Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/KQegI9zFl4TTXrM0z9Yjv28lgns.roa
File: KQegI9zFl4TTXrM0z9Yjv28lgns.roa (raw, json)
Hash identifier: Ej7A/eIErtk4SW4resekw38eVCxq6nz5fw0K4qp4xAQ=
Subject key identifier: 29:07:A0:23:DC:C5:97:84:D3:5E:B3:34:CF:D6:23:BF:6F:25:82:7B
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 01A0578421F7F2B385703153474AD72179B2
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/KQegI9zFl4TTXrM0z9Yjv28lgns.roa
Signing time: Mon 31 Aug 2026 11:11:12 +0000
ROA not before: Mon 31 Aug 2026 11:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41897
IP address blocks: 45.158.16.0/22 maxlen: 22
46.40.0.0/18 maxlen: 18
46.40.1.0/24 maxlen: 24
46.40.4.0/24 maxlen: 24
46.40.6.0/24 maxlen: 24
46.40.8.0/22 maxlen: 22
46.40.8.0/24 maxlen: 24
46.40.9.0/24 maxlen: 24
46.40.10.0/24 maxlen: 24
46.40.11.0/24 maxlen: 24
46.40.12.0/23 maxlen: 23
46.40.14.0/24 maxlen: 24
46.40.15.0/24 maxlen: 24
46.40.16.0/21 maxlen: 21
46.40.16.0/23 maxlen: 23
46.40.16.0/24 maxlen: 24
46.40.17.0/24 maxlen: 24
46.40.18.0/24 maxlen: 24
46.40.19.0/24 maxlen: 24
46.40.20.0/24 maxlen: 24
46.40.21.0/24 maxlen: 24
46.40.22.0/24 maxlen: 24
46.40.23.0/24 maxlen: 24
46.40.26.0/24 maxlen: 24
46.40.27.0/24 maxlen: 24
46.40.29.0/24 maxlen: 24
46.40.30.0/23 maxlen: 23
46.40.30.0/24 maxlen: 24
46.40.31.0/24 maxlen: 24
46.40.32.0/24 maxlen: 24
46.40.33.0/24 maxlen: 24
46.40.34.0/24 maxlen: 24
46.40.35.0/24 maxlen: 24
46.40.37.0/24 maxlen: 24
46.40.40.0/21 maxlen: 21
46.40.40.0/24 maxlen: 24
46.40.41.0/24 maxlen: 24
46.40.42.0/24 maxlen: 24
46.40.43.0/24 maxlen: 24
46.40.44.0/23 maxlen: 23
46.40.46.0/23 maxlen: 23
46.40.48.0/21 maxlen: 21
46.40.48.0/24 maxlen: 24
46.40.49.0/24 maxlen: 24
46.40.50.0/24 maxlen: 24
46.40.51.0/24 maxlen: 24
46.40.52.0/24 maxlen: 24
46.40.53.0/24 maxlen: 24
46.40.54.0/24 maxlen: 24
46.40.55.0/24 maxlen: 24
46.40.56.0/22 maxlen: 22
46.40.56.0/24 maxlen: 24
46.40.57.0/24 maxlen: 24
46.40.58.0/24 maxlen: 24
46.40.59.0/24 maxlen: 24
46.40.60.0/23 maxlen: 23
46.40.62.0/24 maxlen: 24
46.40.63.0/24 maxlen: 24
46.251.8.0/22 maxlen: 22
80.245.96.0/22 maxlen: 22
81.24.240.0/21 maxlen: 21
81.24.247.0/24 maxlen: 24
85.222.176.0/20 maxlen: 20
85.222.176.0/21 maxlen: 21
85.222.176.0/24 maxlen: 24
85.222.177.0/24 maxlen: 24
85.222.178.0/24 maxlen: 24
85.222.179.0/24 maxlen: 24
85.222.180.0/22 maxlen: 22
89.147.80.0/20 maxlen: 20
89.147.80.0/22 maxlen: 22
89.147.80.0/24 maxlen: 24
89.147.81.0/24 maxlen: 24
89.147.82.0/24 maxlen: 24
