Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa
File: y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa (raw, json)
Hash identifier: YXs0OmfBDY7UMYspxzzwXIRX/OhefbkSgpo07DTddKk=
Subject key identifier: CB:53:1D:F9:F8:D2:D4:C9:3D:7C:DE:37:57:BD:FE:66:6A:D6:1D:82
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A0ADC338A92695FAE73DEE11CFEDCEE261
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa
Signing time: Thu 17 Sep 2026 05:07:27 +0000
ROA not before: Thu 17 Sep 2026 05:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201771
IP address blocks: 46.49.128.0/24 maxlen: 24
46.49.133.0/24 maxlen: 24
46.49.138.0/24 maxlen: 24
46.49.150.0/24 maxlen: 24
46.49.151.0/24 maxlen: 24
46.49.154.0/24 maxlen: 24
46.49.157.0/24 maxlen: 24
46.49.159.0/24 maxlen: 24
46.49.186.0/24 maxlen: 24
46.49.192.0/24 maxlen: 24
46.49.200.0/23 maxlen: 23
46.49.202.0/23 maxlen: 23
46.49.209.0/24 maxlen: 24
46.49.211.0/24 maxlen: 24
95.177.146.0/24 maxlen: 24
95.177.147.0/24 maxlen: 24
95.177.150.0/24 maxlen: 24
95.177.151.0/24 maxlen: 24
95.177.154.0/24 maxlen: 24
95.177.160.0/19 maxlen: 19
95.177.160.0/20 maxlen: 21
95.177.176.0/20 maxlen: 21
134.239.8.0/24 maxlen: 24
134.239.12.0/24 maxlen: 24
134.239.64.0/19 maxlen: 19
134.239.128.0/19 maxlen: 19
134.239.192.0/22 maxlen: 22
2a02:df0::/29 maxlen: 29
2a02:df1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:c3:38:a9:26:95:fa:e7:3d:ee:11:cf:ed:ce:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 17 05:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb531df9f8d2d4c93d7cde3757bdfe666ad61d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:f6:e5:49:5b:cb:55:52:66:f9:5c:66:8e:
4d:f9:b9:14:a1:da:b6:ad:4d:7a:9a:40:24:e9:37:
3c:fd:2b:e8:23:77:59:d9:58:2f:9e:4a:ae:2d:3d:
11:c2:16:ab:96:41:11:c3:c7:fe:a0:ea:fa:a1:e8:
0b:c5:1e:5e:ad:48:5f:cc:a2:2a:98:d0:cf:2f:03:
17:38:a7:75:d8:a9:b7:f2:20:fc:5d:63:c3:37:77:
a8:7a:6b:f8:92:f2:04:f2:ac:73:ed:c3:49:a2:57:
4a:7d:54:f8:b2:16:d6:e8:27:ea:ed:8d:85:8d:da:
76:56:e4:6f:8e:8d:80:77:bd:2a:da:43:e2:d8:aa:
68:50:3e:44:41:90:12:1d:07:e3:63:08:9d:9c:39:
c4:8d:19:a8:a9:f1:c7:96:f4:80:00:23:49:67:c1:
cd:b6:f7:14:b2:2c:17:8b:fb:84:b3:63:10:53:be:
a5:09:6e:c8:bd:d8:72:6e:a8:18:40:05:37:92:ba:
02:e5:dc:23:6b:96:e9:8e:f2:d6:18:46:38:6c:df:
4c:15:44:27:8f:60:e3:13:e3:53:a1:71:26:f0:a0:
5e:5c:20:d3:c6:dd:fc:a8:b6:fd:2c:72:d7:ec:aa:
e6:dc:7d:69:22:90:a0:3f:0e:22:92:e3:35:0d:e4:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:1D:F9:F8:D2:D4:C9:3D:7C:DE:37:57:BD:FE:66:6A:D6:1D:82
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/y1Md-fjS1Mk9fN43V73-ZmrWHYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.49.128.0/24
46.49.133.0/24
