Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/2F9Wk1cOCXeL-YZWW0g5SWJkV4Q.roa
File: 2F9Wk1cOCXeL-YZWW0g5SWJkV4Q.roa (raw, json)
Hash identifier: 5Ws/x+r4FQvU1keL4TJE0oPpDv4uNV4AiNwJJpt1tvc=
Subject key identifier: D8:5F:56:93:57:0E:09:77:8B:F9:86:56:5B:48:39:49:62:64:57:84
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A11217B565A9B3149825E84AF678899A69
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/2F9Wk1cOCXeL-YZWW0g5SWJkV4Q.roa
Signing time: Tue 06 Oct 2026 16:41:46 +0000
ROA not before: Tue 06 Oct 2026 16:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.102.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.160.193.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
2a14:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:17:b5:65:a9:b3:14:98:25:e8:4a:f6:78:89:9a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 6 16:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d85f5693570e09778bf986565b48394962645784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:bb:16:90:fe:5a:18:19:4c:35:6f:ac:e8:
17:7c:63:1d:71:e1:ce:9e:f0:bc:25:11:6a:97:e7:
9e:65:e3:6c:97:11:12:5b:f5:58:61:ea:1a:a4:ff:
40:72:6b:55:bb:ea:f2:b6:25:7f:5f:a7:0d:f3:b2:
10:b2:eb:de:aa:38:d4:e2:1f:1b:bf:f1:72:ad:ca:
d3:db:41:ae:8a:34:9c:2b:95:5e:bb:48:45:23:93:
ac:c6:cb:c0:5f:47:8a:46:fa:52:a2:52:22:78:c3:
ac:5d:84:65:7f:5e:0e:8c:e8:51:4a:41:09:27:e9:
f5:a0:71:84:14:7b:1d:77:0d:bd:b6:35:f0:7b:40:
3c:93:f3:59:7a:2c:98:1d:b5:67:f9:e4:50:ff:91:
c1:a6:a5:0d:6b:60:6b:3b:01:55:60:6f:8f:01:32:
15:b6:0e:71:3c:4b:df:99:ca:12:3a:ed:bf:23:68:
62:ff:07:11:fd:92:ac:65:e6:02:82:72:ab:df:f2:
37:4a:59:40:7d:b9:0a:83:d7:00:59:04:d0:0f:5c:
52:59:fa:5c:9e:b0:56:a6:64:54:58:99:11:68:64:
23:c6:1c:a9:5f:8c:da:af:71:59:1f:04:05:a9:b7:
ef:48:4e:2b:12:0a:93:49:7e:29:72:1a:b1:e2:10:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:56:93:57:0E:09:77:8B:F9:86:56:5B:48:39:49:62:64:57:84
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/2F9Wk1cOCXeL-YZWW0g5SWJkV4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.102.0/24
46.20.111.0/24
185.160.193.0-185.160.195.255
185.169.221.0-185.169.223.255
IPv6:
2a14:80::/48
Signature Algorithm: sha256WithRSAEncryption
3c:db:cf:d9:92:38:69:bc:b0:20:7f:f6:c3:37:1c:8e:2f:3f:
f4:79:7a:7f:2d:5e:b3:17:50:d5:1f:59:cf:5f:76:31:0b:35:
f9:70:5a:30:08:7b:9e:ce:35:14:8b:72:e2:13:dc:5b:25:48:
3e:48:80:60:53:98:82:1b:de:1e:60:f9:91:0b:49:cd:e2:77:
7a:fe:e2:e0:6d:34:04:02:26:1f:d7:47:17:3c:c3:77:fa:50:
04:60:ed:5b:1f:6c:26:11:f4:a8:25:7b:b1:af:07:cf:40:0a:
12:b1:4c:d6:66:e7:7f:20:9e:9d:95:89:6b:c0:97:9a:d2:5b:
f0:93:83:fe:cd:9c:ff:0a:3b:ed:f5:01:96:c7:52:ae:53:f0:
24:5a:98:96:ef:d0:06:94:f1:e2:57:3b:0f:15:4c:c1:5d:e1:
e8:8e:27:ad:fe:19:a7:5b:4b:13:ad:9c:98:e6:d8:12:25:13:
3f:fe:fa:41:ef:2f:49:73:61:5d:67:bc:19:d7:6f:fb:d6:f5:
4f:28:b7:db:d8:55:7c:f0:b8:f6:a4:10:75:4b:3c:27:39:9e:
bf:e9:42:15:0d:4f:0e:c7:c9:97:5f:c5:65:96:98:15:b2:1b:
5c:3a:8e:16:55:d2:a9:86:2d:19:d9:fb:92:18:03:1b:21:7e:
90:2f:7f:26
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAaESF7VlqbMUmCXoSvZ4iZppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYxMDA2MTY0MTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODVmNTY5MzU3MGUwOTc3OGJmOTg2NTY1YjQ4Mzk0OTYyNjQ1Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PG7FpD+WhgZTDVvrOgXfGMdceHO
nvC8JRFql+eeZeNslxESW/VYYeoapP9AcmtVu+rytiV/X6cN87IQsuveqjjU4h8b
v/FyrcrT20GuijScK5Veu0hFI5OsxsvAX0eKRvpSolIieMOsXYRlf14OjOhRSkEJ
J+n1oHGEFHsddw29tjXwe0A8k/NZeiyYHbVn+eRQ/5HBpqUNa2BrOwFVYG+PATIV
tg5xPEvfmcoSOu2/I2hi/wcR/ZKsZeYCgnKr3/I3SllAfbkKg9cAWQTQD1xSWfpc
nrBWpmRUWJkRaGQjxhypX4zar3FZHwQFqbfvSE4rEgqTSX4pchqx4hBBnQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFNhfVpNXDgl3i/mGVltIOUliZFeEMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvMkY5V2sxY09DWGVMLVlaV1cwZzVTV0prVjRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAuBAIAATAoAwQALhRmAwQA
LhRvMAwDBAC5oMEDBAK5oMAwDAMEALmp3QMEBbmpwDAPBAIAAjAJAwcAKhQAgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA828/ZkjhpvLAgf/bDNxyOLz/0eXp/LV6zF1DV
H1nPX3YxCzX5cFowCHuezjUUi3LiE9xbJUg+SIBgU5iCG94eYPmRC0nN4nd6/uLg
bTQEAiYf10cXPMN3+lAEYO1bH2wmEfSoJXuxrwfPQAoSsUzWZud/IJ6dlYlrwJea
0lvwk4P+zZz/Cjvt9QGWx1KuU/AkWpiW79AGlPHiVzsPFUzBXeHojiet/hmnW0sT
rZyY5tgSJRM//vpB7y9Jc2FdZ7wZ12/71vVPKLfb2FV88Lj2pBB1SzwnOZ6/6UIV
DU8Ox8mXX8VllpgVshtcOo4WVdKphi0Z2fuSGAMbIX6QL38m
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:57:38 2026 by rpki-client