Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7E2WjzoFAPRcv7hj2Jj3_i7dDwU.roa
File: 7E2WjzoFAPRcv7hj2Jj3_i7dDwU.roa (raw, json)
Hash identifier: kPeEWz7jjR6Mk9alczy66VfgXKU/PsOzyLwituP27qg=
Subject key identifier: EC:4D:96:8F:3A:05:00:F4:5C:BF:B8:63:D8:98:F7:FE:2E:DD:0F:05
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A19CE3E99AB94741477457CE37CA93414E
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7E2WjzoFAPRcv7hj2Jj3_i7dDwU.roa
Signing time: Mon 02 Nov 2026 15:32:24 +0000
ROA not before: Mon 02 Nov 2026 15:32:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.41.0/24 maxlen: 24
46.8.184.0/23 maxlen: 24
46.8.186.0/23 maxlen: 24
109.248.16.0/24 maxlen: 24
109.248.17.0/24 maxlen: 24
109.248.21.0/24 maxlen: 24
109.248.175.0/24 maxlen: 24
188.130.141.0/24 maxlen: 24
188.130.226.0/24 maxlen: 24
188.130.227.0/24 maxlen: 24
188.130.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:e3:e9:9a:b9:47:41:47:74:57:ce:37:ca:93:41:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 2 15:32:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec4d968f3a0500f45cbfb863d898f7fe2edd0f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8f:1b:1a:1b:f1:c7:40:a6:dd:d2:aa:ab:12:
dc:30:ce:e8:b3:98:74:90:42:2e:33:d5:fd:96:fd:
e7:cf:0d:c9:ee:db:04:3b:3b:de:c0:cc:cd:3b:a7:
c5:a3:74:39:df:b3:54:b7:4f:c1:bc:67:2e:06:99:
79:cd:37:18:9a:e9:3a:a1:0f:3b:ae:2c:7e:9a:ad:
93:81:b3:0f:7e:c8:aa:49:5f:95:6f:b4:7a:20:64:
0e:ac:27:be:7a:6a:c4:45:57:87:1a:06:f0:4a:9b:
8c:4d:93:2a:30:ee:a0:b2:1e:5b:c4:be:cd:06:79:
6a:c5:6b:c3:b7:b9:7e:48:a8:17:74:d3:c8:3b:4b:
cd:09:20:dd:6a:63:5d:7e:c2:85:5e:fc:68:ef:fd:
89:9b:16:40:fc:03:30:12:52:40:aa:7d:2c:5e:b7:
1a:7d:15:98:61:60:d2:cd:af:dc:f4:ff:f3:38:bb:
5a:2f:55:79:63:31:16:2f:33:17:56:9e:27:fc:ff:
aa:7e:70:83:ce:22:02:27:1c:1d:1f:96:29:b4:bb:
66:fc:a1:25:2b:39:8e:83:35:33:ea:28:ef:1d:37:
c3:2d:f8:aa:3f:bd:9c:ad:14:0d:e3:20:7b:62:65:
df:61:5e:43:36:f4:d0:8c:d9:ff:99:ed:0f:c4:78:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:96:8F:3A:05:00:F4:5C:BF:B8:63:D8:98:F7:FE:2E:DD:0F:05
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/7E2WjzoFAPRcv7hj2Jj3_i7dDwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.41.0/24
46.8.184.0/22
109.248.16.0/23
109.248.21.0/24
109.248.175.0/24
188.130.141.0/24
188.130.226.0/23
188.130.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:e0:5a:38:29:b3:6e:1b:02:81:ed:06:aa:95:46:78:bf:95:
ed:48:bd:40:3a:79:58:85:56:23:c2:11:5c:59:a7:04:5d:de:
15:9b:e7:0c:19:65:08:ca:52:8f:5e:a1:d6:45:c1:ae:9a:f5:
93:88:00:02:d7:57:d2:68:cf:80:34:5f:11:05:e4:bc:8f:98:
f4:ca:c5:af:e6:91:86:8b:f0:39:2e:32:60:0b:61:71:c6:ab:
1e:34:c6:5a:ee:09:fb:2f:41:8e:f5:0e:a9:42:f8:af:18:53:
a2:51:92:b4:e7:d5:8e:db:39:04:4b:9b:e9:17:8f:59:b9:15:
02:21:63:4f:d7:dc:64:3b:e4:d8:a9:c8:e9:52:ab:cd:09:db:
7b:d2:5f:cc:ba:10:3a:53:fd:0c:9f:ef:46:9a:6a:32:c3:98:
05:25:98:de:5f:98:02:3b:77:90:f8:18:dd:75:96:98:65:b5:
99:6a:d5:c9:95:a2:fb:ea:c5:54:38:49:d6:3d:df:c5:7b:d9:
4c:95:34:90:57:13:6d:e2:7f:ca:fb:73:a2:e5:55:33:cc:e1:
aa:ae:21:24:3a:14:84:ae:27:36:63:63:c4:f0:57:d5:17:f9:
b6:26:20:c0:11:39:eb:f8:2f:93:dc:1a:1c:50:81:09:a6:bc:
71:97:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:46 2026 by rpki-client