Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/2DIF8EZk_wzvW7NZvL4cIBr-7eY.roa
File: 2DIF8EZk_wzvW7NZvL4cIBr-7eY.roa (raw, json)
Hash identifier: WFlk3BdF7ZlUvpAS6rOztSUDNAD4v2wQ9jn8u09sAKA=
Subject key identifier: D8:32:05:F0:46:64:FF:0C:EF:5B:B3:59:BC:BE:1C:20:1A:FE:ED:E6
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 01A06091C31A068469C19D5145174597D71F
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/2DIF8EZk_wzvW7NZvL4cIBr-7eY.roa
Signing time: Wed 02 Sep 2026 05:22:40 +0000
ROA not before: Wed 02 Sep 2026 05:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51785
IP address blocks: 46.18.248.0/21 maxlen: 21
46.18.248.0/23 maxlen: 23
46.18.248.0/24 maxlen: 24
46.18.249.0/24 maxlen: 24
46.18.250.0/24 maxlen: 24
46.18.251.0/24 maxlen: 24
46.18.252.0/24 maxlen: 24
46.18.253.0/24 maxlen: 24
46.18.254.0/24 maxlen: 24
46.18.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:91:c3:1a:06:84:69:c1:9d:51:45:17:45:97:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Sep 2 05:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d83205f04664ff0cef5bb359bcbe1c201afeede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:26:b9:4f:99:d7:c4:48:7f:a9:df:9e:32:
88:11:40:59:4f:01:47:11:9d:15:5f:ca:ab:96:3a:
7c:04:64:70:e4:da:24:be:45:a9:39:c7:be:34:72:
34:94:7b:2d:91:1c:18:eb:59:48:79:41:9b:d6:d7:
8e:b3:59:9f:53:de:d5:cd:7e:cf:df:cc:f4:35:3d:
50:62:0b:77:0e:e7:50:96:ea:be:65:06:90:8f:a7:
f4:ec:c4:52:5b:7f:da:ac:c5:af:d5:c1:09:87:bc:
c0:d3:63:50:5f:88:da:6a:97:5b:2a:13:e5:2a:86:
c8:1c:51:ad:c5:ce:5a:90:61:f5:65:3f:87:23:5d:
98:db:34:d1:e8:b1:78:8d:81:8b:5f:b7:cf:b2:b8:
74:b2:0e:0d:b7:a6:d0:5a:ab:aa:2a:66:e3:67:8e:
2b:fe:97:b4:dc:a1:5e:29:19:53:0d:c5:9c:e9:ab:
80:ba:e7:76:e4:04:e1:0c:3c:9c:34:2d:2a:7c:43:
94:b4:b3:28:3c:b3:d2:d2:81:7a:97:9c:f9:52:87:
29:49:ee:d6:e2:03:62:be:f4:5a:ed:64:64:8c:31:
0e:94:83:d7:50:ba:23:ff:08:c9:9f:22:89:f0:b4:
d3:a9:28:c3:3c:ba:cc:1e:4f:cd:a4:f9:7b:85:86:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:05:F0:46:64:FF:0C:EF:5B:B3:59:BC:BE:1C:20:1A:FE:ED:E6
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/2DIF8EZk_wzvW7NZvL4cIBr-7eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.248.0/21
Signature Algorithm: sha256WithRSAEncryption
29:53:93:7f:e1:49:0c:8f:b3:17:2c:80:0b:9a:f2:88:16:e8:
fd:4a:55:76:a5:e5:59:b7:8f:a8:59:68:e1:77:20:83:d0:91:
9d:57:7f:38:3d:27:1a:d5:38:b6:e4:73:20:26:bd:d6:e9:3c:
10:02:a3:85:a0:b7:6e:a4:67:41:ee:0d:c4:62:f5:5a:4f:e9:
79:53:3d:2c:0c:56:09:db:0d:51:7b:15:02:6c:4f:aa:85:15:
42:51:2f:be:18:fe:8c:27:19:76:e7:e9:3e:d9:0a:eb:fd:3f:
77:ac:ad:43:b7:28:7e:c5:ba:b9:32:a9:1c:a8:57:d3:cc:cd:
5e:76:f2:18:33:a7:00:fe:ce:0c:9b:53:f3:bb:1b:5c:2c:1a:
92:43:20:2b:7d:5f:7f:f5:a6:12:e3:3f:79:42:78:fe:63:16:
e1:5f:4b:ee:00:3f:b9:9b:4d:76:ad:65:a8:fe:5d:52:01:4b:
fa:91:fc:92:d0:46:4a:31:b7:08:48:47:9c:c8:7d:58:dc:3f:
1c:db:5a:e2:dc:1a:2a:6b:36:57:9b:4b:87:51:fa:a4:4a:4f:
cd:ec:2c:4b:c2:e1:91:2b:52:d0:3e:19:4e:4e:92:d0:d8:42:
08:bb:54:80:52:43:bc:7a:c9:6e:f1:9f:ff:47:94:10:f4:5e:
d4:03:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:08 2026 by rpki-client