Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa
File: PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa (raw, json)
Hash identifier: PXjaU8QTswXCjDyy2BPXpx1XOOVAoOODgsuczLeFqK8=
Subject key identifier: 3E:84:97:04:AD:06:CD:3D:90:11:82:9D:45:21:06:BC:01:70:C4:2D
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 01A0A957A07E3D57F7FAA784A3399B93C57B
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa
Signing time: Wed 16 Sep 2026 08:31:27 +0000
ROA not before: Wed 16 Sep 2026 08:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 37.48.128.0/18 maxlen: 18
37.48.192.0/19 maxlen: 19
46.58.128.0/20 maxlen: 20
46.58.144.0/20 maxlen: 20
46.58.160.0/20 maxlen: 20
46.58.176.0/20 maxlen: 20
46.58.192.0/20 maxlen: 20
46.58.208.0/20 maxlen: 20
46.58.224.0/20 maxlen: 20
46.58.240.0/20 maxlen: 20
130.0.240.0/20 maxlen: 20
130.180.128.0/20 maxlen: 20
130.180.144.0/20 maxlen: 20
130.180.160.0/20 maxlen: 20
130.180.176.0/20 maxlen: 20
178.171.128.0/20 maxlen: 20
178.171.144.0/20 maxlen: 20
178.171.160.0/20 maxlen: 20
178.171.176.0/20 maxlen: 20
178.171.192.0/20 maxlen: 20
178.171.208.0/20 maxlen: 20
178.171.224.0/20 maxlen: 20
178.171.240.0/20 maxlen: 20
188.160.0.0/17 maxlen: 17
188.160.128.0/20 maxlen: 20
188.160.144.0/20 maxlen: 20
188.160.160.0/20 maxlen: 20
188.160.176.0/20 maxlen: 20
188.160.192.0/20 maxlen: 20
188.160.208.0/20 maxlen: 20
188.160.224.0/20 maxlen: 20
188.160.240.0/20 maxlen: 20
188.229.128.0/20 maxlen: 20
188.229.144.0/20 maxlen: 20
188.229.160.0/20 maxlen: 20
188.229.176.0/20 maxlen: 20
188.229.192.0/20 maxlen: 20
188.229.208.0/20 maxlen: 20
188.229.224.0/20 maxlen: 20
188.229.240.0/20 maxlen: 20
2a00:1ee8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:57:a0:7e:3d:57:f7:fa:a7:84:a3:39:9b:93:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Sep 16 08:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e849704ad06cd3d9011829d452106bc0170c42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:e8:2a:47:43:3d:52:2a:f9:b3:e6:31:05:
74:4c:5c:5c:cd:d1:6d:68:12:59:c6:03:6b:75:d6:
43:ce:4c:f1:04:0e:45:9a:4b:16:f1:43:0f:c9:7f:
64:a6:9e:37:0a:ef:64:a5:b0:17:0b:4c:26:62:6f:
a3:3d:6b:54:f0:c8:46:3e:c8:83:b8:5b:6b:d2:5a:
63:3b:98:6d:3c:bc:b3:15:81:72:a5:6d:d7:ed:97:
34:8c:b5:03:77:3b:3f:61:a7:df:6b:5e:69:4a:da:
37:4f:35:a0:74:22:48:37:ca:e5:d8:69:bd:82:10:
7a:60:04:f2:76:42:5a:db:6a:ea:eb:35:04:8d:fb:
54:ba:3e:ff:13:29:22:3d:67:c8:16:b9:67:fd:8f:
e6:96:fb:f8:60:03:66:20:92:0c:eb:d6:59:45:0c:
ab:ac:51:42:39:52:4f:da:56:50:dd:da:38:33:9e:
17:fb:fc:e0:aa:99:5f:5a:f4:d2:e8:1d:46:68:b2:
54:75:8c:7a:f9:0f:e5:5b:85:87:67:ea:ce:27:56:
e3:a3:27:42:85:d9:40:44:98:dc:a8:b4:ca:ed:71:
82:35:53:bf:69:1c:b1:fc:d8:91:e1:65:08:41:de:
