Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa
File: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (raw, json)
Hash identifier: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=
Subject key identifier: F1:A7:24:CF:47:C1:9B:11:68:67:B9:F4:52:4C:8A:52:1C:80:58:62
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019B7BA4CB7E681E83061BC92B9CD053C695
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa
Signing time: Thu 01 Jan 2026 22:19:15 +0000
ROA not before: Thu 01 Jan 2026 22:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20694
IP address blocks: 46.30.24.0/22 maxlen: 22
185.45.110.0/23 maxlen: 23
2a02:22f0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:cb:7e:68:1e:83:06:1b:c9:2b:9c:d0:53:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 1 22:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1a724cf47c19b116867b9f4524c8a521c805862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:1e:65:2f:67:18:54:fc:3b:50:e6:d4:a3:
41:9b:23:03:29:a4:ad:80:fa:7f:08:75:ad:20:ed:
59:00:00:ca:f9:93:fc:ac:6a:96:0b:d2:5a:c9:8d:
ab:fb:b5:73:f6:ad:76:f1:d5:c7:12:d9:cf:c3:18:
ee:99:ad:66:24:50:f3:14:0b:fb:2b:01:f1:03:50:
53:0b:04:e0:62:99:88:6c:05:9c:fa:ea:35:91:d0:
07:ad:2e:91:88:5a:35:5a:38:17:8e:0f:0d:18:79:
a2:2b:af:fa:75:54:24:61:db:28:cc:ac:ed:f6:19:
63:3b:9e:3b:ff:bb:88:06:d2:3e:8b:fb:13:f4:ea:
da:fa:6d:ef:0c:42:55:2d:75:3a:5a:bc:ec:54:91:
b4:46:fd:c7:72:26:59:b5:19:5e:e4:8e:6c:54:77:
cc:9b:ae:88:be:a6:d9:37:dd:76:a1:79:c1:4b:4a:
61:14:07:1d:67:98:01:af:b4:a6:ae:46:c3:30:96:
5d:10:5c:73:94:bf:a6:ff:83:47:a6:a9:39:d4:41:
bf:59:2a:72:c5:c6:d7:96:5d:39:5d:bd:10:9b:94:
8f:c7:6b:38:0e:90:62:54:06:eb:05:80:82:83:71:
2f:74:47:38:4f:ef:c2:c7:73:dc:0b:3f:9f:4a:19:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:24:CF:47:C1:9B:11:68:67:B9:F4:52:4C:8A:52:1C:80:58:62
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.24.0/22
185.45.110.0/23
IPv6:
2a02:22f0:12::/48
Signature Algorithm: sha256WithRSAEncryption
1d:09:dc:33:3b:a0:0a:cf:74:0e:55:fb:5f:bf:c1:23:62:be:
d1:a3:0d:1d:6b:11:d1:2d:34:a7:3a:75:f7:5a:cc:cf:5a:4f:
c9:c0:85:85:8a:75:31:9e:e3:9f:42:af:2e:7f:db:f0:85:87:
7c:19:61:29:da:7d:ed:f7:b9:7a:4e:ac:75:ba:b2:fb:0d:60:
c1:97:9a:ac:8e:82:02:41:22:da:f7:bf:e5:b3:16:fd:0f:69:
c0:f0:70:99:07:c1:e7:5f:3e:9d:23:0c:63:94:c9:5c:b0:7b:
da:20:81:7c:2d:f2:64:ce:dc:66:a6:e0:38:5a:ec:0d:cd:30:
cd:d4:86:06:ee:d5:19:6d:81:de:0d:53:91:86:2f:fd:2a:d5:
7e:07:e1:0c:bb:12:b6:70:b0:a6:cf:be:89:2a:6f:c7:0f:9f:
b5:6d:e7:39:d1:f2:f8:04:98:0b:3f:c8:eb:9f:56:c1:96:f3:
63:9f:17:70:60:00:82:38:b0:5f:f8:86:c6:e2:c8:b2:75:81:
08:f6:a7:40:6f:a5:fe:40:da:46:3a:cf:df:c3:c1:ed:94:cf:
03:73:63:3f:87:e8:68:39:3e:a3:e6:7f:13:af:7e:f7:85:5e:
7a:8c:8c:75:e0:03:42:1f:49:fd:72:81:09:48:53:b0:28:c6:
07:43:9f:c3
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZt7pMt+aB6DBhvJK5zQU8aVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWE3MjRjZjQ3YzE5YjExNjg2N2I5ZjQ1MjRjOGE1MjFjODA1ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTMeZS9nGFT8O1Dm1KNBmyMDKaSt
gPp/CHWtIO1ZAADK+ZP8rGqWC9JayY2r+7Vz9q128dXHEtnPwxjuma1mJFDzFAv7
KwHxA1BTCwTgYpmIbAWc+uo1kdAHrS6RiFo1WjgXjg8NGHmiK6/6dVQkYdsozKzt
9hljO547/7uIBtI+i/sT9Ora+m3vDEJVLXU6WrzsVJG0Rv3HciZZtRle5I5sVHfM
m66IvqbZN912oXnBS0phFAcdZ5gBr7SmrkbDMJZdEFxzlL+m/4NHpqk51EG/WSpy
xcbXll05Xb0Qm5SPx2s4DpBiVAbrBYCCg3EvdEc4T+/Cx3PcCz+fShkadQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFPGnJM9HwZsRaGe59FJMilIcgFhiMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvOGFja3owZkJteEZvWjduMFVreUtVaHlBV0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLh4YAwQB
uS1uMA8EAgACMAkDBwAqAiLwABIwDQYJKoZIhvcNAQELBQADggEBAB0J3DM7oArP
dA5V+1+/wSNivtGjDR1rEdEtNKc6dfdazM9aT8nAhYWKdTGe459Cry5/2/CFh3wZ
YSnafe33uXpOrHW6svsNYMGXmqyOggJBItr3v+WzFv0PacDwcJkHwedfPp0jDGOU
yVywe9oggXwt8mTO3Gam4Dha7A3NMM3Uhgbu1Rltgd4NU5GGL/0q1X4H4Qy7ErZw
sKbPvokqb8cPn7Vt5znR8vgEmAs/yOufVsGW82OfF3BgAII4sF/4hsbiyLJ1gQj2
p0Bvpf5A2kY6z9/Dwe2UzwNzYz+H6Gg5PqPmfxOvfveFXnqMjHXgA0IfSf1ygQlI
U7AoxgdDn8M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:42 2026 by rpki-client