Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/i5C8aIGQ8X0d6LJCEuWLi7tOSmc.roa
File: i5C8aIGQ8X0d6LJCEuWLi7tOSmc.roa (raw, json)
Hash identifier: 9ly9WS1cyVfWn5F9jSTx0AXhIEJy5Y+/0+qEwh1H9ww=
Subject key identifier: 8B:90:BC:68:81:90:F1:7D:1D:E8:B2:42:12:E5:8B:8B:BB:4E:4A:67
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A19C1457F471303906449C4035A24D353B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/i5C8aIGQ8X0d6LJCEuWLi7tOSmc.roa
Signing time: Mon 02 Nov 2026 11:45:41 +0000
ROA not before: Mon 02 Nov 2026 11:45:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.29.24.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:14:57:f4:71:30:39:06:44:9c:40:35:a2:4d:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 2 11:45:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b90bc688190f17d1de8b24212e58b8bbb4e4a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:bd:4d:7f:03:2a:2a:a3:25:16:01:21:04:
5c:f0:75:ba:e4:ad:b5:69:6c:79:3c:12:d1:e7:6a:
dc:49:41:ef:b5:a2:e5:1a:6b:8c:93:f4:ed:d3:97:
ef:46:53:bd:12:f3:2a:d0:88:24:be:8d:52:8f:da:
02:a8:93:c3:3a:2c:16:14:20:4d:82:c0:75:5c:6b:
6d:a5:08:fb:55:24:8c:e3:74:43:90:59:c4:6a:f3:
38:31:32:8a:af:ae:bc:a2:63:70:0f:b1:31:74:e0:
13:d3:01:67:9b:19:c1:e9:23:9f:37:2c:06:62:cf:
7e:a4:3a:ab:8e:33:39:6e:a7:b0:81:a4:b5:d9:8a:
e3:36:e7:98:b0:b6:dd:ae:f3:56:5e:56:a5:2a:9b:
a0:3e:9c:f4:b5:36:40:e9:24:5c:12:ed:36:09:b8:
cd:2a:11:97:81:ce:53:77:b6:aa:ae:fa:ac:d0:d1:
fc:19:55:a1:65:f5:29:cc:1a:fe:1d:fe:aa:32:70:
d2:41:35:d6:f2:bb:94:21:30:dd:4a:ed:2a:2a:93:
c8:60:d3:9d:ca:12:d3:65:d0:5d:0d:07:73:44:66:
fc:80:98:5f:b8:98:bb:04:e5:98:63:b2:82:c5:d6:
30:99:0c:be:a3:99:3a:4a:f2:6f:ba:41:df:7a:97:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:BC:68:81:90:F1:7D:1D:E8:B2:42:12:E5:8B:8B:BB:4E:4A:67
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/i5C8aIGQ8X0d6LJCEuWLi7tOSmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
185.85.188.0/24
185.85.237.0/24
185.86.12.0/24
185.88.173.0-185.88.175.255
185.98.61.0/24
185.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
14:29:7b:6a:10:a6:08:cc:aa:64:89:35:81:e4:51:10:36:33:
e3:b8:6d:3e:15:41:96:0a:73:f2:ef:89:0b:93:73:3c:18:15:
0c:ad:ea:a2:a3:19:79:26:f5:5e:2e:81:18:a1:85:88:93:d3:
cf:94:f0:e6:f9:07:85:fe:3d:9e:17:55:31:18:ee:8c:8a:19:
3c:2d:4e:02:87:28:bb:94:c5:0e:a2:7a:4c:97:91:6c:41:a3:
cb:d4:98:b7:c6:87:9b:82:d5:c8:05:c9:a5:6c:c6:17:39:c0:
a6:ca:d0:64:3f:e6:f3:47:26:07:0c:2f:87:7d:ec:9e:fb:b5:
8c:55:cd:d3:07:da:68:7b:2f:03:99:ba:05:7e:be:d3:ba:32:
2b:b0:a9:fe:d9:a1:a6:53:15:72:28:c7:28:ed:63:89:f9:9d:
0e:20:4d:62:9a:10:5b:c0:2a:2a:bb:c2:e9:e4:cc:0a:0d:41:
73:ae:c7:3f:4d:2d:0a:66:0b:62:68:47:f4:fd:29:fb:36:80:
11:5e:4d:e0:08:88:f1:d6:88:55:ad:d9:41:0b:86:fd:09:ce:
33:55:62:6a:7a:de:48:da:df:b0:2e:f5:82:65:2f:21:8b:d0:
e0:7d:5c:d6:7b:0b:c2:49:aa:0e:23:56:d3:25:f6:a7:c2:09:
45:05:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:37 2026 by rpki-client