Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa
File: 2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa (raw, json)
Hash identifier: cybpkVwdsMajo+j6GQEPWPYPJtxhQXNnJjY27Ojj6kI=
Subject key identifier: D9:C1:22:34:E2:39:27:97:B9:2E:FD:B8:5E:CE:C3:55:7F:01:71:DA
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 019CA55749C5B6543256613AC006C23CEC9F
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa
Signing time: Sat 28 Feb 2026 17:41:27 +0000
ROA not before: Sat 28 Feb 2026 17:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47253
IP address blocks: 46.18.16.0/21 maxlen: 21
46.18.16.0/24 maxlen: 24
46.18.17.0/24 maxlen: 24
46.18.18.0/24 maxlen: 24
46.18.19.0/24 maxlen: 24
46.18.20.0/24 maxlen: 24
46.18.21.0/24 maxlen: 24
46.18.22.0/24 maxlen: 24
46.18.23.0/24 maxlen: 24
62.16.64.0/20 maxlen: 20
62.16.64.0/24 maxlen: 24
62.16.65.0/24 maxlen: 24
62.16.66.0/24 maxlen: 24
62.16.67.0/24 maxlen: 24
62.16.68.0/24 maxlen: 24
62.16.69.0/24 maxlen: 24
62.16.70.0/24 maxlen: 24
62.16.71.0/24 maxlen: 24
62.16.72.0/24 maxlen: 24
62.16.73.0/24 maxlen: 24
62.16.74.0/24 maxlen: 24
62.16.75.0/24 maxlen: 24
62.16.76.0/24 maxlen: 24
62.16.77.0/24 maxlen: 24
62.16.78.0/24 maxlen: 24
62.16.79.0/24 maxlen: 24
93.184.0.0/20 maxlen: 20
93.184.0.0/22 maxlen: 22
93.184.0.0/24 maxlen: 24
93.184.1.0/24 maxlen: 24
93.184.2.0/24 maxlen: 24
93.184.3.0/24 maxlen: 24
93.184.4.0/22 maxlen: 22
93.184.4.0/24 maxlen: 24
93.184.5.0/24 maxlen: 24
93.184.6.0/24 maxlen: 24
93.184.7.0/24 maxlen: 24
93.184.8.0/22 maxlen: 22
93.184.8.0/24 maxlen: 24
93.184.9.0/24 maxlen: 24
93.184.10.0/24 maxlen: 24
93.184.11.0/24 maxlen: 24
93.184.12.0/22 maxlen: 22
93.184.12.0/24 maxlen: 24
93.184.13.0/24 maxlen: 24
93.184.14.0/24 maxlen: 24
93.184.15.0/24 maxlen: 24
185.6.56.0/22 maxlen: 24
185.6.56.0/24 maxlen: 24
185.6.57.0/24 maxlen: 24
185.6.58.0/24 maxlen: 24
185.6.59.0/24 maxlen: 24
193.124.248.0/22 maxlen: 22
193.124.248.0/24 maxlen: 24
193.124.249.0/24 maxlen: 24
193.124.250.0/24 maxlen: 24
193.124.251.0/24 maxlen: 24
194.58.72.0/24 maxlen: 24
194.58.73.0/24 maxlen: 24
194.58.75.0/24 maxlen: 24
194.58.76.0/23 maxlen: 23
194.58.76.0/24 maxlen: 24
194.58.77.0/24 maxlen: 24
194.58.152.0/23 maxlen: 23
194.58.152.0/24 maxlen: 24
194.58.153.0/24 maxlen: 24
194.58.220.0/23 maxlen: 23
194.58.220.0/24 maxlen: 24
194.58.221.0/24 maxlen: 24
194.58.240.0/24 maxlen: 24
194.58.242.0/23 maxlen: 23
194.58.244.0/23 maxlen: 23
194.58.247.0/24 maxlen: 24
2a02:26d0::/32 maxlen: 32
2a02:26d0::/48 maxlen: 48
2a02:26d0:1::/48 maxlen: 48