89.147.83.0/24 maxlen: 24
89.147.84.0/22 maxlen: 22
89.147.88.0/24 maxlen: 24
89.147.89.0/24 maxlen: 24
89.147.92.0/24 maxlen: 24
89.147.93.0/24 maxlen: 24
89.147.94.0/24 maxlen: 24
89.147.95.0/24 maxlen: 24
91.102.224.0/21 maxlen: 21
91.102.229.0/24 maxlen: 24
91.147.240.0/21 maxlen: 21
91.147.244.0/22 maxlen: 22
94.248.184.0/21 maxlen: 21
94.248.232.0/21 maxlen: 21
94.248.232.0/22 maxlen: 22
94.248.232.0/24 maxlen: 24
94.248.233.0/24 maxlen: 24
94.248.234.0/24 maxlen: 24
94.248.235.0/24 maxlen: 24
94.248.236.0/24 maxlen: 24
94.248.237.0/24 maxlen: 24
94.248.238.0/24 maxlen: 24
94.248.239.0/24 maxlen: 24
95.85.128.0/18 maxlen: 18
95.85.128.0/22 maxlen: 22
95.85.135.0/24 maxlen: 24
95.85.136.0/22 maxlen: 22
95.85.144.0/21 maxlen: 21
95.85.144.0/24 maxlen: 24
95.85.145.0/24 maxlen: 24
95.85.146.0/24 maxlen: 24
95.85.147.0/24 maxlen: 24
95.85.148.0/24 maxlen: 24
95.85.149.0/24 maxlen: 24
95.85.150.0/24 maxlen: 24
95.85.151.0/24 maxlen: 24
95.85.152.0/23 maxlen: 23
95.85.152.0/24 maxlen: 24
95.85.153.0/24 maxlen: 24
95.85.154.0/23 maxlen: 23
95.85.154.0/24 maxlen: 24
95.85.155.0/24 maxlen: 24
95.85.156.0/22 maxlen: 22
95.85.172.0/24 maxlen: 24
95.85.173.0/24 maxlen: 24
95.85.176.0/22 maxlen: 22
95.85.184.0/23 maxlen: 23
95.85.186.0/23 maxlen: 23
178.20.200.0/24 maxlen: 24
178.20.201.0/24 maxlen: 24
178.20.202.0/23 maxlen: 23
185.6.188.0/22 maxlen: 22
185.6.188.0/24 maxlen: 24
185.6.189.0/24 maxlen: 24
185.6.190.0/24 maxlen: 24
185.6.191.0/24 maxlen: 24
185.10.204.0/22 maxlen: 22
185.10.204.0/24 maxlen: 24
185.37.168.0/22 maxlen: 22
185.37.169.0/24 maxlen: 24
185.37.170.0/24 maxlen: 24
185.141.196.0/22 maxlen: 22
185.141.196.0/23 maxlen: 23
185.141.198.0/24 maxlen: 24
185.141.199.0/24 maxlen: 24
185.156.152.0/22 maxlen: 22
185.169.248.0/22 maxlen: 22
185.169.248.0/24 maxlen: 24
185.169.249.0/24 maxlen: 24
185.169.250.0/23 maxlen: 23
185.231.128.0/22 maxlen: 22
195.192.244.0/22 maxlen: 22
217.17.96.0/20 maxlen: 24
217.17.96.0/24 maxlen: 24
217.17.97.0/24 maxlen: 24
217.17.98.0/24 maxlen: 24
217.17.100.0/24 maxlen: 24
217.17.107.0/24 maxlen: 24
217.17.108.0/24 maxlen: 24
217.17.110.0/24 maxlen: 24
217.17.111.0/24 maxlen: 24
2a00:ad00::/29 maxlen: 29
2a00:ad00:2010::/44 maxlen: 44
2a00:ad03::/32 maxlen: 32
2a00:ad07:3000::/36 maxlen: 36
2a04:f040::/29 maxlen: 29
2a0c:6300::/30 maxlen: 30
