Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/B42NHk7dzST69rOGc3kJk5xxaC4.roa
File: B42NHk7dzST69rOGc3kJk5xxaC4.roa (raw, json)
Hash identifier: 7b7SK6I/Fu+xEpJNMReuWSdwtcOeiw+PgYSSvbCXrrA=
Subject key identifier: 07:8D:8D:1E:4E:DD:CD:24:FA:F6:B3:86:73:79:09:93:9C:71:68:2E
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 019FF040DF72699ABDF4608CED2BE6FEE43B
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/B42NHk7dzST69rOGc3kJk5xxaC4.roa
Signing time: Tue 11 Aug 2026 09:56:51 +0000
ROA not before: Tue 11 Aug 2026 09:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8462
IP address blocks: 46.249.128.0/19 maxlen: 19
77.110.128.0/19 maxlen: 19
77.110.160.0/19 maxlen: 19
77.111.128.0/18 maxlen: 18
79.121.104.0/21 maxlen: 21
79.121.112.0/21 maxlen: 21
91.146.128.0/18 maxlen: 18
95.168.32.0/19 maxlen: 19
95.168.64.0/19 maxlen: 19
185.3.136.0/22 maxlen: 22
185.165.108.0/22 maxlen: 22
185.166.132.0/22 maxlen: 22
185.166.136.0/22 maxlen: 22
185.170.84.0/22 maxlen: 22
185.172.44.0/22 maxlen: 22
185.187.248.0/22 maxlen: 22
185.195.52.0/22 maxlen: 22
185.202.136.0/22 maxlen: 22
185.214.28.0/22 maxlen: 22
185.224.4.0/22 maxlen: 22
185.235.112.0/22 maxlen: 22
193.151.116.0/22 maxlen: 22
193.218.98.0/24 maxlen: 24
193.227.196.0/22 maxlen: 22
194.37.88.0/22 maxlen: 22
195.128.232.0/23 maxlen: 23
212.16.128.0/19 maxlen: 19
2a01:5d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:40:df:72:69:9a:bd:f4:60:8c:ed:2b:e6:fe:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Aug 11 09:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078d8d1e4eddcd24faf6b386737909939c71682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:ec:ad:c2:bb:1e:86:c3:b8:3f:94:d4:dd:
b1:51:19:58:8e:40:18:a3:92:c8:f6:32:28:1a:6a:
d6:4d:ed:88:9c:f2:ea:f8:33:44:00:64:7c:a6:78:
f1:a6:8a:a7:a8:aa:44:b9:2a:a7:03:7e:0d:d6:7d:
27:79:ef:d1:04:6b:56:60:6f:4d:04:16:f0:28:cd:
3d:08:07:93:4b:14:15:d5:9c:ba:4a:dd:ac:8a:70:
cb:f6:a8:59:42:db:fe:ac:16:fb:d0:b1:03:48:9f:
25:b1:03:b3:83:35:67:b5:66:39:7a:49:63:7b:05:
55:ed:0e:b4:fc:72:99:08:9d:ac:50:b5:30:5f:d8:
e5:60:54:92:73:e5:f3:60:e4:71:7f:dd:af:37:bb:
dd:c4:b7:fb:ac:ad:96:93:a9:d5:64:bb:1c:c4:c5:
c5:a0:a6:bb:40:8c:89:6e:20:5f:8f:d1:44:01:db:
94:b7:33:01:66:b0:60:dc:1e:74:57:b3:ce:fb:a2:
10:9c:54:11:a0:c3:fd:66:18:57:75:69:80:18:d0:
eb:b6:53:46:7b:84:dc:d3:8f:c6:e9:8b:c2:cb:0b:
a7:c1:c8:e2:ee:e5:c7:0c:10:92:6d:30:45:a4:da:
ae:58:a6:ea:fc:43:3f:46:e2:ed:a3:5d:b5:1f:dc:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:8D:1E:4E:DD:CD:24:FA:F6:B3:86:73:79:09:93:9C:71:68:2E
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/B42NHk7dzST69rOGc3kJk5xxaC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.128.0/19
77.110.128.0/18
77.111.128.0/18
79.121.104.0-79.121.119.255
91.146.128.0/18
95.168.32.0-95.168.95.255
185.3.136.0/22
185.165.108.0/22
185.166.132.0-185.166.139.255
185.170.84.0/22
185.172.44.0/22
185.187.248.0/22
185.195.52.0/22
185.202.136.0/22
185.214.28.0/22
185.224.4.0/22
185.235.112.0/22
193.151.116.0/22
193.218.98.0/24
193.227.196.0/22
194.37.88.0/22
195.128.232.0/23
212.16.128.0/19
IPv6:
2a01:5d0::/32
Signature Algorithm: sha256WithRSAEncryption
22:fd:05:e4:30:5a:bf:b6:f9:44:51:94:4f:12:ff:c0:20:ef:
3e:a7:5e:63:98:40:70:65:6a:b0:45:7e:da:0e:b1:1c:d6:fb:
e0:63:26:09:ee:00:b2:9d:af:99:2e:3a:fd:d0:cb:1d:c6:46:
1b:07:3e:77:c7:01:0e:81:bc:97:35:f8:75:88:f2:32:42:b2:
a7:a6:7d:e6:9b:25:ae:14:a7:61:c5:d9:13:b0:21:fb:69:da:
80:a1:b6:06:42:7e:a9:fb:4f:38:7a:aa:2a:e4:3a:b1:0d:81:
e8:aa:b0:fb:6d:97:78:69:93:70:bc:9b:c0:38:48:2f:81:2f:
c2:d2:fe:fd:ea:37:0a:ec:90:85:ce:94:98:37:8d:5b:fa:1b:
1e:66:b2:a1:3a:0d:29:c4:29:4c:39:4e:cc:57:33:a5:13:27:
f9:d5:72:27:54:38:d5:64:37:d6:ee:4c:fa:fd:c0:2d:f2:0c:
c1:97:51:14:20:a2:e3:1b:92:7b:fb:93:6d:df:66:08:e7:56:
e4:3b:60:a8:12:37:2b:97:d8:72:66:c0:a0:e7:25:ff:6c:6b:
2c:2e:bf:76:1b:e7:3b:de:14:5f:dd:2a:06:b5:4d:40:55:e2:
ea:0f:5b:2d:f0:fa:43:d3:c0:e2:c1:17:33:1e:69:ac:f2:32:
08:de:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:35:46 2026 by rpki-client