Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/sUbsaOI44Bi0X3YK1epsVJEDUec.roa
File: sUbsaOI44Bi0X3YK1epsVJEDUec.roa (raw, json)
Hash identifier: rYaOkD3dBPrS2T2laRzCj+4LsYQ8WlURz0+sfmO0/n0=
Subject key identifier: B1:46:EC:68:E2:38:E0:18:B4:5F:76:0A:D5:EA:6C:54:91:03:51:E7
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A0C31F5AE4D5CD53CFCBD5DF756C3F0010
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/sUbsaOI44Bi0X3YK1epsVJEDUec.roa
Signing time: Mon 21 Sep 2026 08:40:07 +0000
ROA not before: Mon 21 Sep 2026 08:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197033
IP address blocks: 46.18.224.0/21 maxlen: 21
91.216.43.0/24 maxlen: 24
91.224.230.0/23 maxlen: 23
93.177.81.0/24 maxlen: 24
185.24.152.0/22 maxlen: 22
185.33.88.0/22 maxlen: 22
185.97.204.0/22 maxlen: 22
185.147.65.0/24 maxlen: 24
185.147.67.0/24 maxlen: 24
185.155.173.0/24 maxlen: 24
185.195.248.0/24 maxlen: 24
185.195.249.0/24 maxlen: 24
185.195.250.0/24 maxlen: 24
185.195.251.0/24 maxlen: 24
193.34.32.0/22 maxlen: 22
193.34.35.0/24 maxlen: 24
194.147.172.0/24 maxlen: 24
194.147.227.0/24 maxlen: 24
194.147.228.0/24 maxlen: 24
217.18.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:1f:5a:e4:d5:cd:53:cf:cb:d5:df:75:6c:3f:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 21 08:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b146ec68e238e018b45f760ad5ea6c54910351e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:43:0f:0a:d3:dd:de:29:53:e2:30:a7:23:
71:f1:66:c0:ad:03:cf:d7:ed:ee:2a:c1:51:ad:0f:
48:8a:29:30:74:ab:a4:b1:71:03:ad:ac:b5:8b:08:
45:58:00:e5:2e:62:d2:f5:17:80:31:3c:a5:d4:73:
2d:ca:db:32:c5:b1:30:42:8f:4b:0b:32:dd:08:29:
76:7a:44:64:c0:a0:7e:f2:f0:a1:76:ba:b3:e0:5f:
6b:47:43:eb:f2:95:5b:39:7e:18:90:0e:03:ec:31:
e7:83:35:a6:d7:a3:c5:1e:ed:28:ff:83:c3:fe:64:
8d:12:71:f3:61:dc:61:03:bd:68:d2:58:77:26:d4:
86:68:af:48:68:8e:d2:ce:94:c4:5c:42:d7:46:42:
b1:b3:eb:9a:c5:6a:38:7b:6a:16:36:7b:b3:ac:3c:
09:6f:d5:63:92:2a:5a:72:70:02:86:2f:a2:49:de:
f0:df:0d:f7:65:56:82:26:53:7b:9e:c1:81:72:cf:
85:cb:6d:26:f4:69:5e:82:8e:81:c3:88:f1:15:5b:
49:f3:1f:ba:2c:70:c2:8c:c4:0a:04:27:80:86:66:
a5:3e:35:31:d5:43:aa:af:62:6c:96:2d:42:86:7f:
33:5f:9d:2b:2a:32:72:8a:ed:fe:59:ed:c9:2d:84:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:EC:68:E2:38:E0:18:B4:5F:76:0A:D5:EA:6C:54:91:03:51:E7
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/sUbsaOI44Bi0X3YK1epsVJEDUec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.224.0/21
91.216.43.0/24
91.224.230.0/23
93.177.81.0/24
185.24.152.0/22
185.33.88.0/22
185.97.204.0/22
185.147.65.0/24
185.147.67.0/24
185.155.173.0/24
185.195.248.0/22
193.34.32.0/22
194.147.172.0/24
194.147.227.0-194.147.228.255
217.18.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7f:ff:ed:75:ae:69:7f:c3:6b:45:28:5d:f1:1c:7a:6c:a2:
6f:e7:71:d2:e3:87:f3:9a:5f:ae:ed:5a:af:5d:04:7c:0d:a3:
87:89:b8:6a:95:81:52:50:6f:ed:54:9a:3c:2f:8a:b8:0b:3a:
9d:38:df:8f:e1:25:e5:c3:ae:02:1c:32:d4:f4:a4:f9:0c:8e:
55:ad:9e:54:d0:4d:86:97:d2:5c:1f:5f:74:8d:9e:15:db:f7:
a6:59:b6:44:79:43:ea:fb:f0:58:3e:62:8a:e1:85:64:ab:ac:
02:8e:20:42:76:6a:7d:ce:55:55:24:73:6f:64:ac:3c:c1:c4:
05:2c:04:03:a1:84:4a:6e:66:f9:2d:56:0d:1c:4c:1e:22:9b:
ab:2c:1e:57:3f:fb:3f:86:ba:20:f6:da:72:32:2c:23:26:71:
e9:08:cb:1d:2f:d0:b7:43:d0:dd:84:c1:81:07:fa:f0:45:7b:
ea:f9:6a:20:d0:21:93:67:7d:43:9e:bc:d3:93:92:e0:c9:d0:
93:58:af:8a:bd:8c:4e:28:d6:f0:7d:a5:54:7f:27:c0:23:72:
47:95:65:98:66:c1:69:75:25:62:39:13:db:10:56:aa:d0:9d:
2f:ca:10:ab:be:82:e0:a5:a3:de:96:6a:09:9a:ca:ac:63:a2:
07:22:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:00 2026 by rpki-client