46.49.138.0/24
46.49.150.0/23
46.49.154.0/24
46.49.157.0/24
46.49.159.0/24
46.49.186.0/24
46.49.192.0/24
46.49.200.0/22
46.49.209.0/24
46.49.211.0/24
95.177.146.0/23
95.177.150.0/23
95.177.154.0/24
95.177.160.0/19
134.239.8.0/24
134.239.12.0/24
134.239.64.0/19
134.239.128.0/19
134.239.192.0/22
IPv6:
2a02:df0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:9b:90:75:d1:f5:33:2d:24:05:7c:4d:c3:84:c6:d3:78:bb:
10:a7:ee:a7:03:eb:81:30:a7:b3:eb:10:23:11:3c:2d:10:5a:
f7:76:93:17:cd:b6:47:53:50:37:9a:f4:3b:68:22:ca:87:33:
f4:af:4e:90:84:2d:c0:ed:d6:30:fc:58:77:79:90:4f:62:49:
63:fb:92:70:61:6b:a5:c9:23:c1:a8:7e:79:1f:50:66:55:cb:
31:8f:31:52:ff:63:5b:dc:47:d6:57:de:44:36:db:b8:be:3d:
74:3f:95:83:b5:81:69:80:67:44:44:e3:06:40:f2:ba:98:1b:
c1:05:73:dd:f2:cc:8f:32:d2:86:a9:4e:ba:f5:ac:33:a4:c0:
82:9f:87:92:93:6b:de:5b:24:19:81:b8:e2:3b:38:f8:63:93:
75:86:23:f8:ae:9e:eb:87:b5:05:87:e3:8c:60:4f:0c:1b:fb:
00:3e:4e:de:14:38:a3:ef:5c:aa:8a:9a:cb:b8:17:0e:53:e9:
16:32:2f:ee:96:46:43:75:70:e0:be:09:59:c9:a2:9b:7e:4a:
40:ab:1a:5c:e3:41:46:5a:bb:5d:b1:4f:8c:4e:57:cf:cf:73:
e0:86:b6:b1:06:c9:95:87:01:bf:f2:01:95:13:9e:fe:d6:bd:
e5:f1:8b:0e
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAaCtwzipJpX65z3uEc/tzuJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjYwOTE3MDUwNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjUzMWRmOWY4ZDJkNGM5M2Q3Y2RlMzc1N2JkZmU2NjZhZDYxZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zv25Ulby1VSZvlcZo5N+bkUodq2
rU16mkAk6Tc8/SvoI3dZ2VgvnkquLT0RwharlkERw8f+oOr6oegLxR5erUhfzKIq
mNDPLwMXOKd12Km38iD8XWPDN3eoemv4kvIE8qxz7cNJoldKfVT4shbW6Cfq7Y2F
jdp2VuRvjo2Ad70q2kPi2KpoUD5EQZASHQfjYwidnDnEjRmoqfHHlvSAACNJZ8HN
tvcUsiwXi/uEs2MQU76lCW7IvdhybqgYQAU3kroC5dwja5bpjvLWGEY4bN9MFUQn
j2DjE+NToXEm8KBeXCDTxt38qLb9LHLX7Krm3H1pIpCgPw4ikuM1DeQrpQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFMtTHfn40tTJPXzeN1e9/mZq1h2CMB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEveTFNZC1malMxTWs5Zk40M1Y3My1abXJXSFlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBhAQCAAEwfgMEAC4x
gAMEAC4xhQMEAC4xigMEAS4xlgMEAC4xmgMEAC4xnQMEAC4xnwMEAC4xugMEAC4x
wAMEAi4xyAMEAC4x0QMEAC4x0wMEAV+xkgMEAV+xlgMEAF+xmgMEBV+xoAMEAIbv
CAMEAIbvDAMEBYbvQAMEBYbvgAMEAobvwDANBAIAAjAHAwUDKgIN8DANBgkqhkiG
9w0BAQsFAAOCAQEAD5uQddH1My0kBXxNw4TG03i7EKfupwPrgTCns+sQIxE8LRBa
93aTF822R1NQN5r0O2giyocz9K9OkIQtwO3WMPxYd3mQT2JJY/uScGFrpckjwah+
eR9QZlXLMY8xUv9jW9xH1lfeRDbbuL49dD+Vg7WBaYBnRETjBkDyupgbwQVz3fLM
jzLShqlOuvWsM6TAgp+HkpNr3lskGYG44js4+GOTdYYj+K6e64e1BYfjjGBPDBv7
AD5O3hQ4o+9cqoqay7gXDlPpFjIv7pZGQ3Vw4L4JWcmim35KQKsaXONBRlq7XbFP
jE5Xz89z4Ia2sQbJlYcBv/IBlROe/ta95fGLDg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:04:03 2026 by rpki-client