Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/RnkLCZTRPikfn69pM8NWfH_GclU.roa
File: RnkLCZTRPikfn69pM8NWfH_GclU.roa (raw, json)
Hash identifier: nYD3IrF4Md20Tnbhl9m0LSWOnshGZYrft//Orj1gVoE=
Subject key identifier: 46:79:0B:09:94:D1:3E:29:1F:9F:AF:69:33:C3:56:7C:7F:C6:72:55
Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial: 01A03E4114541B832CB21CC7D4D6ED65FDE2
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/RnkLCZTRPikfn69pM8NWfH_GclU.roa
Signing time: Wed 26 Aug 2026 13:27:27 +0000
ROA not before: Wed 26 Aug 2026 13:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42277
IP address blocks: 5.249.192.0/19 maxlen: 19
37.188.0.0/18 maxlen: 20
46.62.0.0/17 maxlen: 17
77.241.16.0/21 maxlen: 21
77.241.20.0/22 maxlen: 22
94.247.248.0/22 maxlen: 24
94.247.248.0/24 maxlen: 24
94.247.252.0/22 maxlen: 22
176.241.192.0/19 maxlen: 20
178.249.240.0/21 maxlen: 21
2a02:51c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:41:14:54:1b:83:2c:b2:1c:c7:d4:d6:ed:65:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Validity
Not Before: Aug 26 13:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46790b0994d13e291f9faf6933c3567c7fc67255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:11:a0:2a:3b:1d:98:0d:56:55:db:76:c6:
4a:53:57:b3:ac:6d:c0:0d:a9:64:58:dd:0a:66:81:
a8:67:d4:be:25:3a:cf:26:71:96:6c:81:48:70:1e:
c0:ff:01:c7:64:c0:11:9d:e7:97:3e:5b:01:d9:24:
ac:10:75:14:30:14:75:49:3f:db:59:a9:ce:9f:0d:
43:14:3d:bd:32:a1:27:4a:0f:35:5c:c3:fc:5b:a6:
cf:81:d2:90:51:73:26:8c:06:81:8c:ce:82:07:64:
ad:21:15:bd:1b:da:4a:10:19:c9:bb:0d:4c:53:53:
b5:09:9f:95:94:f5:ff:b9:8f:55:08:79:81:07:53:
4b:79:19:f6:48:91:7e:5b:51:f5:34:35:2b:0d:70:
fb:d5:8d:b6:05:a9:55:82:21:f9:1c:b4:be:bf:b2:
61:a2:39:33:5e:2d:3b:b0:93:16:6c:1c:f9:69:a8:
e7:46:bb:74:bd:33:59:0c:df:20:73:e9:f4:f4:34:
ad:6a:98:58:52:7e:6c:09:6e:8a:9f:21:5f:1a:8f:
50:de:1d:aa:06:3f:ee:c9:a2:f1:de:3b:d1:62:11:
4c:a5:e9:96:53:8b:0f:af:03:58:94:c7:0d:be:73:
a0:f9:7d:03:9f:74:ed:4f:b7:5d:8f:6c:8e:c4:ba:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:0B:09:94:D1:3E:29:1F:9F:AF:69:33:C3:56:7C:7F:C6:72:55
X509v3 Authority Key Identifier:
keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/RnkLCZTRPikfn69pM8NWfH_GclU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.192.0/19
37.188.0.0/18
46.62.0.0/17
77.241.16.0/21
94.247.248.0/21
176.241.192.0/19
178.249.240.0/21
IPv6:
2a02:51c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:73:b4:f4:bc:94:db:2a:d4:4b:33:47:03:5d:e8:59:f8:db:
ee:ab:ef:9f:be:5e:2e:ba:68:6e:1e:65:bc:12:8f:05:53:d0:
2f:85:4f:8f:1d:f3:cf:ff:ce:0a:23:d6:61:1d:74:8e:57:fa:
d8:77:7f:eb:1a:e5:1c:4d:e3:f6:92:af:f0:83:0b:32:60:2d:
10:96:39:27:22:d3:8c:47:a5:e4:97:0b:28:1b:f8:72:c5:ba:
b4:26:1a:b9:91:d3:8e:a3:70:58:3b:ce:52:b0:76:08:b6:de:
68:99:f4:6a:78:74:97:3f:e4:b2:77:66:b3:9e:aa:30:64:d2:
9a:2e:01:e1:f7:4c:d7:62:2f:77:48:2d:42:07:68:57:45:5b:
0f:8a:4f:b6:fa:3a:5d:e3:11:d5:6e:28:f0:32:4d:20:59:b0:
28:4b:6a:05:04:cd:44:a4:d0:08:dc:b9:cc:4b:9b:c6:7b:15:
eb:de:70:30:49:82:ac:dd:c1:4e:61:c3:d8:b3:8d:64:24:ea:
44:f9:45:a6:d9:1f:55:8b:2e:13:cb:e8:3a:e1:73:53:6d:b8:
fa:9e:c3:65:9f:22:7f:9f:02:33:ab:1e:f5:95:9d:90:ba:fe:
21:e0:65:37:4e:d9:fd:d0:52:af:2d:a9:6a:1c:3b:36:1d:15:
49:bc:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:33:30 2026 by rpki-client