Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/SnnndrI5I4HacAA38zXR4nk9Ylg.roa
File: SnnndrI5I4HacAA38zXR4nk9Ylg.roa (raw, json)
Hash identifier: UEvNUkkd4Bm+dpT6itn8psZdStwpVneMoWnf8LbtGH8=
Subject key identifier: 4A:79:E7:76:B2:39:23:81:DA:70:00:37:F3:35:D1:E2:79:3D:62:58
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019E6984BE0C192E26E3213AD92B52563A97
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/SnnndrI5I4HacAA38zXR4nk9Ylg.roa
Signing time: Wed 27 May 2026 12:59:27 +0000
ROA not before: Wed 27 May 2026 12:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.92.247.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
185.243.212.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:84:be:0c:19:2e:26:e3:21:3a:d9:2b:52:56:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: May 27 12:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a79e776b2392381da700037f335d1e2793d6258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:d3:cd:e7:af:e1:fa:5d:d9:74:ab:2c:56:
89:b0:1b:e0:12:a9:80:ce:3c:0d:6d:3c:60:1e:80:
7f:42:b8:39:ac:e3:db:b8:e2:39:cf:9b:e6:d5:90:
24:b9:8b:f2:2e:5a:26:73:0e:aa:63:94:42:d0:fd:
49:6a:ee:a0:74:22:a1:24:b6:58:db:a6:3f:6e:af:
65:d0:c5:e7:0e:ea:f0:ef:f1:3a:11:fc:22:58:d4:
d5:11:f4:3f:c0:3e:5c:9d:4a:9d:9b:d0:eb:98:21:
67:71:f2:13:f0:92:d8:da:01:5b:53:2a:c8:06:34:
3e:1a:e3:9f:d9:26:2d:d9:e0:da:ec:b3:4e:d1:dc:
18:51:80:32:2f:92:55:38:7f:29:72:f2:49:59:7e:
7d:89:6c:86:b1:d8:1e:b0:4b:c1:fc:21:d9:70:da:
dc:2f:3e:fe:94:d2:57:b7:91:05:a5:c7:43:4d:fc:
84:21:17:64:cc:9b:e1:00:b7:42:5a:4c:d4:28:47:
8a:03:ba:33:1e:76:ea:02:c9:62:71:63:34:97:f9:
1a:fd:b1:48:87:37:3b:43:fb:ab:43:d4:2a:de:d9:
e3:b7:3b:66:a2:eb:8f:32:a9:db:f9:f2:fc:d4:ec:
e0:24:3c:3a:28:6e:45:1e:d9:d7:19:44:06:b5:95:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:E7:76:B2:39:23:81:DA:70:00:37:F3:35:D1:E2:79:3D:62:58
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/SnnndrI5I4HacAA38zXR4nk9Ylg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.92.247.0/24
91.132.60.0/23
91.132.63.0/24
93.94.140.0/24
93.94.142.0/24
95.169.196.0/24
95.169.202.0/24
185.1.156.0/24
185.7.219.0/24
185.243.212.0/23
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
4c:ea:2b:8f:41:30:ad:2f:dc:e0:4a:1c:f6:20:bf:95:d3:3e:
51:27:f3:2c:6e:01:04:c4:4d:8b:00:5c:a2:73:a2:cd:fc:c1:
f0:76:df:bc:4b:c7:7c:33:39:d1:76:72:b6:c7:74:31:92:01:
25:4c:01:9d:21:3b:0f:bb:15:f4:fb:ce:56:bd:17:fe:0b:3a:
d1:ca:44:b9:42:39:ae:1f:11:96:99:53:9a:c4:54:ed:e1:c2:
1f:84:85:7b:25:88:f1:42:fb:a0:51:e8:f9:2d:1c:95:f0:df:
57:b0:90:3a:15:e8:6d:41:23:f5:08:5e:56:22:04:e6:ad:f9:
84:85:92:f3:d8:1f:9d:39:bd:5c:62:40:aa:ff:77:56:15:2a:
5e:26:35:ed:61:e8:d5:7b:e4:b5:75:d1:ce:d6:b0:db:29:0d:
25:74:46:d5:40:03:46:6f:4d:ba:e0:65:e3:24:e8:da:97:28:
25:2a:12:2a:f7:6a:ef:50:71:a1:bd:4f:ac:28:65:78:d0:3d:
55:3f:ee:d9:ee:5a:43:1c:01:0a:99:99:fb:d7:56:9f:ea:33:
e1:05:be:f3:fa:79:37:62:9e:85:89:c5:9b:54:8f:48:e2:7b:
b1:24:21:c2:14:a5:c6:6a:ff:25:61:f1:db:ad:d6:75:6f:8b:
72:9a:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:32 2026 by rpki-client