2a0f:7bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:84:21:f7:f2:b3:85:70:31:53:47:4a:d7:21:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Aug 31 11:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2907a023dcc59784d35eb334cfd623bf6f25827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:14:b9:89:ed:af:3c:8c:b9:aa:70:02:b1:
f7:82:c4:13:87:5e:1f:c6:7b:fc:a4:ba:1d:e5:2a:
d5:a9:67:6e:61:74:a1:7e:85:7e:c4:ce:bb:8e:bb:
05:70:44:7b:49:86:ec:11:54:1d:da:26:7b:b7:ef:
4c:a4:e2:f3:a4:30:ea:9a:e4:ec:ab:4b:8e:9c:37:
f0:4f:c0:76:90:c6:d7:63:fd:89:96:cb:ab:eb:1e:
65:a5:02:f0:ed:0d:6a:05:f8:c2:81:48:6b:83:d7:
d2:6e:ef:6c:82:79:4e:d2:9d:00:7e:bd:be:20:f8:
7d:71:6e:d5:89:9b:29:c2:84:74:6c:7c:a0:7a:7c:
53:df:4b:83:29:5b:16:75:93:82:a6:4b:32:82:96:
5b:5a:19:b5:e0:c9:1c:de:3a:1e:0a:92:5f:11:28:
1e:81:4f:7f:2b:15:49:1b:cf:f8:90:7c:d5:97:bb:
46:5a:a0:c8:34:df:9f:6b:6b:4a:c5:47:25:61:d2:
07:0d:27:9f:3d:6f:ab:b1:a8:96:e4:80:f3:55:c9:
d0:4f:f0:f6:2a:83:67:c1:f6:e7:a5:74:c8:21:79:
f8:39:cc:43:e5:1b:e8:97:d0:75:8d:b7:40:25:5e:
9c:f1:6e:94:9c:65:4b:10:bb:c9:19:c4:27:c6:6a:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:07:A0:23:DC:C5:97:84:D3:5E:B3:34:CF:D6:23:BF:6F:25:82:7B
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/KQegI9zFl4TTXrM0z9Yjv28lgns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.16.0/22
46.40.0.0/18
46.251.8.0/22
80.245.96.0/22
81.24.240.0/21
85.222.176.0/20
89.147.80.0/20
91.102.224.0/21
91.147.240.0/21
94.248.184.0/21
94.248.232.0/21
95.85.128.0/18
178.20.200.0/22
185.6.188.0/22
185.10.204.0/22
185.37.168.0/22
185.141.196.0/22
185.156.152.0/22
185.169.248.0/22
185.231.128.0/22
195.192.244.0/22
217.17.96.0/20
IPv6:
2a00:ad00::/29
2a04:f040::/29
2a0c:6300::/30
2a0f:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
31:6b:a8:75:20:9d:8b:a2:d7:4c:f1:44:d3:98:d2:e5:fd:fa:
bd:89:1d:24:0a:4c:f9:46:ab:51:aa:53:e1:35:0b:19:b5:f7:
13:83:2c:1b:e3:03:44:66:7b:91:f1:f1:f8:b9:87:a5:9f:db:
2c:fb:28:47:c1:10:5a:6e:43:0b:68:59:43:ef:03:71:38:ef:
d7:a4:35:32:3e:43:dd:a2:aa:df:61:5b:e3:c2:ad:85:e9:7b:
bf:70:cc:7b:56:03:df:15:87:fc:e2:50:d8:92:d9:ad:97:0b:
5d:39:24:05:ab:64:e4:fa:0e:82:80:2f:54:41:19:fe:d8:ac:
1e:96:5e:8c:71:e4:00:fa:13:2d:1b:65:e1:76:8f:4b:45:89:
1e:2c:6b:21:d6:6b:f0:ec:8f:21:8e:4b:f3:8f:fb:e0:c6:97:
5f:25:b7:0a:f4:4e:64:31:42:e9:e4:9a:3c:8d:18:05:78:2a:
b5:ce:d5:6f:1a:6a:f4:ff:4b:38:5b:4c:6f:8a:1f:54:4a:75:
13:b3:68:8b:b8:27:a4:d3:f4:8c:e9:70:ab:3e:88:53:fc:86:
9b:bb:df:41:73:e9:3e:97:e9:68:e9:a3:f5:f1:2d:0e:49:61:
79:71:a1:b1:11:6f:74:b2:eb:f2:b3:35:bc:c3:e3:c9:20:ac:
bd:15:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:25:24 2026 by rpki-client