Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa
File: TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa (raw, json)
Hash identifier: /R4FGOkjkhFDesEVBEJOaS2Lp1AMWloELlEn3WOI3+4=
Subject key identifier: 4F:12:19:37:3C:CA:68:7D:7D:AD:B9:8E:53:26:7D:B9:72:46:06:B0
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 019B7BA514F2A8F8FCC41B18AC4211C96934
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa
Signing time: Thu 01 Jan 2026 22:19:34 +0000
ROA not before: Thu 01 Jan 2026 22:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8749
IP address blocks: 46.183.128.0/21 maxlen: 21
46.183.128.0/22 maxlen: 22
46.183.132.0/23 maxlen: 23
46.183.134.0/24 maxlen: 24
46.183.135.0/24 maxlen: 24
91.234.54.0/24 maxlen: 24
91.235.148.0/24 maxlen: 24
91.235.241.0/24 maxlen: 24
91.236.12.0/24 maxlen: 24
94.125.48.0/21 maxlen: 21
159.253.168.0/21 maxlen: 21
164.138.88.0/21 maxlen: 21
185.3.180.0/22 maxlen: 22
212.19.0.0/19 maxlen: 19
212.19.0.0/22 maxlen: 22
212.19.4.0/22 maxlen: 22
212.19.8.0/21 maxlen: 21
212.19.16.0/23 maxlen: 23
212.19.18.0/24 maxlen: 24
212.19.19.0/24 maxlen: 24
212.19.20.0/22 maxlen: 22
212.19.24.0/24 maxlen: 24
212.19.25.0/24 maxlen: 24
212.19.26.0/23 maxlen: 23
212.19.28.0/22 maxlen: 22
2a00:c040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:14:f2:a8:f8:fc:c4:1b:18:ac:42:11:c9:69:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Jan 1 22:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f1219373cca687d7dadb98e53267db9724606b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:23:4d:a8:5e:cf:d3:e9:44:df:f0:04:7e:
87:e7:e4:99:6b:b5:2d:67:a6:e9:c7:22:29:1b:0a:
66:94:02:e8:4c:13:98:fb:5f:5f:33:32:23:61:b4:
7a:79:1f:aa:34:68:37:8b:3d:bd:a6:f6:24:0e:3d:
4b:8a:8e:00:8b:c4:c3:1f:48:12:1e:ac:99:60:6a:
1e:9f:ee:9e:f6:d9:99:c7:59:13:52:ac:98:cc:93:
69:03:c8:3c:63:a7:c8:ca:a1:ec:71:98:58:37:e8:
9a:4c:97:6f:94:ea:0f:20:95:3b:b1:c7:e3:42:f2:
b0:25:01:1a:01:0f:5d:b1:83:c5:35:dd:1e:80:10:
f9:89:af:eb:38:bd:e0:eb:c8:36:a9:19:4a:ab:fa:
d0:bb:aa:c6:0a:73:bb:f7:32:3c:f9:32:2c:38:59:
20:61:09:b3:a8:95:cc:bd:6d:ce:3f:45:4d:e4:2a:
48:4b:0d:1d:83:97:c4:b1:e4:de:8b:5f:5a:3a:de:
92:7a:1e:5a:be:2e:3a:00:75:21:30:ec:7b:9d:20:
6d:cf:9e:04:c6:47:03:50:a8:7b:ea:67:a2:27:60:
53:a8:69:a4:50:95:24:ce:36:36:5f:d3:c3:de:07:
5c:6d:f9:33:c0:08:21:5d:63:70:55:09:97:72:99:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:19:37:3C:CA:68:7D:7D:AD:B9:8E:53:26:7D:B9:72:46:06:B0
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/TxIZNzzKaH19rbmOUyZ9uXJGBrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.128.0/21
91.234.54.0/24
91.235.148.0/24
91.235.241.0/24
91.236.12.0/24
94.125.48.0/21
159.253.168.0/21
164.138.88.0/21
185.3.180.0/22
212.19.0.0/19
IPv6:
2a00:c040::/32
Signature Algorithm: sha256WithRSAEncryption
16:46:05:2b:b4:4f:3d:f5:5e:cf:dc:6c:85:a1:64:d3:a6:a1:
36:02:fa:2f:d4:e2:91:94:02:33:97:c8:30:ba:19:aa:e6:8c:
84:fa:75:21:77:fa:6e:3f:52:85:6b:58:35:81:fa:85:9d:d9:
c5:81:61:4b:da:a4:52:3c:23:cc:9f:46:9b:3e:1e:88:73:a3:
1b:c2:80:8e:37:b0:25:aa:90:af:7f:e1:14:35:90:83:a7:6c:
48:d4:75:ff:df:c4:f7:04:ba:e2:93:57:4b:50:83:d6:fa:af:
58:ce:b2:5e:7d:e1:ae:15:14:02:ad:9e:c9:ae:dc:ee:bb:8f:
c6:10:88:3d:7f:9d:78:fe:be:0f:75:32:64:1e:07:46:8c:95:
c3:5a:11:1d:a8:68:58:eb:6f:58:e5:99:4e:2c:39:e6:9a:55:
e6:0d:f1:37:a4:ec:eb:d8:19:be:8b:34:37:1f:27:36:0a:80:
08:a1:4a:ee:7f:bd:e4:73:a4:a7:80:96:78:a2:86:53:62:f8:
fb:f9:98:51:68:99:5a:9b:bc:8b:89:49:25:15:97:f2:c2:2b:
aa:ed:dc:3b:6e:75:ae:92:e5:40:f7:d7:d3:26:18:3d:83:8a:
cb:71:1d:1c:c9:ed:74:d8:c3:05:b8:d0:98:91:2e:21:2b:7e:
64:36:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:23 2026 by rpki-client