Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/YVzr6vyyuw-oO64mQGWz_3v8BOU.roa
File: YVzr6vyyuw-oO64mQGWz_3v8BOU.roa (raw, json)
Hash identifier: nZGyRDHD7jjYrno+j4QVVVpuV9EolBU0TxqPvuvji7Y=
Subject key identifier: 61:5C:EB:EA:FC:B2:BB:0F:A8:3B:AE:26:40:65:B3:FF:7B:FC:04:E5
Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial: 01A01EC2F2A141A60A5BBC9961477BEE0B76
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/YVzr6vyyuw-oO64mQGWz_3v8BOU.roa
Signing time: Thu 20 Aug 2026 10:41:27 +0000
ROA not before: Thu 20 Aug 2026 10:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47253
IP address blocks: 46.18.16.0/21 maxlen: 21
46.18.16.0/24 maxlen: 24
46.18.17.0/24 maxlen: 24
46.18.18.0/24 maxlen: 24
46.18.19.0/24 maxlen: 24
46.18.20.0/24 maxlen: 24
46.18.21.0/24 maxlen: 24
46.18.22.0/24 maxlen: 24
46.18.23.0/24 maxlen: 24
62.16.64.0/20 maxlen: 20
62.16.64.0/24 maxlen: 24
62.16.65.0/24 maxlen: 24
62.16.66.0/24 maxlen: 24
62.16.67.0/24 maxlen: 24
62.16.68.0/24 maxlen: 24
62.16.69.0/24 maxlen: 24
62.16.70.0/24 maxlen: 24
62.16.71.0/24 maxlen: 24
62.16.72.0/24 maxlen: 24
62.16.73.0/24 maxlen: 24
62.16.74.0/24 maxlen: 24
62.16.75.0/24 maxlen: 24
62.16.76.0/24 maxlen: 24
62.16.77.0/24 maxlen: 24
62.16.78.0/24 maxlen: 24
62.16.79.0/24 maxlen: 24
93.184.0.0/20 maxlen: 20
93.184.0.0/22 maxlen: 22
93.184.0.0/24 maxlen: 24
93.184.1.0/24 maxlen: 24
93.184.2.0/24 maxlen: 24
93.184.3.0/24 maxlen: 24
93.184.4.0/22 maxlen: 22
93.184.4.0/24 maxlen: 24
93.184.5.0/24 maxlen: 24
93.184.6.0/24 maxlen: 24
93.184.7.0/24 maxlen: 24
93.184.8.0/22 maxlen: 22
93.184.8.0/24 maxlen: 24
93.184.9.0/24 maxlen: 24
93.184.10.0/24 maxlen: 24
93.184.11.0/24 maxlen: 24
93.184.12.0/22 maxlen: 22
93.184.12.0/24 maxlen: 24
93.184.13.0/24 maxlen: 24
93.184.14.0/24 maxlen: 24
93.184.15.0/24 maxlen: 24
185.6.56.0/22 maxlen: 24
185.6.56.0/24 maxlen: 24
185.6.57.0/24 maxlen: 24
185.6.58.0/24 maxlen: 24
185.6.59.0/24 maxlen: 24
193.124.248.0/22 maxlen: 22
193.124.248.0/24 maxlen: 24
193.124.249.0/24 maxlen: 24
193.124.250.0/24 maxlen: 24
193.124.251.0/24 maxlen: 24
194.58.72.0/24 maxlen: 24
194.58.73.0/24 maxlen: 24
194.58.75.0/24 maxlen: 24
194.58.76.0/23 maxlen: 23
194.58.76.0/24 maxlen: 24
194.58.77.0/24 maxlen: 24
194.58.152.0/23 maxlen: 23
194.58.152.0/24 maxlen: 24
194.58.153.0/24 maxlen: 24
194.58.220.0/23 maxlen: 23
194.58.220.0/24 maxlen: 24
194.58.221.0/24 maxlen: 24
194.58.240.0/24 maxlen: 24
194.58.242.0/23 maxlen: 23
194.58.244.0/23 maxlen: 23
2a02:26d0::/32 maxlen: 32
2a02:26d0::/48 maxlen: 48
2a02:26d0:1::/48 maxlen: 48
2a02:26d0:2::/48 maxlen: 48
