Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa
File: wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa (raw, json)
Hash identifier: 3hm1vbiygm//Ol0678bMckEoB1V0vwd58eFRGEubz9I=
Subject key identifier: C2:3D:99:8E:D5:DD:B2:54:32:7D:6B:04:78:AE:C0:9E:E3:A7:EC:4A
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019C468D05B4779BEA32AD1CB5C48C3F5AE5
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa
Signing time: Tue 10 Feb 2026 07:56:13 +0000
ROA not before: Tue 10 Feb 2026 07:56:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60192
IP address blocks: 46.191.152.0/22 maxlen: 22
46.191.152.0/23 maxlen: 23
46.191.152.0/24 maxlen: 24
46.191.153.0/24 maxlen: 24
46.191.154.0/23 maxlen: 23
46.191.154.0/24 maxlen: 24
46.191.155.0/24 maxlen: 24
95.105.80.0/22 maxlen: 22
95.105.80.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.81.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.82.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.32.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
185.162.33.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.34.0/24 maxlen: 24
185.162.35.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:8d:05:b4:77:9b:ea:32:ad:1c:b5:c4:8c:3f:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Feb 10 07:56:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23d998ed5ddb254327d6b0478aec09ee3a7ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:91:ef:f2:78:0f:a9:98:8f:20:0d:78:0c:
e9:4d:c2:3d:a0:c5:60:88:f8:eb:65:cd:14:ed:3f:
c4:6b:21:d7:a5:7d:43:7e:82:22:a6:39:4c:ef:49:
ea:b4:c2:1f:4f:ee:4e:25:a0:bc:e7:1d:19:75:5e:
01:8d:12:e7:78:a6:3b:fc:54:11:c6:ed:ef:fe:73:
66:21:09:ba:cb:25:40:cd:d5:28:c8:f3:33:98:3a:
9a:aa:25:e0:df:49:21:85:5f:44:dd:4e:c8:0b:52:
db:82:bb:91:27:b5:17:02:2b:ec:c9:17:d8:98:6d:
a2:3f:2a:e4:4b:0e:a0:1a:6e:e7:bb:c9:23:0b:03:
c8:f0:cd:71:3e:78:b6:e3:3c:73:51:5b:9a:04:93:
10:ee:a7:ed:b3:3a:c9:08:b0:f3:a4:43:0d:d4:2c:
bb:64:86:aa:d4:88:0f:ce:26:0e:24:dd:50:cd:4f:
a4:4b:7e:d2:4f:90:a0:4b:44:79:3a:cd:f6:60:ad:
6c:5d:4e:1e:c5:e8:36:d0:23:b1:14:b8:e7:ea:ee:
ba:5d:ab:ee:09:7a:13:71:3f:e2:46:98:2b:e8:c1:
ae:d1:25:63:d0:99:42:97:e1:01:65:b0:69:a8:24:
95:a4:45:a7:0c:20:35:40:3e:4d:18:d4:57:c7:81:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:99:8E:D5:DD:B2:54:32:7D:6B:04:78:AE:C0:9E:E3:A7:EC:4A
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/wj2ZjtXdslQyfWsEeK7AnuOn7Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.152.0/22
95.105.80.0/22
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ff:aa:ea:26:9b:76:8d:a0:4d:ee:b1:5d:68:2d:c5:c2:a6:
dd:24:87:bd:e0:95:15:6d:ac:6d:39:48:6a:7f:f5:09:0e:5a:
6c:cc:05:61:77:5b:7d:3e:5e:89:95:d9:ca:55:ea:14:08:49:
47:55:f9:e4:7f:78:9a:1e:6c:c8:c5:76:b0:25:b4:d8:0c:43:
5d:87:ba:f8:cd:01:f1:5a:84:bb:44:45:ad:8c:6c:5a:8b:76:
b1:b3:0e:fc:cc:c7:cc:9c:56:b2:ab:bc:70:e7:3e:f9:56:82:
56:8c:8d:b6:ef:33:a3:df:64:dc:49:da:97:93:25:46:7e:01:
51:bd:ff:87:a3:b2:ea:56:1b:57:2e:34:2b:03:ed:0a:86:28:
94:3b:2c:f9:d8:f8:95:d7:1d:ad:fe:8d:46:fc:84:50:ef:fd:
09:1d:31:71:72:71:94:85:12:fb:c4:a5:f6:5e:41:09:c3:d1:
c4:5a:bf:a9:e2:95:44:0a:fd:f2:50:d4:bf:70:d1:6e:65:8a:
3b:8e:cd:38:55:c1:8a:1e:ed:ca:c7:4e:19:5a:c0:8d:59:22:
95:e2:fd:2a:d9:bf:49:53:e8:54:d4:58:46:05:d7:eb:3c:17:
0c:06:ed:ba:4c:4d:d2:64:a1:74:c8:8c:0b:24:11:19:0b:b6:
b2:7c:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:32 2026 by rpki-client