Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/9VjIoxigLJtsPgVFEImwAtjUSIc.roa
File: 9VjIoxigLJtsPgVFEImwAtjUSIc.roa (raw, json)
Hash identifier: QM4OXYCoYDdi6qL2CcZ6cbYAgSeovpRsfeyxFkq8tx8=
Subject key identifier: F5:58:C8:A3:18:A0:2C:9B:6C:3E:05:45:10:89:B0:02:D8:D4:48:87
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 01A188F0E0F8270299F6E47961B72E1A5667
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/9VjIoxigLJtsPgVFEImwAtjUSIc.roa
Signing time: Thu 29 Oct 2026 18:34:09 +0000
ROA not before: Thu 29 Oct 2026 18:34:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51369
IP address blocks: 46.44.0.0/18 maxlen: 20
62.140.224.0/19 maxlen: 24
62.140.232.0/24 maxlen: 24
62.140.248.0/24 maxlen: 24
62.140.250.0/24 maxlen: 24
80.77.161.0/24 maxlen: 24
80.77.162.0/23 maxlen: 23
80.77.169.0/24 maxlen: 24
80.77.170.0/23 maxlen: 23
80.77.172.0/22 maxlen: 22
93.191.8.0/21 maxlen: 24
93.191.11.0/24 maxlen: 24
93.191.12.0/23 maxlen: 23
185.221.45.0/24 maxlen: 24
185.221.46.0/24 maxlen: 24
185.221.47.0/24 maxlen: 24
2a02:2518::/29 maxlen: 29
2a02:2518::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:f0:e0:f8:27:02:99:f6:e4:79:61:b7:2e:1a:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Oct 29 18:34:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f558c8a318a02c9b6c3e05451089b002d8d44887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:52:38:43:93:ca:c0:af:a0:9b:fe:bd:c1:
dd:e1:a2:5b:a0:f3:b9:d7:3c:74:61:e9:bf:62:f8:
4a:cf:8f:93:16:af:6f:43:99:e0:72:d9:8d:bb:b4:
15:a2:49:6f:af:0e:26:fb:a4:28:74:f1:d8:d0:04:
04:ae:17:ad:f6:79:92:df:2f:9f:26:bf:ba:67:d0:
ac:1f:a5:98:4b:5b:67:ae:21:a9:b4:44:d3:d2:66:
99:83:99:a7:23:71:dc:9d:09:5e:4a:57:2f:d3:2d:
ad:71:f7:31:13:3f:c2:d4:99:90:f9:57:17:b9:82:
02:09:77:77:6b:6b:b6:94:35:33:d0:11:42:e5:58:
c5:22:50:4b:85:45:7b:89:bb:07:f8:56:09:37:ac:
94:12:2c:b8:47:3e:d9:f8:72:a5:c2:32:96:1e:65:
43:9d:82:e3:7e:1d:56:7c:52:6d:16:4a:fb:3a:6f:
e8:95:62:1f:f2:44:5c:e1:17:49:ac:fe:85:5d:16:
4e:bd:fe:eb:84:d1:b9:86:34:9a:8c:33:1a:f7:96:
6c:77:7c:31:3e:d8:ca:b3:d2:d9:b7:6d:1c:14:49:
a2:b8:ac:50:3a:9b:b1:a2:0e:44:78:83:65:31:f1:
92:8a:35:32:3e:61:23:74:5f:fb:82:68:55:ab:bc:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:C8:A3:18:A0:2C:9B:6C:3E:05:45:10:89:B0:02:D8:D4:48:87
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/9VjIoxigLJtsPgVFEImwAtjUSIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.44.0.0/18
62.140.224.0/19
80.77.161.0-80.77.163.255
80.77.169.0-80.77.175.255
93.191.8.0/21
185.221.45.0-185.221.47.255
IPv6:
2a02:2518::/29
Signature Algorithm: sha256WithRSAEncryption
8b:54:b9:d5:16:e8:cf:e2:4a:75:03:24:75:b0:4e:6d:3f:75:
48:b9:3e:c0:77:2e:77:3d:da:2a:4f:08:d2:cf:5c:5a:05:1c:
63:53:59:1f:01:32:c8:cd:97:b9:4b:05:c1:d3:7b:17:fb:53:
90:21:41:32:c4:41:3f:ad:39:ed:e0:87:49:98:6d:e2:0b:4d:
c3:db:68:80:61:43:b2:91:36:3d:31:4f:2d:36:0b:f4:a6:ed:
54:bc:6a:8b:87:23:40:01:67:28:5d:58:69:3b:7f:c7:71:99:
8d:9e:58:48:d4:82:76:f4:29:1e:23:74:fe:d7:6a:10:27:3b:
75:94:c3:3f:d6:27:cc:36:ac:e8:fd:9f:8a:ea:dd:7b:88:bb:
13:06:61:3b:93:a2:8d:47:70:0e:59:79:1f:49:55:89:9b:e0:
47:38:16:c9:a3:a1:a7:9d:ec:44:06:d7:91:ff:d2:84:e4:23:
30:98:d3:14:27:66:39:2a:ca:b8:59:9b:c2:1b:c2:4f:31:6a:
1a:61:68:9e:6d:84:72:01:6d:a7:d7:6f:69:92:9a:63:eb:7b:
52:88:ba:5d:e9:52:78:3b:8a:00:5f:3c:f9:0a:ae:61:76:b1:
d4:df:1c:21:f2:2e:1d:93:3e:9f:9e:a4:15:44:fb:8c:f5:07:
a8:19:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:18 2026 by rpki-client