Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atgzpjeHgMEows1L9JQ_sD0uhCE.roa
File: atgzpjeHgMEows1L9JQ_sD0uhCE.roa (raw, json)
Hash identifier: FWfEfJzSDKBZGmOK0zNg5vtmpa1EcLXi1g8kaV4rt6g=
Subject key identifier: 6A:D8:33:A6:37:87:80:C1:28:C2:CD:4B:F4:94:3F:B0:3D:2E:84:21
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019D4F2DAE6630BF991EC9C7DA84865F05E1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atgzpjeHgMEows1L9JQ_sD0uhCE.roa
Signing time: Thu 02 Apr 2026 17:11:27 +0000
ROA not before: Thu 02 Apr 2026 17:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212940
IP address blocks: 95.46.106.0/24 maxlen: 24
95.46.114.0/24 maxlen: 24
95.47.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:2d:ae:66:30:bf:99:1e:c9:c7:da:84:86:5f:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 2 17:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad833a6378780c128c2cd4bf4943fb03d2e8421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:b1:ec:86:ff:0b:ef:a2:98:80:d2:66:79:
7f:53:7a:33:9a:91:68:7a:3a:0a:b2:29:9c:a7:8b:
2c:06:58:60:80:bf:15:80:0c:d5:9d:09:b0:77:e5:
56:f7:c3:da:a0:73:01:17:90:02:a7:48:8e:ca:13:
9c:23:9a:01:49:ce:54:4d:67:05:a3:87:d2:04:09:
b9:9f:3d:a1:e6:24:ef:3c:45:e8:47:5c:15:5a:2c:
10:83:45:02:1e:ef:3b:d3:a3:a7:ba:f6:45:3b:d6:
2e:04:ca:1b:a7:c4:21:6f:fe:65:e4:be:92:56:bf:
b9:64:02:3f:7f:7a:f8:52:fd:b3:f1:f7:22:49:62:
6d:a1:3a:c2:0c:c8:39:36:1f:b0:d7:9a:70:f6:bf:
19:9e:65:c2:52:c7:46:59:ed:da:98:84:d1:df:40:
ac:fc:29:7f:ec:8b:33:73:a3:07:9e:e4:50:c4:9c:
52:a2:2c:b6:bc:9b:17:2e:e2:96:16:2b:c0:77:87:
69:1b:1e:1a:5f:88:92:fc:60:cc:fc:8c:96:8e:ea:
67:b7:27:ca:33:f0:eb:8a:b7:05:e3:db:39:64:0a:
9a:c5:dd:e4:02:2b:e1:2f:be:14:28:d4:84:b3:70:
17:f1:07:3d:2b:00:02:04:c3:c2:a6:ce:40:e1:28:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:33:A6:37:87:80:C1:28:C2:CD:4B:F4:94:3F:B0:3D:2E:84:21
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atgzpjeHgMEows1L9JQ_sD0uhCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.106.0/24
95.46.114.0/24
95.47.177.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d8:c8:9e:f9:38:89:a3:79:b5:f0:e2:0a:88:ec:f6:bc:e2:
f7:d0:e3:d6:3e:29:ea:73:89:6b:12:6e:b4:71:8b:12:84:ee:
14:6f:3a:16:62:88:49:8b:0d:39:ed:a6:b3:75:09:1c:91:bf:
07:6b:44:53:8f:c3:18:31:08:48:b0:e4:cd:2c:28:8b:02:a6:
a7:a5:da:39:8a:80:5d:c9:01:9a:d1:b3:d7:44:4b:25:45:54:
2a:54:8a:5c:29:72:63:b6:3d:82:f5:09:04:a7:e2:bd:e5:cd:
a7:01:b4:8f:0f:1e:67:b2:0c:d0:3c:62:d1:ad:44:a0:6b:15:
0e:46:a7:23:81:f4:d4:51:e8:33:52:ee:16:e4:4a:70:f1:69:
b6:1e:ce:1d:fd:18:48:f2:f9:a3:34:e3:6c:bb:33:45:bb:b2:
74:ca:d4:2a:ba:47:30:fd:67:18:35:4c:23:7c:a7:e6:1a:ac:
1c:33:a0:27:b2:13:f7:01:87:fa:92:a9:cd:3c:1c:66:38:03:
65:98:11:1c:1b:5a:21:68:db:6b:3f:af:10:e2:84:75:71:d0:
d0:e7:74:e1:cc:f0:cb:87:dc:e3:87:fe:bc:ea:c7:d1:48:f0:
87:88:91:5a:a8:39:fb:06:39:64:32:c2:90:7a:4a:c4:52:01:
16:46:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:16 2026 by rpki-client