2a02:26d0:4::/48 maxlen: 48
2a02:26d0:9::/48 maxlen: 48
2a02:26d0:a::/48 maxlen: 48
2a02:26d0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:c2:f2:a1:41:a6:0a:5b:bc:99:61:47:7b:ee:0b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Validity
Not Before: Aug 20 10:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615cebeafcb2bb0fa83bae264065b3ff7bfc04e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:9e:0b:ca:c4:50:af:b8:89:0a:e9:df:db:
ba:61:bf:26:0d:f4:ca:30:fa:18:7d:49:16:ed:8e:
4c:5a:03:30:2d:73:d1:e9:8d:88:32:d8:54:f9:0e:
34:37:f9:e3:0d:e3:c2:30:3f:2d:67:c4:f1:2c:8a:
c3:59:a7:5f:6f:58:d8:37:72:09:b6:2c:b5:7c:69:
09:27:9d:29:21:0b:25:65:48:0b:eb:d9:6b:82:39:
eb:84:57:29:9d:63:df:c8:98:48:96:d0:8e:34:28:
3b:80:31:70:fb:37:8a:5e:a6:e8:d4:8a:e2:83:9e:
9a:51:1f:d0:a9:ec:58:52:74:8c:b4:5e:6e:d7:8a:
0e:5c:86:8d:9a:60:ca:d6:1f:1c:98:68:09:18:74:
17:1b:02:22:c9:fa:ef:ed:de:ba:5d:1d:21:b7:bf:
ca:7a:3a:1d:aa:43:a0:5d:ca:63:93:a6:c7:af:05:
72:ff:40:07:55:bf:85:51:7f:35:7e:4b:65:96:53:
a5:f9:f0:00:30:a5:66:2f:b9:f0:1f:a4:3d:81:b0:
27:fc:4d:30:83:39:83:7a:83:5d:5b:84:bb:9b:6b:
73:52:b7:45:12:ab:d0:1b:db:e8:e4:ea:fd:df:cb:
0c:94:dc:3a:ea:ba:a9:1a:9f:08:b6:f1:6d:e4:5f:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5C:EB:EA:FC:B2:BB:0F:A8:3B:AE:26:40:65:B3:FF:7B:FC:04:E5
X509v3 Authority Key Identifier:
keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/YVzr6vyyuw-oO64mQGWz_3v8BOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.16.0/21
62.16.64.0/20
93.184.0.0/20
185.6.56.0/22
193.124.248.0/22
194.58.72.0/23
194.58.75.0-194.58.77.255
194.58.152.0/23
194.58.220.0/23
194.58.240.0/24
194.58.242.0-194.58.245.255
IPv6:
2a02:26d0::/32
Signature Algorithm: sha256WithRSAEncryption
65:9f:37:63:24:dd:5e:73:46:ea:a6:17:9f:11:3d:14:3c:f1:
f8:3c:db:ef:23:2c:2c:bb:de:9c:10:ae:00:42:1c:81:20:71:
37:cf:78:b4:e9:52:78:8d:eb:28:e2:fa:de:8d:64:03:cb:b2:
c8:8f:78:fa:02:94:ea:b8:31:06:d6:d8:13:d9:4a:15:a9:74:
cf:27:5a:e5:ce:e2:7e:41:81:c3:53:cd:07:8e:8a:e1:fe:31:
60:40:29:8b:86:1c:7a:d1:73:1b:a8:dc:a0:b3:2c:34:cf:a8:
f0:ea:7d:52:5d:91:d5:61:95:47:cd:3b:38:7d:ff:41:e3:6e:
58:d1:ea:40:dd:ec:fa:22:84:81:da:9f:94:cb:bc:41:d4:24:
9a:65:0f:58:3b:99:75:af:0e:8f:21:e3:38:88:04:da:81:64:
b3:23:ac:28:00:71:aa:89:bb:ce:56:b2:72:f5:94:e1:fa:a8:
57:8e:71:a0:c7:aa:39:cc:2f:2e:b0:2c:70:9c:a1:9f:68:41:
4e:08:97:29:d9:d8:51:23:04:f6:c1:aa:8a:3c:5c:00:9e:96:
6b:96:34:dd:42:8a:b1:65:0f:85:62:45:21:93:ce:b0:86:b0:
d7:48:df:b7:c4:b2:b3:fb:d3:a5:7f:1f:c3:ce:2f:36:2c:c3:
23:90:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:09 2026 by rpki-client