Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/SnthKeN0QNsYJSCvNCIW3QkdzO4.roa
File: SnthKeN0QNsYJSCvNCIW3QkdzO4.roa (raw, json)
Hash identifier: pm2CDsGetmBd20fFZ1+ibNzTRJyqdNoHhgU1ZBjBaHg=
Subject key identifier: 4A:7B:61:29:E3:74:40:DB:18:25:20:AF:34:22:16:DD:09:1D:CC:EE
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019F9A3DE0BBEAA89C7102CABA3A3F32A54D
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/SnthKeN0QNsYJSCvNCIW3QkdzO4.roa
Signing time: Sat 25 Jul 2026 17:06:14 +0000
ROA not before: Sat 25 Jul 2026 17:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47527
IP address blocks: 45.95.208.0/24 maxlen: 24
46.30.120.0/21 maxlen: 24
62.69.152.0/21 maxlen: 24
79.174.152.0/21 maxlen: 24
91.223.235.0/24 maxlen: 24
91.230.239.0/24 maxlen: 24
178.23.176.0/21 maxlen: 24
185.31.76.0/22 maxlen: 24
185.126.152.0/23 maxlen: 24
185.208.212.0/22 maxlen: 24
188.116.39.0/24 maxlen: 24
194.247.61.0/24 maxlen: 24
195.182.36.0/24 maxlen: 24
213.142.140.0/23 maxlen: 24
2a00:1b18::/29 maxlen: 32
2a00:1cf0::/29 maxlen: 32
2a00:b920::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:3d:e0:bb:ea:a8:9c:71:02:ca:ba:3a:3f:32:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jul 25 17:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a7b6129e37440db182520af342216dd091dccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:de:78:63:24:d6:a9:f3:7c:1e:6c:e8:64:54:
d7:ff:c8:59:15:14:00:38:8f:4e:6c:90:1a:b2:da:
51:da:74:88:2a:0d:a6:91:82:d5:46:33:ab:5c:d0:
8c:f3:d1:23:62:00:a9:e9:63:f1:d8:81:27:63:2c:
51:35:fb:3b:78:57:4b:05:4d:bf:ac:e5:9d:53:eb:
50:3f:21:7d:68:a2:34:c7:47:22:d4:14:2d:44:be:
eb:66:19:50:3f:ef:c2:79:0e:af:0f:67:32:c2:1e:
08:08:68:05:c2:3b:9b:9e:53:fd:12:05:3b:c2:eb:
8f:e9:dc:c6:c4:59:b5:bd:d8:96:eb:e6:fe:ee:d8:
72:40:81:80:ae:7d:6c:fa:7d:91:ff:fb:9f:b7:57:
09:37:1e:93:7e:26:de:59:da:86:d2:15:f4:f2:97:
ed:e1:87:98:eb:26:40:42:42:78:3e:8d:aa:2c:e3:
31:1e:92:93:67:5f:6e:69:57:d9:1c:c6:74:52:23:
c3:2d:72:d9:4c:08:d9:ea:64:19:fb:9c:46:34:95:
56:aa:f4:5d:1b:6c:d9:a3:2f:32:21:15:83:e2:5d:
99:ef:f6:93:d8:b5:c8:3b:17:ae:ab:b3:1b:a2:e1:
52:cc:cd:c6:55:62:b3:df:87:fe:8d:c2:1b:66:2b:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:61:29:E3:74:40:DB:18:25:20:AF:34:22:16:DD:09:1D:CC:EE
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/SnthKeN0QNsYJSCvNCIW3QkdzO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
46.30.120.0/21
62.69.152.0/21
79.174.152.0/21
91.223.235.0/24
91.230.239.0/24
178.23.176.0/21
185.31.76.0/22
185.126.152.0/23
185.208.212.0/22
188.116.39.0/24
194.247.61.0/24
195.182.36.0/24
213.142.140.0/23
IPv6:
2a00:1b18::/29
2a00:1cf0::/29
2a00:b920::/29
Signature Algorithm: sha256WithRSAEncryption
b6:e7:62:82:13:8c:88:fa:00:0e:59:bd:ba:b3:6e:91:53:30:
3b:91:52:b6:97:4e:18:ce:10:af:6b:9e:89:9d:f8:60:a7:9f:
ae:d1:3b:16:d8:a7:72:9a:7c:9e:25:3a:99:93:0b:90:ed:65:
35:73:b5:2c:d2:81:cf:de:b2:80:84:08:73:ca:47:01:ce:b0:
49:da:cc:ec:a8:54:db:81:c4:47:a9:cf:87:17:aa:39:19:c3:
53:89:8b:7c:d4:90:77:69:a1:83:94:93:51:f0:7c:60:78:cf:
f0:62:5d:b9:22:39:d8:13:bd:0c:81:3e:9a:10:b7:9c:3c:ef:
4b:02:50:f2:6f:2e:f3:b8:90:e0:1b:90:25:22:7f:9f:0f:75:
87:7e:35:59:3a:b7:4c:7d:c4:d0:43:bb:82:d1:c0:fb:52:ec:
b6:38:2f:ab:c4:87:f4:7d:a0:37:88:47:80:ef:89:b5:1c:e3:
68:20:9a:fb:d9:4a:70:25:fa:66:52:8a:ea:53:e1:fd:8f:b8:
05:de:3f:9f:3c:e8:93:49:a0:a0:f2:b7:0d:61:72:6b:9f:6a:
81:32:09:2c:1a:b4:28:2d:21:4a:72:3e:86:b0:c4:1f:d1:59:
02:44:62:f2:4d:28:9a:a7:a4:c5:81:bf:88:f8:1a:cc:ec:d1:
ed:69:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:54 2026 by rpki-client