Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ly50p6bn7OtoWGksmAe1FXQRbrM.roa
File: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (raw, json)
Hash identifier: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=
Subject key identifier: 97:2E:74:A7:A6:E7:EC:EB:68:58:69:2C:98:07:B5:15:74:11:6E:B3
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019D7B73CEAA0D001D3B1E4D5A108CE8C410
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ly50p6bn7OtoWGksmAe1FXQRbrM.roa
Signing time: Sat 11 Apr 2026 07:31:20 +0000
ROA not before: Sat 11 Apr 2026 07:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/24 maxlen: 24
46.243.49.0/24 maxlen: 24
46.243.50.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
78.24.8.0/21 maxlen: 21
93.185.96.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
185.64.216.0/22 maxlen: 22
185.115.1.0/24 maxlen: 24
185.115.2.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a02:5420:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:73:ce:aa:0d:00:1d:3b:1e:4d:5a:10:8c:e8:c4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 11 07:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=972e74a7a6e7eceb6858692c9807b51574116eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:72:c1:53:67:c0:db:d2:e1:ab:4b:e3:42:
23:96:23:a5:91:3d:71:cb:13:0e:d1:d6:25:09:35:
29:a1:55:94:a1:86:46:cb:8c:ca:4f:d0:ae:b2:f4:
ed:bf:12:4c:78:9a:69:c4:5b:dc:04:f2:51:76:61:
39:96:3c:d8:8d:50:9e:12:1d:63:6e:b3:64:f6:23:
ed:c0:32:6b:1a:72:c1:33:a4:0f:e5:dc:b1:f6:49:
41:a6:25:46:24:0e:54:5f:3e:8f:b1:ff:3b:7f:fb:
79:07:0d:84:80:79:49:19:2a:78:c4:83:c8:98:97:
6f:4a:c7:69:f6:ce:3b:76:f0:8a:99:07:96:9b:7f:
d3:4a:08:3d:45:ea:9b:99:3e:b3:b9:ab:fa:28:71:
ea:ef:09:fa:cc:64:94:c0:eb:e2:18:13:7d:6c:3b:
af:ed:99:b1:ed:77:20:ee:3a:8d:cf:b8:ca:f7:57:
4e:49:0b:09:fb:fd:47:64:10:f9:a4:3e:ba:45:9c:
a2:a1:f9:6b:96:fa:7d:b1:63:2c:d4:05:ce:1c:bc:
81:c6:03:b4:a9:d5:70:c7:f3:11:32:ff:3a:9b:f8:
54:f8:bb:f9:f2:a5:2f:b0:2f:17:c8:d2:dd:41:c9:
b9:c7:bf:79:64:cb:87:8a:e2:f3:8e:16:b7:62:56:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:74:A7:A6:E7:EC:EB:68:58:69:2C:98:07:B5:15:74:11:6E:B3
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ly50p6bn7OtoWGksmAe1FXQRbrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0-46.243.50.255
46.243.55.0/24
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::/31
2a02:5420:11::/48
Signature Algorithm: sha256WithRSAEncryption
7d:61:8b:dc:96:75:71:b3:0f:8b:37:13:ee:22:48:3e:a5:b6:
88:4d:d1:4e:ef:23:c1:5a:b1:4c:ac:d5:39:29:b0:17:58:39:
e4:e0:70:46:e6:bb:5a:bf:75:c6:73:85:e7:ce:79:79:a5:bf:
be:95:1e:17:66:c2:8b:71:f2:13:a9:a5:b4:ae:d8:8f:d3:6f:
6c:62:9a:4b:01:31:24:0a:75:d9:be:89:30:de:46:32:b1:90:
6a:5f:5a:b6:d9:df:2c:4d:94:f8:f6:3c:71:a5:ac:c1:33:cc:
50:50:b9:7d:42:bc:a1:66:83:71:3d:53:c3:c4:79:99:57:f6:
7c:8b:09:05:ae:2f:74:74:02:ae:70:b8:bb:f2:d4:84:98:b4:
50:a8:bc:d7:04:f4:7a:bd:d8:a8:28:59:9d:27:6e:9c:44:db:
7e:6f:9e:75:4e:1a:47:2b:26:56:2c:de:60:2c:ff:8c:9a:88:
0e:1f:b6:49:c7:6a:3e:ec:70:8a:54:75:7b:f9:a3:99:f5:8c:
b6:01:57:06:d6:42:8f:4e:80:ce:71:0c:e9:3c:4a:b1:78:73:
19:eb:74:5c:f8:cf:3a:92:0d:6e:9a:4d:e2:06:ae:80:96:d8:
4e:c1:d8:f7:b5:58:f1:6c:4d:33:04:dc:2e:bf:4d:7d:34:4b:
72:69:84:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:20:06 2026 by rpki-client