Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/5eFsTtdChCCR0__dM3oRPwLUlTg.roa
File: 5eFsTtdChCCR0__dM3oRPwLUlTg.roa (raw, json)
Hash identifier: l2gUzZU8c+122ITwmFSvINDCUF92MApyIvi9oSJUmOE=
Subject key identifier: E5:E1:6C:4E:D7:42:84:20:91:D3:FF:DD:33:7A:11:3F:02:D4:95:38
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019EBB0649222B762E6C97948DF6F216FC58
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/5eFsTtdChCCR0__dM3oRPwLUlTg.roa
Signing time: Fri 12 Jun 2026 08:50:11 +0000
ROA not before: Fri 12 Jun 2026 08:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:06:49:22:2b:76:2e:6c:97:94:8d:f6:f2:16:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 12 08:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5e16c4ed742842091d3ffdd337a113f02d49538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:1f:83:34:6b:dc:7a:d9:a0:5e:66:87:a0:
4e:c8:df:fd:c3:11:73:86:5c:ed:ee:63:b1:f3:68:
f6:b0:c7:08:03:0a:53:3b:88:e0:70:1a:56:5d:ab:
e2:45:4d:e3:f7:9a:98:c0:d5:4e:b9:be:29:66:9e:
1d:35:9f:58:eb:c9:05:dc:cc:3c:4f:e0:6a:d0:8b:
7b:77:c1:71:8a:b0:09:ae:34:02:eb:bb:bb:c5:3f:
af:11:aa:5e:ae:b7:eb:1b:8c:6b:da:14:a1:3c:b4:
c5:d1:3c:d2:14:ec:2f:5d:90:ec:e0:fb:cf:64:cb:
86:18:66:1b:f4:53:5d:41:74:c7:3b:f9:f3:57:98:
b8:c7:f2:1b:99:6a:17:30:57:3f:95:d4:a5:a8:c3:
be:f9:bf:ae:aa:30:d0:b2:7f:5a:53:03:92:3b:08:
c6:57:90:63:42:e7:94:5d:03:16:24:b7:7d:3a:27:
cd:05:5a:d5:c3:2b:9e:27:91:74:7d:b2:c1:dd:d5:
1a:2c:6b:a6:65:c2:b1:50:a4:cf:44:57:07:e6:7b:
03:be:57:01:ee:96:95:f9:34:07:58:24:fb:71:c2:
d3:28:ea:08:ea:4d:38:5a:42:f9:90:df:b6:a0:ef:
fd:e2:d8:9d:e2:be:10:91:a5:ec:2b:ce:3d:0e:32:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E1:6C:4E:D7:42:84:20:91:D3:FF:DD:33:7A:11:3F:02:D4:95:38
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/5eFsTtdChCCR0__dM3oRPwLUlTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
20:47:95:b4:96:7e:1d:00:2b:89:7b:4f:a6:ce:69:e4:4d:b9:
42:2e:05:31:77:2a:28:ae:04:58:9a:fb:e3:36:8f:67:ed:f3:
9a:9b:f8:2e:f7:4e:c1:14:91:f3:b0:09:16:2c:8d:83:89:b1:
eb:f4:df:10:b1:99:41:cb:c3:76:dd:f0:71:08:52:7c:96:e8:
32:cb:6e:3d:eb:ff:7f:68:c7:27:ac:72:75:af:81:76:fa:a0:
3b:fd:5a:e4:84:f9:19:7f:64:8a:94:5c:fb:1f:83:c2:c8:5c:
7a:12:5b:db:21:de:33:69:0b:e9:8a:b5:04:96:cf:14:a7:37:
c1:be:31:e6:bb:b5:ca:dc:a8:2a:51:67:cb:bb:82:b0:d1:28:
57:d8:8d:de:8b:90:8c:26:33:93:8d:5a:a9:0f:3e:62:77:ca:
ef:84:f6:2e:f6:76:a6:0f:eb:09:cf:c1:fc:dc:4d:63:68:7d:
fa:1d:26:84:99:67:d1:de:8e:13:b3:af:9e:d9:84:11:8f:ac:
ea:d4:ed:05:dd:5d:98:97:01:ed:44:87:ae:9d:43:40:2c:db:
65:c9:24:9e:2e:f2:2f:ae:2a:27:36:27:77:fe:86:31:89:3f:
48:c6:ab:a7:22:c0:42:38:bf:b8:22:33:e4:01:c3:62:98:c2:
35:b0:f8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:48 2026 by rpki-client