Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zVDAYnpzr9VRLmDQRdrosiP-gks.roa
File: zVDAYnpzr9VRLmDQRdrosiP-gks.roa (raw, json)
Hash identifier: T5sJKURAgIIcAJ7qaiJkiuGNj46l6ofULhwN/NEDV6U=
Subject key identifier: CD:50:C0:62:7A:73:AF:D5:51:2E:60:D0:45:DA:E8:B2:23:FE:82:4B
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01A0F280265F9671C1E39120182F9CB7BEBE
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zVDAYnpzr9VRLmDQRdrosiP-gks.roa
Signing time: Wed 30 Sep 2026 13:27:59 +0000
ROA not before: Wed 30 Sep 2026 13:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44600
IP address blocks: 46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
91.202.72.0/22 maxlen: 22
91.202.161.0/24 maxlen: 24
91.202.162.0/23 maxlen: 24
94.131.244.0/24 maxlen: 24
94.131.245.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
94.131.254.0/24 maxlen: 24
94.131.255.0/24 maxlen: 24
176.103.116.0/24 maxlen: 24
185.41.248.0/22 maxlen: 22
185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
185.156.52.0/24 maxlen: 24
185.156.53.0/24 maxlen: 24
185.156.54.0/24 maxlen: 24
185.156.55.0/24 maxlen: 24
194.42.201.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:80:26:5f:96:71:c1:e3:91:20:18:2f:9c:b7:be:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Sep 30 13:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd50c0627a73afd5512e60d045dae8b223fe824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:57:48:5d:cb:c1:53:dc:ac:a7:45:69:b7:
d6:67:b3:52:fc:0e:a5:56:48:66:76:48:0c:0d:42:
c7:d6:cc:48:d4:94:3c:8a:d5:db:8d:21:b5:17:78:
a4:82:86:72:4f:3a:dd:a4:fd:91:fb:f2:0e:c7:ba:
19:38:0e:0e:73:c2:16:21:c6:56:55:ab:4d:f9:f9:
f3:33:62:7e:16:5f:9c:84:e9:b0:b3:b5:37:62:b4:
0d:f7:b1:d4:1d:46:b4:12:c0:3a:d3:6b:17:98:da:
e2:16:e3:17:ae:66:5e:82:c0:ee:50:8c:5a:05:1d:
31:69:11:34:5e:a3:18:da:cf:2a:4a:4a:48:55:ca:
58:99:f8:a8:00:b8:58:85:49:35:00:51:7e:20:02:
c4:e1:90:a3:61:54:22:59:e3:cd:5f:25:1e:8b:6a:
fc:9b:97:c8:c6:65:62:c8:50:11:5b:01:cb:12:9b:
5e:56:c1:8e:88:b1:97:22:a3:7a:dd:fd:ab:29:de:
7b:82:11:6c:4f:e4:53:34:55:4a:2a:eb:b0:09:e1:
52:15:a7:4d:65:52:e8:2b:57:aa:87:98:80:ff:4a:
49:d3:a1:61:24:d3:d1:90:35:9c:c9:b0:07:cc:53:
55:28:72:a0:20:da:df:db:76:1f:c5:07:a4:dc:cb:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:C0:62:7A:73:AF:D5:51:2E:60:D0:45:DA:E8:B2:23:FE:82:4B
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/zVDAYnpzr9VRLmDQRdrosiP-gks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
91.202.161.0-91.202.163.255
94.131.244.0/23
94.131.248.0/21
176.103.116.0/24
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
185.156.52.0/22
194.42.201.0/24
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
96:98:87:ef:e3:ea:42:5e:f1:1a:c6:f3:74:35:87:d5:d1:56:
f4:28:91:60:20:74:98:0e:d2:eb:6b:de:6e:04:70:92:fa:e2:
b0:d1:ea:ac:2d:ad:ff:54:d1:7e:e2:6f:4f:ce:1e:11:93:de:
38:e1:e9:f8:93:be:88:30:60:ca:d2:09:f5:44:67:a0:b9:18:
3d:6e:29:2a:ab:54:ee:2f:e3:1e:c7:c5:6d:eb:50:5b:b6:ce:
8e:eb:9b:46:04:8c:a9:9a:57:92:f1:1e:17:11:76:b6:c2:76:
04:51:8d:dd:c8:50:75:a6:bf:54:65:cc:e0:a4:d5:e2:30:9d:
f7:5b:3d:5d:fd:f4:e0:6d:58:48:48:78:e1:26:aa:9a:2e:52:
8c:0c:c9:09:f1:7b:82:10:80:8c:1b:66:d9:bd:67:d8:3f:42:
c6:69:c1:57:13:aa:48:24:e3:da:7a:55:8e:b2:ae:8f:4e:f3:
3b:49:ef:b8:5c:58:58:85:e8:a6:05:f9:06:c6:03:5a:3d:cc:
15:c5:4a:1f:e2:7a:4c:10:f5:35:1e:dd:4c:4a:67:42:12:c2:
ee:e6:ee:ab:56:2e:1f:64:e5:3e:b8:9e:1d:ab:ef:ee:79:7e:
e1:0a:a1:4e:a2:81:7f:28:95:f6:d9:b3:42:56:ce:ab:68:0f:
90:6f:b8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:43 2026 by rpki-client