Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8ASVZrwrDUtOOOflEnewivWIEDY.roa
File: 8ASVZrwrDUtOOOflEnewivWIEDY.roa (raw, json)
Hash identifier: ANvzu0CryswnXEP3hFmg70ywnF0JMFzP3BfXRWuMDMY=
Subject key identifier: F0:04:95:66:BC:2B:0D:4B:4E:38:E7:E5:12:77:B0:8A:F5:88:10:36
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01A0AFD32B945A897A6B6427FC427AA6AAD5
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8ASVZrwrDUtOOOflEnewivWIEDY.roa
Signing time: Thu 17 Sep 2026 14:44:07 +0000
ROA not before: Thu 17 Sep 2026 14:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4849
IP address blocks: 46.253.2.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
2a09:be87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d3:2b:94:5a:89:7a:6b:64:27:fc:42:7a:a6:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Sep 17 14:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0049566bc2b0d4b4e38e7e51277b08af5881036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:7f:25:c1:c4:94:11:60:e4:aa:59:6d:a2:
2d:a6:26:e8:bb:e4:57:f4:e6:6a:e6:e6:f6:ee:dc:
12:ed:6d:0c:8e:80:fb:ed:3e:6c:85:fd:33:46:76:
f6:a5:21:e8:8e:4f:05:b1:98:8d:4b:90:73:e6:fc:
07:02:f5:d6:2f:6f:b8:94:c0:a6:94:7f:90:46:e4:
7e:7f:44:51:c0:c6:a0:fd:5a:2e:ac:23:4a:fd:41:
c1:7a:d5:87:0f:f9:30:c9:0d:47:77:15:f0:c0:21:
ca:b7:e5:c4:fe:46:db:98:27:87:6f:8f:d5:79:0e:
68:95:22:9c:ab:9c:d0:22:e3:02:25:6d:26:56:8f:
f4:bd:69:11:4a:98:77:63:77:03:35:2e:e7:c8:7e:
e7:a2:9b:eb:bf:3f:d4:cf:e2:10:d2:6f:e0:5c:c6:
27:32:c4:fc:c4:18:09:19:e2:97:53:0d:23:87:e3:
45:58:ff:af:1b:5e:29:7f:44:19:41:c2:02:85:66:
bf:b7:02:31:74:05:a3:77:84:c5:d3:fe:e3:e9:f6:
2c:91:41:f8:61:1d:da:af:8d:9d:3f:47:8f:58:2e:
13:e7:fc:62:d8:03:bc:36:d2:98:82:11:19:1f:e1:
6a:3a:92:ed:9c:9e:41:58:68:4d:83:67:70:a5:3c:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:95:66:BC:2B:0D:4B:4E:38:E7:E5:12:77:B0:8A:F5:88:10:36
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/8ASVZrwrDUtOOOflEnewivWIEDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.2.0/23
91.132.62.0/24
93.94.142.0/24
IPv6:
2a09:be87::/32
Signature Algorithm: sha256WithRSAEncryption
41:12:df:22:4e:9c:01:0d:e2:c9:77:b9:7c:86:ad:e4:aa:4d:
d5:a2:d0:c9:31:69:6a:f5:c5:64:d0:7d:28:de:15:64:b2:b7:
2d:07:9e:d3:8f:a1:57:94:69:f0:2d:bb:fa:54:bb:a8:09:50:
5a:63:d0:7e:29:27:2d:7f:65:88:8d:9a:8e:d4:01:10:f7:4d:
4d:f9:21:0a:ea:ef:2f:25:c3:2a:09:05:da:c6:42:57:8e:6d:
18:db:9c:d7:d9:35:a1:65:59:f4:a6:d0:ed:93:d8:4e:a3:8c:
a3:be:f1:45:80:79:f1:8b:0e:be:3c:8d:7e:5c:c1:6e:39:a4:
d6:79:06:0f:7a:41:df:b2:38:18:63:58:39:f5:2d:49:b9:fc:
cb:c2:79:ba:01:ef:08:4a:e3:5b:de:d5:b7:01:70:2e:02:61:
02:9f:45:e3:2f:99:09:f5:10:2e:08:5b:35:aa:28:71:24:78:
03:09:86:45:5f:3a:5d:e8:6f:b6:c6:6e:37:46:14:6a:26:1e:
91:e4:7b:c0:a3:c3:bc:22:99:1b:ef:5f:ec:a3:83:bb:7c:a6:
dd:22:43:cc:9b:d0:a5:91:36:00:fe:b8:8a:43:bd:a3:4c:67:
20:f1:fe:b6:ed:d5:3c:00:c5:e4:cf:52:49:a7:ad:ee:b5:71:
1c:a3:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:47 2026 by rpki-client