Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/oi4mpYSiovaK57ZfZlNO4DWYjA8.roa
File: oi4mpYSiovaK57ZfZlNO4DWYjA8.roa (raw, json)
Hash identifier: HIM928G3nU2O9SydmXSIdQ7slGUh1v0LGnhyHlXPxy4=
Subject key identifier: A2:2E:26:A5:84:A2:A2:F6:8A:E7:B6:5F:66:53:4E:E0:35:98:8C:0F
Certificate issuer: /CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Certificate serial: 019FFB8A569A537340D4603D49B5203A5C2E
Authority key identifier: 9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/oi4mpYSiovaK57ZfZlNO4DWYjA8.roa
Signing time: Thu 13 Aug 2026 14:32:55 +0000
ROA not before: Thu 13 Aug 2026 14:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47292
IP address blocks: 46.183.136.0/24 maxlen: 24
46.183.138.0/24 maxlen: 24
46.183.139.0/24 maxlen: 24
46.183.140.0/24 maxlen: 24
46.183.141.0/24 maxlen: 24
46.183.142.0/24 maxlen: 24
46.183.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:8a:56:9a:53:73:40:d4:60:3d:49:b5:20:3a:5c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Validity
Not Before: Aug 13 14:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22e26a584a2a2f68ae7b65f66534ee035988c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:31:d1:7f:6f:a5:66:6f:bb:39:c8:d7:d3:
76:4e:06:28:7d:7d:53:67:8e:30:16:31:0f:c9:22:
c9:9e:bd:cd:5e:4a:a2:df:3e:1e:e1:d0:90:65:4a:
29:25:17:bc:12:54:a8:1b:19:ab:09:a2:32:7c:e6:
d8:58:b9:fe:5b:54:2b:f4:64:cf:74:07:15:e6:2f:
7e:15:38:ad:7d:19:db:41:ba:5c:27:29:ef:d3:9f:
07:c0:f9:a0:4d:18:e3:95:c7:2a:c0:21:0f:70:45:
47:55:d4:d0:b7:07:d1:70:dd:08:c2:7a:28:4d:e7:
2f:3e:b0:69:46:48:49:e7:c6:13:8d:23:cc:2e:98:
75:d4:5e:05:27:58:cd:46:39:b3:4a:5e:6b:0c:4b:
f9:e5:46:de:cc:27:19:69:07:8c:2b:5e:5c:42:fd:
75:9e:b8:75:d1:b0:d1:04:9d:6a:05:3c:f1:ed:e9:
1e:c2:06:a2:4a:3d:62:a8:cf:da:03:1a:42:8f:c0:
fb:9f:8b:58:4c:27:d1:cb:83:0c:6b:b2:ff:5d:18:
0d:6a:d9:d7:b7:31:e4:80:91:2f:12:f3:6c:f6:f0:
16:b5:61:84:c5:76:b9:79:7c:48:b5:5e:aa:05:d7:
14:58:08:76:28:33:f3:b2:69:74:0b:0f:28:6b:22:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:26:A5:84:A2:A2:F6:8A:E7:B6:5F:66:53:4E:E0:35:98:8C:0F
X509v3 Authority Key Identifier:
keyid:9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/oi4mpYSiovaK57ZfZlNO4DWYjA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.136.0/24
46.183.138.0-46.183.143.255
Signature Algorithm: sha256WithRSAEncryption
68:fe:b6:ce:1f:b3:15:8d:06:4c:58:50:4f:93:84:35:5d:1a:
68:f1:d4:90:58:77:27:57:4e:5b:a0:2e:e9:4c:51:bf:ac:2b:
80:e0:1c:ba:f6:1e:5b:a9:e6:3a:32:56:fa:6e:8a:f2:56:24:
eb:b4:49:ff:79:b4:ae:21:90:5a:61:c2:1c:d5:8c:91:55:a6:
b7:3a:ca:69:6a:7a:db:6c:46:82:92:96:5e:f2:6f:b4:58:81:
25:4d:25:69:e1:58:0f:69:5f:33:9c:15:25:b0:46:26:5c:43:
a0:26:23:de:56:04:f2:34:06:40:7b:c3:26:46:12:2a:41:d2:
83:57:9f:91:5b:9a:f3:00:b7:75:79:f8:46:88:c4:ab:64:f8:
0b:88:ee:d7:3c:e6:37:03:17:25:fe:32:bb:53:a6:60:f2:58:
13:31:fa:b7:1c:a6:a6:4d:4d:a1:80:c8:84:c2:bf:b3:2f:4e:
19:e8:a9:e8:0b:1a:59:a9:a5:ed:aa:13:4b:4e:df:b7:3b:d0:
3f:7d:77:af:f7:52:9e:9f:ef:b5:ed:07:d8:3a:72:fa:80:5a:
e8:77:ba:54:14:67:87:6d:aa:5b:ac:a8:f6:67:f0:90:12:d4:
69:7d:3e:24:03:68:bd:e5:a5:d7:31:1e:7c:b4:37:ae:79:ad:
57:1e:5a:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:10 2026 by rpki-client