Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pDiYIp6er_-T1AfamgHnds9XBJg.roa
File: pDiYIp6er_-T1AfamgHnds9XBJg.roa (raw, json)
Hash identifier: 0Lv7dffxGo6budWeGj7lDWhuzrUrNjU4jyiJEopdesY=
Subject key identifier: A4:38:98:22:9E:9E:AF:FF:93:D4:07:DA:9A:01:E7:76:CF:57:04:98
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A06687F2F9612F92F9F870990D88631E01
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pDiYIp6er_-T1AfamgHnds9XBJg.roa
Signing time: Thu 03 Sep 2026 09:09:40 +0000
ROA not before: Thu 03 Sep 2026 09:09:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 46.226.125.0/24 maxlen: 24
62.68.92.0/24 maxlen: 24
176.118.34.0/24 maxlen: 24
185.21.131.0/24 maxlen: 24
185.25.104.0/24 maxlen: 24
185.248.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:87:f2:f9:61:2f:92:f9:f8:70:99:0d:88:63:1e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a43898229e9eafff93d407da9a01e776cf570498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:61:c0:97:0a:ee:62:50:fe:52:ed:a3:a8:
19:3d:07:78:43:b7:ca:15:47:3a:17:c8:89:09:e2:
d2:72:6f:4a:0a:70:15:52:17:e3:63:34:bd:b7:bc:
d7:e0:d5:64:a5:50:bb:f2:60:e9:e5:10:23:00:9f:
af:cc:bc:c4:7d:c1:c3:fb:f8:9e:29:6f:9b:a7:6b:
8e:8a:79:27:4e:c2:97:67:1a:f2:2c:38:c7:8e:8d:
10:8c:8a:50:f7:c0:76:a4:c7:8b:85:93:2c:4a:95:
af:0f:f6:3c:b5:47:f8:d7:b6:48:16:ee:9d:52:63:
2e:da:90:41:86:e2:5b:2a:4a:c4:36:0e:8f:22:b5:
00:c7:63:31:b5:b1:09:13:05:26:92:90:00:e2:50:
90:e0:41:7f:3b:ab:a7:90:16:76:45:73:f1:60:02:
1a:aa:f4:56:7a:ba:e8:ad:27:32:b4:8d:73:4a:3f:
01:14:6f:a9:64:a1:d7:62:d4:bd:89:d3:b5:9d:07:
e0:e8:d1:38:54:f8:d8:08:ea:ee:94:29:01:08:34:
ed:26:43:08:42:d7:9f:a5:d1:d9:c2:fe:b2:da:7b:
0d:9e:48:75:6e:1e:1f:55:38:53:88:6c:8c:47:8a:
1c:c6:b7:0a:08:82:8a:81:9f:1b:04:f6:81:77:d3:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:98:22:9E:9E:AF:FF:93:D4:07:DA:9A:01:E7:76:CF:57:04:98
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/pDiYIp6er_-T1AfamgHnds9XBJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.125.0/24
62.68.92.0/24
176.118.34.0/24
185.21.131.0/24
185.25.104.0/24
185.248.135.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f2:55:4f:8f:c2:b5:49:c1:8d:3d:13:f3:a1:47:b5:00:40:
64:ec:1e:6e:5c:15:9c:9c:c7:5d:10:12:91:bb:7d:ee:3a:ed:
aa:9b:d8:c7:22:00:57:43:43:c6:05:ec:ac:fb:8a:00:81:21:
ab:e3:5d:4e:65:57:6a:24:a0:79:25:ea:b5:b6:47:79:bb:72:
a6:6c:11:5d:78:f2:b8:92:4c:0d:eb:20:ad:e1:cf:8d:b1:ec:
88:33:cc:d2:8b:59:0d:91:a1:5e:b9:88:a0:c0:12:ae:90:18:
fd:2f:1f:a2:3a:87:6a:48:2b:f4:ff:b2:69:a8:3b:0e:f4:65:
87:33:ba:32:f8:0c:af:80:75:16:cf:05:6e:ff:98:9b:f7:32:
c9:9b:63:d5:c5:32:27:75:13:75:a7:f6:ef:62:48:56:07:2f:
b0:f0:9a:03:0b:a5:7c:74:96:7c:04:fe:2e:99:7d:d6:dd:ed:
5c:b5:82:92:6f:32:ff:03:55:d5:4d:43:65:aa:b9:c0:97:26:
58:c2:64:0b:bb:d5:34:26:10:34:3e:7c:c9:92:83:11:2f:93:
69:df:65:2d:04:0d:ca:85:ce:bf:d4:25:b0:ac:93:59:93:34:
dc:d6:07:78:bb:d1:47:10:fb:5f:4f:85:9d:50:45:b0:43:40:
be:e6:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:21 2026 by rpki-client