2a02:26d0:2::/48 maxlen: 48
2a02:26d0:4::/48 maxlen: 48
2a02:26d0:9::/48 maxlen: 48
2a02:26d0:a::/48 maxlen: 48
2a02:26d0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:57:49:c5:b6:54:32:56:61:3a:c0:06:c2:3c:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Feb 28 17:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9c12234e2392797b92efdb85ecec3557f0171da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:3e:b5:35:f5:e3:54:92:7a:f4:e0:af:63:
6d:37:e5:04:f8:89:52:01:f6:9d:71:ed:5f:65:c9:
35:f3:48:4c:94:1c:60:f6:e9:46:c3:49:2a:ce:a5:
b4:65:c3:56:73:50:bc:76:37:b5:a4:7f:8c:ed:05:
12:4f:08:ec:43:f1:88:eb:8b:85:22:c6:1c:c8:7e:
f5:6f:18:ee:ce:82:44:63:5e:5d:5b:67:d3:90:a2:
bd:e2:45:29:de:ad:dc:a4:78:bf:d5:61:ad:24:d4:
7a:3d:3c:7e:a2:83:ee:64:40:43:d1:8c:3f:4e:4b:
93:56:1e:c9:76:35:c7:cd:47:66:cd:4a:8a:0d:51:
a6:3e:90:cb:71:36:0a:f7:0e:30:65:9e:61:4c:43:
cd:d3:c0:d6:5b:4a:ca:04:96:2a:45:5c:88:22:97:
c9:58:1b:ca:35:29:52:4b:08:bc:b8:81:5d:75:1f:
32:eb:2b:da:a2:85:8c:40:c5:dc:8d:a0:9a:1a:39:
d0:b7:e7:72:21:3e:db:e9:51:a3:8d:18:1e:40:5a:
2a:0a:9f:34:84:d9:3a:91:06:aa:d7:49:56:2d:d4:
9f:7a:8d:da:70:b9:61:0b:91:04:19:ca:d0:0c:ec:
87:bf:b8:1b:84:a2:ce:d3:08:4a:1a:f2:86:0b:75:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:22:34:E2:39:27:97:B9:2E:FD:B8:5E:CE:C3:55:7F:01:71:DA
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/2cEiNOI5J5e5Lv24Xs7DVX8Bcdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.16.0/21
62.16.64.0/20
93.184.0.0/20
185.6.56.0/22
193.124.248.0/22
194.58.72.0/23
194.58.75.0-194.58.77.255
194.58.152.0/23
194.58.220.0/23
194.58.240.0/24
194.58.242.0-194.58.245.255
194.58.247.0/24
IPv6:
2a02:26d0::/32
Signature Algorithm: sha256WithRSAEncryption
20:d0:31:f8:ff:41:1e:30:5b:3b:e7:9c:50:a9:26:98:12:da:
a8:f8:1b:80:f7:f9:8c:8d:3e:69:97:69:4e:28:a1:bb:39:fa:
63:07:35:f1:70:25:cf:33:54:6b:2c:78:cc:dd:05:d5:0d:8c:
56:c7:2d:81:06:a5:7e:d0:e4:b9:a4:4d:a8:5d:bf:0f:31:00:
9a:60:92:8b:94:81:88:4e:26:4a:a1:4d:95:a7:34:df:96:16:
cf:1a:6d:02:7c:ad:47:3e:bd:9a:af:bb:2f:fe:d5:5a:25:3e:
86:76:8f:65:91:93:5d:e2:b4:9b:7f:22:e3:01:64:9f:3d:4f:
13:df:09:f9:b6:f7:71:53:e5:2b:ec:4f:7b:42:1a:7e:39:77:
13:54:36:e0:a7:14:16:c2:f3:fd:11:b0:24:59:be:89:3f:24:
ab:cc:51:4e:77:ff:dc:f6:cd:01:78:d7:1b:88:e1:e6:d9:70:
fc:98:e7:8d:e6:a7:f4:01:f5:24:70:f5:52:43:8e:8b:2c:84:
0b:5d:90:db:63:3b:69:33:e5:57:28:98:af:4b:7f:a5:1c:a6:
ca:c3:33:1e:b5:65:86:43:cc:95:0f:2e:7f:68:ef:f8:7a:aa:
9c:82:21:6f:e2:35:29:ed:b3:8a:59:d8:61:f3:6e:30:33:00:
c8:33:3e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:28 2026 by rpki-client