Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/GQWN0ir1THDtORpMHT0pE6qKrno.roa
File: GQWN0ir1THDtORpMHT0pE6qKrno.roa (raw, json)
Hash identifier: TOHz1lPI+h8ud2HntqTzCLl/vg5AVBR721IdlL170Ow=
Subject key identifier: 19:05:8D:D2:2A:F5:4C:70:ED:39:1A:4C:1D:3D:29:13:AA:8A:AE:7A
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 01A0B3F7868D75AAA1D23D79D74317D2CF31
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/GQWN0ir1THDtORpMHT0pE6qKrno.roa
Signing time: Fri 18 Sep 2026 10:02:18 +0000
ROA not before: Fri 18 Sep 2026 10:02:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8544
IP address blocks: 46.21.48.0/24 maxlen: 24
46.21.50.0/24 maxlen: 24
46.21.54.0/24 maxlen: 24
46.21.55.0/24 maxlen: 24
46.21.57.0/24 maxlen: 24
46.21.58.0/24 maxlen: 24
46.21.60.0/24 maxlen: 24
46.21.62.0/24 maxlen: 24
46.21.63.0/24 maxlen: 24
46.28.183.0/24 maxlen: 24
62.12.64.0/24 maxlen: 24
62.12.65.0/24 maxlen: 24
62.12.66.0/24 maxlen: 24
62.12.67.0/24 maxlen: 24
62.12.68.0/24 maxlen: 24
62.12.69.0/24 maxlen: 24
62.12.72.0/24 maxlen: 24
62.12.74.0/24 maxlen: 24
62.12.76.0/24 maxlen: 24
62.12.77.0/24 maxlen: 24
62.12.79.0/24 maxlen: 24
62.12.81.0/24 maxlen: 24
62.12.83.0/24 maxlen: 24
62.12.90.0/24 maxlen: 24
62.12.91.0/24 maxlen: 24
62.12.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f7:86:8d:75:aa:a1:d2:3d:79:d7:43:17:d2:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Sep 18 10:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19058dd22af54c70ed391a4c1d3d2913aa8aae7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:7f:33:e7:71:78:19:50:da:0a:65:89:57:
84:e2:54:5b:d6:53:be:af:d0:77:44:9e:ab:32:13:
ef:e4:77:f0:73:6d:f8:e9:0c:54:b9:62:a9:f8:e8:
12:18:68:06:56:ca:ef:80:3f:ea:18:da:8c:b8:2a:
4a:79:eb:6a:7f:f3:21:9e:78:e2:a8:32:89:27:46:
55:59:30:4f:fa:98:05:4a:29:57:29:66:0b:f7:bb:
80:c7:45:7e:6c:36:51:fe:c9:d2:9d:d9:65:80:53:
c4:bf:77:8b:1f:46:49:8b:94:87:79:11:ca:89:d6:
2d:62:d7:ee:76:56:0b:c9:04:96:4d:52:12:d9:2b:
7f:54:8a:4b:7a:d5:08:a2:05:94:bd:9e:a6:2a:1c:
2f:75:20:2a:46:5b:09:01:c3:7b:4c:1c:b9:c6:8c:
1e:97:04:6c:72:03:4b:98:d1:e8:6f:7d:eb:05:c6:
53:31:f7:9f:9d:8a:38:46:28:94:54:45:b7:1c:10:
12:94:21:af:14:ca:c2:72:12:b7:8e:2e:c0:ed:9b:
3f:2e:db:7a:ab:e3:34:bc:97:6a:72:e8:5a:26:7f:
bf:c2:be:83:46:fb:df:9c:2c:2a:52:73:50:d8:e4:
9d:58:24:ae:f0:0e:60:1e:c9:91:09:6b:30:56:6c:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:8D:D2:2A:F5:4C:70:ED:39:1A:4C:1D:3D:29:13:AA:8A:AE:7A
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/GQWN0ir1THDtORpMHT0pE6qKrno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.48.0/24
46.21.50.0/24
46.21.54.0/23
46.21.57.0-46.21.58.255
46.21.60.0/24
46.21.62.0/23
46.28.183.0/24
62.12.64.0-62.12.69.255
62.12.72.0/24
62.12.74.0/24
62.12.76.0/23
62.12.79.0/24
62.12.81.0/24
62.12.83.0/24
62.12.90.0-62.12.92.255
Signature Algorithm: sha256WithRSAEncryption
5a:6e:cf:af:30:8b:e0:40:19:fe:b0:7c:14:64:5e:81:8f:fe:
00:2d:48:8b:9e:12:e9:ba:90:43:2a:ea:8a:e0:fd:d5:56:b1:
ce:b0:bf:85:09:0d:5b:21:23:49:2b:39:23:8c:7e:f6:6c:0b:
fa:d5:b1:0a:07:d9:12:fc:5e:1d:52:9e:77:da:9b:39:71:aa:
ec:1c:3b:61:3d:f3:60:81:b3:74:e0:e5:c7:35:4c:55:f2:c1:
34:72:99:ae:e4:41:90:b4:a0:f7:d0:d1:e4:f4:a9:b6:58:73:
eb:08:96:92:b0:a2:34:0e:1a:38:b5:8d:71:a3:51:72:cd:98:
5f:fc:6b:56:6e:d9:0a:76:c8:09:e0:bf:8b:80:18:d3:f4:b9:
60:9a:d9:08:d2:02:b2:ff:4f:d1:d1:d6:b9:33:56:b7:9a:85:
b2:ac:68:9a:42:a1:09:c6:ab:ab:d7:92:97:e6:e1:b8:b5:4d:
83:f3:9d:df:f8:a5:83:36:65:2b:80:33:04:3f:cb:5c:f0:f6:
93:13:9a:c0:e1:df:81:e2:66:9e:e8:49:8f:b8:b4:00:4b:49:
22:63:3c:40:7a:3f:b3:4a:12:73:65:e7:3d:39:83:e5:61:57:
7b:86:da:3c:98:8c:2b:24:cd:6d:19:f0:50:75:61:70:de:fc:
24:ea:94:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:35 2026 by rpki-client