29:34:d4:70:79:5e:06:e7:b9:6c:29:2a:28:04:58:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:97:04:AD:06:CD:3D:90:11:82:9D:45:21:06:BC:01:70:C4:2D
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.128.0-37.48.223.255
46.58.128.0/17
130.0.240.0/20
130.180.128.0/18
178.171.128.0/17
188.160.0.0/16
188.229.128.0/17
IPv6:
2a00:1ee8::/32
Signature Algorithm: sha256WithRSAEncryption
08:1a:8b:81:8c:04:f0:c7:12:47:e0:e8:75:3e:b8:a8:94:c8:
f0:8d:54:84:4c:d2:a9:5b:ef:6e:d0:04:0c:d3:18:9b:72:1b:
ae:69:96:76:c3:24:d8:c9:1a:06:3d:a2:00:40:ea:a5:b6:c0:
d6:0c:2d:e5:11:28:06:65:ae:5f:26:6a:1b:2a:81:89:a5:e5:
f7:54:6b:95:18:fc:2b:26:85:c3:59:49:9f:94:e3:97:03:44:
e3:3a:a4:44:4a:44:ad:ed:ae:32:de:f6:8f:eb:3d:97:53:84:
06:bd:90:ff:d1:24:0f:d9:2b:8b:12:4b:81:81:3f:0a:9f:14:
76:9c:da:04:c2:5b:b9:c5:51:2a:af:6f:c9:ce:ce:11:03:9e:
91:6c:8b:28:c8:e9:d1:1d:d5:db:bb:20:e2:5a:5a:66:88:0c:
4d:67:ee:ab:b6:f5:c3:08:cd:7e:6e:ff:99:f1:ca:e6:6d:80:
3d:73:3d:8a:b7:07:91:53:1b:5b:94:3a:be:f1:c4:8f:38:f5:
ea:ec:b5:35:4b:e3:fd:61:3d:80:54:ca:4d:1d:fc:e4:c3:3c:
9d:4c:4a:76:98:0d:88:19:8d:07:ca:85:42:a9:8d:b8:6d:f1:
f6:81:e2:55:68:68:1a:c0:50:86:60:b3:ca:14:2b:76:ed:a1:
a5:a6:3d:02
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAaCpV6B+PVf3+qeEozmbk8V7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw
MDk0YjUwHhcNMjYwOTE2MDgzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTg0OTcwNGFkMDZjZDNkOTAxMTgyOWQ0NTIxMDZiYzAxNzBjNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xHoKkdDPVIq+bPmMQV0TFxczdFt
aBJZxgNrddZDzkzxBA5FmksW8UMPyX9kpp43Cu9kpbAXC0wmYm+jPWtU8MhGPsiD
uFtr0lpjO5htPLyzFYFypW3X7Zc0jLUDdzs/Yaffa15pSto3TzWgdCJIN8rl2Gm9
ghB6YATydkJa22rq6zUEjftUuj7/EykiPWfIFrln/Y/mlvv4YANmIJIM69ZZRQyr
rFFCOVJP2lZQ3do4M54X+/zgqplfWvTS6B1GaLJUdYx6+Q/lW4WHZ+rOJ1bjoydC
hdlARJjcqLTK7XGCNVO/aRyx/NiR4WUIQd4pNNRweV4G57lsKSooBFiejwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFD6ElwStBs09kBGCnUUhBrwBcMQtMB8GA1UdIwQY
MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt
MzI3YWNjMWIxZTU5LzEvUG9TWEJLMEd6VDJRRVlLZFJTRUd2QUZ3eEMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5
LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA3BAIAATAxMAwDBAclMIAD
BAUlMMADBAcuOoADBASCAPADBAaCtIADBAeyq4ADAwC8oAMEB7zlgDANBAIAAjAH
AwUAKgAe6DANBgkqhkiG9w0BAQsFAAOCAQEACBqLgYwE8McSR+DodT64qJTI8I1U
hEzSqVvvbtAEDNMYm3IbrmmWdsMk2MkaBj2iAEDqpbbA1gwt5REoBmWuXyZqGyqB
iaXl91RrlRj8KyaFw1lJn5TjlwNE4zqkREpEre2uMt72j+s9l1OEBr2Q/9EkD9kr
ixJLgYE/Cp8UdpzaBMJbucVRKq9vyc7OEQOekWyLKMjp0R3V27sg4lpaZogMTWfu
q7b1wwjNfm7/mfHK5m2APXM9ircHkVMbW5Q6vvHEjzj16uy1NUvj/WE9gFTKTR38
5MM8nUxKdpgNiBmNB8qFQqmNuG3x9oHiVWhoGsBQhmCzyhQrdu2hpaY9Ag==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:19:41 2026 by rpki-client