Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/7FzKZswrPdLMxXrapHAy4u7m2Uw.roa
File: 7FzKZswrPdLMxXrapHAy4u7m2Uw.roa (raw, json)
Hash identifier: eeouhWOFysyUa2aLWCzo7SnGgUGdzEephMALLA/syrs=
Subject key identifier: EC:5C:CA:66:CC:2B:3D:D2:CC:C5:7A:DA:A4:70:32:E2:EE:E6:D9:4C
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019C7A55DCA8B0556C55DD873092741BFAFE
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/7FzKZswrPdLMxXrapHAy4u7m2Uw.roa
Signing time: Fri 20 Feb 2026 09:16:13 +0000
ROA not before: Fri 20 Feb 2026 09:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206076
IP address blocks: 46.253.40.0/24 maxlen: 24
46.253.41.0/24 maxlen: 24
46.253.42.0/24 maxlen: 24
46.253.43.0/24 maxlen: 24
46.253.44.0/24 maxlen: 24
46.253.45.0/24 maxlen: 24
46.253.46.0/24 maxlen: 24
46.253.47.0/24 maxlen: 24
185.182.152.0/24 maxlen: 24
185.182.153.0/24 maxlen: 24
185.182.154.0/24 maxlen: 24
185.182.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:55:dc:a8:b0:55:6c:55:dd:87:30:92:74:1b:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Feb 20 09:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec5cca66cc2b3dd2ccc57adaa47032e2eee6d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:a9:3f:2a:02:99:b9:b8:f5:22:dd:68:c2:
dc:a4:42:8e:c4:36:02:90:fb:ad:bb:cf:f7:2b:9a:
ad:fe:a5:5e:82:26:bd:9f:67:7e:47:1a:05:1b:93:
b4:5c:7f:c2:d1:ec:5d:1e:d7:8e:2e:a5:20:dd:d7:
3e:c1:ad:a6:0b:b4:1f:92:9d:ef:2a:cb:9a:b6:9c:
33:7c:73:61:ed:49:c2:36:f0:95:b8:38:d5:f9:fd:
56:7e:06:f2:81:bd:99:9b:52:cb:f4:25:2c:09:33:
0a:d3:00:ef:d5:38:32:90:a7:08:1e:7a:a1:4f:55:
a4:b4:d6:8c:fe:df:f3:43:f9:5b:a9:f9:f7:63:3c:
c9:09:2e:eb:4f:b1:6d:ef:e3:de:ce:5a:91:2d:d2:
cc:82:d9:f4:e8:05:c4:cd:dd:ac:5d:31:69:7f:ef:
b2:25:c1:ac:57:6a:43:1c:b4:63:fc:6f:2e:bc:96:
18:81:87:34:84:52:67:dd:b9:6d:f2:ab:8f:78:8e:
6b:45:e8:ea:40:8a:aa:32:74:29:e5:3a:8a:02:57:
2d:d1:51:1e:6e:e4:9f:53:31:f3:b2:fa:0a:e9:a0:
96:9f:8d:8c:ae:50:3f:1c:e7:73:a3:0e:a9:53:ed:
e7:ab:53:20:69:a0:14:8f:dd:de:7d:e0:6f:32:a1:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:CA:66:CC:2B:3D:D2:CC:C5:7A:DA:A4:70:32:E2:EE:E6:D9:4C
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/7FzKZswrPdLMxXrapHAy4u7m2Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.40.0/21
185.182.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2b:5c:51:78:8c:fa:cb:62:f0:42:59:c7:9c:68:e4:ff:b9:
cf:78:7a:c1:6a:60:1c:30:33:74:ca:e7:28:1a:38:9e:2f:08:
f2:5a:18:40:6b:48:8a:82:5a:ee:f1:22:5c:a2:a7:bd:6a:b2:
c4:06:4d:02:80:98:37:87:f3:9d:b2:04:8c:75:08:ca:1b:17:
83:1f:64:ca:62:39:16:c3:62:e2:8b:4b:d7:50:47:5e:ce:30:
2a:57:e8:00:76:df:67:92:43:48:40:44:3e:7b:3f:dc:94:24:
6f:c8:48:83:a2:2b:8e:fe:92:1f:28:d4:3b:48:53:91:ba:c0:
af:40:8a:18:c1:e8:66:4a:7b:18:49:70:89:26:9f:0a:b8:9e:
5f:b3:4b:fc:5d:d1:7c:ba:01:e2:3b:42:a0:be:d9:ad:3a:c9:
0c:24:e1:c7:8b:00:e3:2c:3f:4f:3b:a7:8d:1c:7c:24:86:bf:
ac:cc:ba:9d:18:47:94:f7:de:c3:f6:03:68:59:99:81:2a:3e:
6f:d3:ea:fe:45:8b:c9:71:8e:81:33:2a:5f:c6:e3:ad:b1:bc:
11:ec:7d:e1:00:c3:9b:71:df:56:d0:a8:52:8b:bb:85:2b:97:
2f:c5:c5:17:ab:ac:83:1c:21:cc:26:d4:6d:b6:91:97:33:e0:
81:3a:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 08:34:52 2026 by rpki-client