu2fUK8Ztno9I59dsOC0rLKZP
7JCFQ7FQ3L5oUaKz7YXC39LUxqHTbFqe1TCTOqWLdB+xbM78ORnkjBDAg8TphcEF
dl8xMiFQeYw4Qoz9jyLurylvNubotF8SUBZSZYsV7NROvNH+L4SDSGilTbDQT/l3
kBkM5RtfMEL3951mKtzUTT/snjyf2hxJShhh8Mga3zm8fHMG1LtWF8Hfg+GXhFGB
XWVbwC7EZO0CuuhQZzVHX5kfQb72JOs4CAV/zL1OJgnmo99xd4Xi+r0A+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOOs7zQWQqPnPV2FRjfmV3bVQcrRMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvNDZ6dk5CWkNvLWM5WFlWR04tWlhkdFZCeXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBTQ
AwcEKhK+xB9QMA0GCSqGSIb3DQEBCwUAA4IBAQBA5eRCmlspl6794hj+9gJLr0pq
4C3XPR6T88gwstilpWZoqMadvvBjS9mkj1HCDCr+9ZDHXXOVP8bj6sHrG54XfoZr
XvW53JMrcKxjStYFOUhPn+bFBIFRjbHHbmzW19iR+0cTb7CBpSTT6CpYwbeu7G+T
hOmZOnFaDE7YmutfmqzjHPRGZhqtkL4elOp82TaIyyQ4VJWp1fod1fXyL0HcY5PZ
iR/+VMSITNpaE5ILP2xsqh6UaT1zw9DVhj46UFKBXtOtIB0NSrOqANLnvKM/FB6S
rdKLceomi7eolLYsPxvA1vF84WyvjFJP8+z4mMVmAHBdLFkP0W0O1qcMF/2J
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:58 2026 by rpki-client