Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/L-zvgoeGr5QCNNKdFrigYiUThmw.roa
File: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (raw, json)
Hash identifier: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=
Subject key identifier: 2F:EC:EF:82:87:86:AF:94:02:34:D2:9D:16:B8:A0:62:25:13:86:6C
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019C9036597703955F3212FDEC498BCEC2E3
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/L-zvgoeGr5QCNNKdFrigYiUThmw.roa
Signing time: Tue 24 Feb 2026 15:13:26 +0000
ROA not before: Tue 24 Feb 2026 15:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5484
IP address blocks: 185.46.216.0/24 maxlen: 24
185.46.217.0/24 maxlen: 24
185.46.218.0/24 maxlen: 24
185.46.219.0/24 maxlen: 24
185.128.152.0/24 maxlen: 24
185.128.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:36:59:77:03:95:5f:32:12:fd:ec:49:8b:ce:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Feb 24 15:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fecef828786af940234d29d16b8a0622513866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:79:f3:8f:0d:97:2f:d8:bc:0b:c2:4d:5b:
80:b3:dc:e7:10:3e:e5:11:e7:e9:f0:89:23:54:68:
ed:45:1c:69:b6:65:4f:97:0a:d7:f2:6c:6c:5b:c8:
a3:6a:62:a0:2e:f4:bb:cb:d9:f4:44:a6:29:da:ca:
ca:ae:8a:76:a5:a3:ae:a0:6a:9d:6d:86:b9:86:e7:
b0:bd:0e:75:66:4c:7a:89:f4:ce:73:ca:be:b4:bb:
d7:0e:1c:22:50:8d:f0:7c:2f:e7:ec:0a:5f:95:2c:
4e:01:5b:ac:54:f1:e1:83:5e:b5:9a:08:ac:13:40:
2e:d1:6f:e1:5e:ad:06:0e:44:d4:f9:cb:9d:f7:d1:
2f:cd:4e:be:1a:d0:ac:06:c8:12:7c:a1:c7:34:be:
ee:32:79:b2:42:f7:a7:49:b1:13:30:5c:6c:ce:b1:
9f:81:51:96:2b:da:a0:a0:15:79:17:33:b6:fb:d0:
fd:27:8c:6a:6d:e7:6e:2c:91:74:01:dd:0a:5b:fe:
43:90:32:c3:d8:0b:ce:6f:ca:42:27:b2:4b:58:64:
49:1d:8c:1c:ab:a3:2a:25:ed:d9:6a:32:55:a3:f5:
e4:8d:1e:5c:b3:9c:7c:b8:3a:9b:e8:9a:3a:10:bb:
a6:76:84:03:ed:39:6a:63:43:9c:ed:96:d1:78:24:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:EF:82:87:86:AF:94:02:34:D2:9D:16:B8:A0:62:25:13:86:6C
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/L-zvgoeGr5QCNNKdFrigYiUThmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.216.0/22
185.128.152.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:84:b4:83:eb:13:96:29:9c:a4:13:cc:30:34:33:da:d3:e5:
fc:7d:f1:4e:dd:05:e7:c5:31:82:83:d9:60:02:0f:f2:cc:bd:
93:9e:f3:14:ab:41:97:ed:82:d9:5b:16:ed:e7:b4:8b:ba:a4:
bd:97:95:fa:90:ad:63:56:8f:15:89:ab:ab:94:46:71:6e:48:
63:b7:48:2c:61:69:1e:66:67:93:08:5d:4e:2f:14:09:13:12:
1b:60:1d:d1:74:d0:33:21:5b:79:47:5d:4f:18:a3:16:a2:ad:
0c:cd:e2:0d:e7:be:6f:52:6c:d6:02:ec:e5:ea:71:34:ae:aa:
13:66:2c:79:ae:46:ad:5c:00:f3:b6:0b:32:0f:be:52:68:93:
eb:7b:4d:d7:b3:bf:21:9b:cf:03:d0:49:3f:35:0d:8c:98:b6:
16:8c:84:10:02:c2:b0:0d:93:77:d8:8b:89:98:4e:2b:d3:2e:
02:2d:96:91:1a:6a:d5:36:ea:b8:43:01:e1:0f:ac:98:c1:75:
ca:35:17:f3:52:52:fe:f7:f2:11:9f:b2:04:7d:e7:29:c6:59:
7d:53:d1:3c:45:65:1c:ee:f3:6e:a2:50:af:43:05:22:f5:43:
42:49:ee:3f:4c:39:fb:d2:20:e8:40:71:02:10:4c:ba:f6:ef:
27:1f:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:43 2026 by rpki-client