Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1dXIwlgP4qOyo68zCfjMvMArkUg.roa
File: 1dXIwlgP4qOyo68zCfjMvMArkUg.roa (raw, json)
Hash identifier: oblJvDe8zzIIh9bZePWK8x9S7zuMiBwUtxqLuMHENj8=
Subject key identifier: D5:D5:C8:C2:58:0F:E2:A3:B2:A3:AF:33:09:F8:CC:BC:C0:2B:91:48
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019D495FC410E7C1FA37E1F1F3565EB636B0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1dXIwlgP4qOyo68zCfjMvMArkUg.roa
Signing time: Wed 01 Apr 2026 14:08:26 +0000
ROA not before: Wed 01 Apr 2026 14:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205132
IP address blocks: 46.10.151.0/24 maxlen: 24
46.10.156.0/24 maxlen: 24
46.10.179.0/24 maxlen: 24
77.85.170.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
83.228.61.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
83.228.87.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.192.0/24 maxlen: 24
84.238.193.0/24 maxlen: 24
84.238.194.0/24 maxlen: 24
87.126.134.0/24 maxlen: 24
94.236.169.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.91.157.0/24 maxlen: 24
213.91.170.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:5f:c4:10:e7:c1:fa:37:e1:f1:f3:56:5e:b6:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Apr 1 14:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5d5c8c2580fe2a3b2a3af3309f8ccbcc02b9148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:f3:dd:dd:b0:19:ff:08:0e:80:c4:d1:8d:
0c:5f:a7:98:c0:64:e2:e6:f3:c3:54:50:fc:da:94:
ec:0f:bc:bd:c0:4e:d7:fb:db:2e:80:d0:31:59:70:
50:60:5d:92:e0:29:19:58:aa:7a:0f:b1:54:07:25:
d7:0a:75:48:f7:82:07:71:e9:55:af:6c:6d:99:c9:
59:ee:91:6c:00:75:44:5e:05:02:fb:b3:b9:3c:26:
a6:37:17:d7:18:fb:fc:23:97:8a:e8:cd:52:41:ed:
92:83:c3:47:00:b2:5a:42:64:90:ac:ee:35:6a:41:
2a:72:2a:85:7c:27:17:ac:78:f1:74:a0:ba:4c:69:
62:92:89:d5:e6:c1:9c:86:71:86:01:30:09:0d:f5:
78:16:4b:d0:d9:38:7b:dd:b5:55:f9:78:7a:78:e1:
ff:ab:38:3b:59:b5:b2:ba:3d:7a:6d:bb:1c:90:7b:
4e:a5:05:e5:d1:30:c2:d3:69:52:a0:e7:f8:40:e8:
26:ae:06:07:98:83:a1:af:59:9f:b3:ca:6f:ea:3b:
51:e6:cd:99:67:07:76:10:fb:15:97:78:7c:d0:3d:
d0:a8:8b:32:bd:88:3a:d0:37:02:4a:7a:f2:a0:79:
26:31:32:e9:87:87:b2:e1:9d:8a:56:25:f6:a5:df:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:C8:C2:58:0F:E2:A3:B2:A3:AF:33:09:F8:CC:BC:C0:2B:91:48
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1dXIwlgP4qOyo68zCfjMvMArkUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.151.0/24
46.10.156.0/24
46.10.179.0/24
77.85.170.0/24
77.85.198.0/24
83.228.61.0/24
83.228.86.0/23
83.228.89.0/24
84.238.167.0/24
84.238.192.0-84.238.194.255
87.126.134.0/24
94.236.169.0/24
212.72.199.0/24
212.72.221.0/24
213.91.157.0/24
213.91.170.0/24
213.91.173.0/24
213.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:7a:14:9f:28:31:12:8f:c1:f7:8d:c6:63:8b:c1:0e:a0:dd:
7d:cf:47:f9:82:a7:ba:4d:bd:aa:37:7a:10:18:18:e6:39:f2:
9a:05:cf:b7:f9:53:56:8a:ed:eb:2e:89:94:9d:68:63:03:69:
9c:80:35:99:40:1d:1a:82:61:ad:57:dc:3f:80:37:ee:70:71:
3a:a8:58:3a:dc:9c:ae:6c:c9:95:2d:91:e3:8e:83:03:58:3c:
b1:46:e1:ce:5c:90:8c:dc:59:f5:ea:3c:a1:29:48:f3:c1:ff:
13:e7:8a:bc:0f:4b:a9:37:16:f5:c7:06:66:2f:e2:48:59:cb:
55:af:f6:19:64:ad:6a:47:3c:18:0e:d3:ac:59:13:c9:dc:ce:
d7:54:18:85:79:d1:91:ee:24:28:6e:26:8e:50:10:d5:e5:ad:
74:2f:94:16:a0:f8:40:fc:dc:45:58:8e:08:0f:53:51:c4:15:
01:a6:c3:d7:84:72:72:ca:0f:8d:3c:c7:78:92:39:03:f0:5a:
15:6a:76:e1:e6:d3:ff:e7:4e:aa:b2:99:53:1f:24:7b:be:1a:
2e:93:5a:7d:e6:da:e4:c8:49:d3:97:8d:39:10:8b:a0:6c:25:
23:9c:1c:49:a6:19:c9:bf:90:f2:e7:26:db:e9:a0:ff:7d:56:
10:9f:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:25 2026 by rpki-client