Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/VBp2h5FaoJb98CvhcTy4spLuVC8.roa
File: VBp2h5FaoJb98CvhcTy4spLuVC8.roa (raw, json)
Hash identifier: n845ib9mq7Kxh19KrOCiDm6CbxOF/C6G7d8tpyFW1y4=
Subject key identifier: 54:1A:76:87:91:5A:A0:96:FD:F0:2B:E1:71:3C:B8:B2:92:EE:54:2F
Certificate issuer: /CN=73e373fee780eeab2a90422d0ad514e084a8d611
Certificate serial: 01A0A4DDF1444D13D090B1007B1E5F78B3D0
Authority key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/VBp2h5FaoJb98CvhcTy4spLuVC8.roa
Signing time: Tue 15 Sep 2026 11:40:03 +0000
ROA not before: Tue 15 Sep 2026 11:40:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197758
IP address blocks: 46.232.193.0/24 maxlen: 24
46.232.195.0/24 maxlen: 24
46.232.196.0/24 maxlen: 24
46.232.197.0/24 maxlen: 24
46.232.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:dd:f1:44:4d:13:d0:90:b1:00:7b:1e:5f:78:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Validity
Not Before: Sep 15 11:40:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=541a7687915aa096fdf02be1713cb8b292ee542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:23:da:df:f2:9e:d9:39:02:76:7a:06:65:
85:8d:48:f6:d6:1d:ae:ff:e1:0a:87:57:89:6a:a2:
d0:90:29:d1:f1:4d:71:79:b0:0c:8c:c8:75:10:6a:
69:4a:92:ac:35:0d:7b:7f:33:5c:36:02:82:8a:0d:
c1:2a:72:88:66:4c:cc:af:e4:cc:e5:c3:8f:d9:7a:
d8:19:f3:89:ed:55:fe:e6:b6:f6:75:8b:cf:e8:f4:
fb:5e:f1:54:e2:99:5d:32:90:27:f5:4e:f0:21:c8:
45:33:1f:75:7f:1d:1a:31:94:fe:b9:4c:40:c5:bd:
6f:ba:8d:de:b1:df:ef:7b:b6:91:cc:67:75:e3:c5:
78:cf:7a:c6:d1:22:d2:47:03:15:60:db:1c:39:24:
b5:c0:5e:e4:4e:4d:88:a0:28:bc:57:4b:69:02:98:
df:f9:90:ab:3c:dd:8c:e4:bc:bf:8b:e4:fa:52:b5:
6a:38:52:01:5e:4a:5a:a3:8c:66:e3:48:37:0d:87:
bc:c1:1e:74:7c:16:61:88:a6:ce:df:4f:d1:08:d4:
25:5d:27:1e:2e:78:06:fc:ed:a8:e0:4c:1e:2e:25:
38:09:06:6e:08:e9:69:34:f2:9f:52:0d:32:11:e5:
d9:22:50:9a:d2:a6:30:69:1b:7a:cc:bb:af:fa:bf:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:76:87:91:5A:A0:96:FD:F0:2B:E1:71:3C:B8:B2:92:EE:54:2F
X509v3 Authority Key Identifier:
keyid:73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/VBp2h5FaoJb98CvhcTy4spLuVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.193.0/24
46.232.195.0-46.232.198.255
Signature Algorithm: sha256WithRSAEncryption
9c:29:f9:62:e4:96:b5:42:2a:6b:b5:18:0e:a8:dd:11:19:b3:
2c:06:15:39:02:a0:c8:23:7a:93:9c:c4:69:be:df:71:7d:1f:
8e:c3:62:d6:06:6d:83:0d:94:91:d8:5b:f0:d8:56:cd:ae:67:
da:da:ac:35:c6:6d:92:cd:79:c0:c8:f8:66:f9:8e:75:37:32:
8d:ef:81:c7:58:88:98:05:a3:74:c2:29:78:f9:2c:bc:ff:83:
e5:d3:5a:ca:e0:1a:e3:ed:22:61:a1:e3:ef:77:78:6f:86:ee:
20:cb:a1:41:f6:b8:f7:38:5e:f3:4e:9a:e6:e2:02:68:10:8c:
74:b6:ce:1d:97:d5:e3:f2:35:30:55:71:c6:5f:b8:5f:84:14:
db:5f:7d:fe:9e:ea:d4:88:74:cb:e8:5a:12:09:9a:bd:aa:c6:
28:fd:6e:d8:c5:79:1c:d3:43:89:1f:38:f5:aa:8f:6d:20:33:
10:2a:21:1e:d0:1a:4c:80:7e:3c:86:5d:2c:d3:1c:c7:75:62:
07:0c:3f:3f:2d:6c:71:4a:e7:eb:c7:dd:9f:a0:57:65:5b:2f:
29:c6:3b:7b:8d:e0:f4:c6:d8:22:93:6b:50:64:e2:2a:fc:70:
a5:29:19:17:21:b8:eb:cd:31:c0:1a:f0:af:72:c4:99:1e:2d:
9b:01:c8:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:59:31 2026 by rpki-client