Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/RKY7lmdtb6IZif0ZQO2zEp317ek.roa
File: RKY7lmdtb6IZif0ZQO2zEp317ek.roa (raw, json)
Hash identifier: MiEE6D3s9DZHsWmRS4CwT7MDH9wPZNxbpSI8mSRJ1pI=
Subject key identifier: 44:A6:3B:96:67:6D:6F:A2:19:89:FD:19:40:ED:B3:12:9D:F5:ED:E9
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019C9464E52D10357803D896DE3719E34337
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/RKY7lmdtb6IZif0ZQO2zEp317ek.roa
Signing time: Wed 25 Feb 2026 10:42:46 +0000
ROA not before: Wed 25 Feb 2026 10:42:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44600
IP address blocks: 46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
91.202.72.0/22 maxlen: 22
91.202.162.0/23 maxlen: 24
94.131.244.0/24 maxlen: 24
94.131.245.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
94.131.254.0/24 maxlen: 24
94.131.255.0/24 maxlen: 24
185.41.248.0/22 maxlen: 22
185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
185.156.52.0/24 maxlen: 24
185.156.53.0/24 maxlen: 24
185.156.54.0/24 maxlen: 24
185.156.55.0/24 maxlen: 24
194.42.201.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:64:e5:2d:10:35:78:03:d8:96:de:37:19:e3:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Feb 25 10:42:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44a63b96676d6fa21989fd1940edb3129df5ede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:e2:55:ea:2d:dd:f3:62:00:15:73:a8:85:
7b:c5:11:f5:4b:d4:5f:f9:37:8b:b3:fd:a0:b3:ae:
65:06:8b:74:de:04:6d:c7:5e:b6:0c:d9:f4:c5:47:
35:c3:21:c2:ab:9c:ba:6f:98:d8:b7:89:f4:50:66:
34:cd:56:ec:f0:2b:1a:d5:d8:49:4f:f7:7c:b8:77:
c0:bb:f9:41:d8:56:95:a6:d6:4f:18:5f:09:be:a1:
cd:39:af:68:fd:8b:8d:4e:6d:9f:63:07:9d:5b:20:
9e:7f:0e:59:05:ae:59:75:7a:75:af:16:cd:39:ca:
94:8e:70:80:2f:f1:4a:af:8c:b7:73:40:56:3c:e1:
f1:b8:6e:be:0d:72:32:f6:e6:20:de:24:2a:36:43:
4c:28:c6:72:23:ad:6e:e1:71:23:f3:62:a5:6e:9f:
79:43:5a:15:48:84:61:ef:c0:84:ec:66:c5:b5:d0:
68:9b:70:e3:57:78:b2:af:64:9b:96:d8:9e:eb:7b:
54:f8:13:0a:85:07:87:93:fa:cd:3f:dd:a5:9c:08:
07:aa:d4:b8:29:be:4d:a9:de:97:ed:9c:02:dd:55:
0b:d9:98:40:aa:42:c9:c3:a8:34:24:5c:9b:c1:fb:
f7:b1:a6:06:cc:bf:d7:3d:f8:96:a1:3e:3b:da:2f:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:3B:96:67:6D:6F:A2:19:89:FD:19:40:ED:B3:12:9D:F5:ED:E9
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/RKY7lmdtb6IZif0ZQO2zEp317ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
91.202.162.0/23
94.131.244.0/23
94.131.248.0/21
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
185.156.52.0/22
194.42.201.0/24
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
62:0b:5e:e2:27:b2:4b:46:80:54:8c:19:3a:eb:f1:40:17:4a:
bf:7b:62:5a:ca:cc:8e:2d:3c:64:21:c4:2c:41:99:69:76:38:
12:0c:4f:3f:38:56:a5:ff:9f:ca:2c:85:3d:50:7c:be:8b:39:
1e:af:a0:dd:9f:09:38:28:0e:b2:6e:0d:8e:46:83:ef:a1:08:
ab:9b:b0:78:b7:ef:64:fa:50:9c:cf:d7:c8:7d:38:ba:29:b9:
7b:a6:b4:eb:c7:48:e0:13:a9:86:85:b1:89:f6:ef:32:18:2c:
a5:79:62:e1:14:47:79:29:1c:f7:5a:84:b0:97:c6:2d:20:2e:
f0:6a:0a:e8:f4:a2:e2:29:79:a4:fd:9a:68:ad:33:6d:bb:b2:
5e:0d:5c:7f:0c:1b:7a:b8:ec:a8:5c:d0:8a:28:93:63:f6:76:
68:bf:bd:8c:e3:e7:91:33:ae:9b:25:86:97:18:80:ea:d8:12:
ce:02:4a:d2:73:c5:ff:73:e7:2b:07:27:82:a0:d9:f2:9c:77:
60:46:d1:d0:36:00:63:42:0d:c7:21:4f:15:8f:dd:0d:a8:67:
c3:36:72:e4:d2:24:04:80:2a:18:bf:65:62:f5:ea:5b:ad:d8:
5a:8f:e7:92:cf:8f:8f:00:c9:58:ec:fb:98:61:84:a2:39:cc:
cd:37:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:42 2026 by rpki-client