Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/p7kUQsOQtRN8x-may1Y8dR-SzTM.roa
File: p7kUQsOQtRN8x-may1Y8dR-SzTM.roa (raw, json)
Hash identifier: e1zw6xIZxJlaisau8WiBgS/sq06VVodd4P5Ejxa9/2U=
Subject key identifier: A7:B9:14:42:C3:90:B5:13:7C:C7:E9:9A:CB:56:3C:75:1F:92:CD:33
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 01A0D39E02CD099FFEE042B5C1B6E9205EE4
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/p7kUQsOQtRN8x-may1Y8dR-SzTM.roa
Signing time: Thu 24 Sep 2026 13:32:23 +0000
ROA not before: Thu 24 Sep 2026 13:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39507
IP address blocks: 46.253.208.0/20 maxlen: 20
91.222.72.0/22 maxlen: 22
91.224.196.0/23 maxlen: 23
91.231.32.0/23 maxlen: 23
91.234.100.0/22 maxlen: 22
91.237.224.0/22 maxlen: 22
91.237.228.0/23 maxlen: 23
95.171.192.0/19 maxlen: 19
176.101.128.0/20 maxlen: 20
185.3.60.0/22 maxlen: 22
185.41.80.0/22 maxlen: 22
185.95.196.0/22 maxlen: 22
185.107.140.0/22 maxlen: 22
185.234.232.0/22 maxlen: 22
185.245.44.0/22 maxlen: 22
185.253.64.0/22 maxlen: 22
188.191.216.0/21 maxlen: 21
194.180.220.0/22 maxlen: 22
2a07:f080::/32 maxlen: 32
2a0c:3540::/32 maxlen: 32
2a0d:3100::/29 maxlen: 29
2a0d:4a80::/32 maxlen: 32
2a0d:9180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:9e:02:cd:09:9f:fe:e0:42:b5:c1:b6:e9:20:5e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Sep 24 13:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7b91442c390b5137cc7e99acb563c751f92cd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:9f:57:a7:ad:fe:db:d7:a2:61:48:59:e7:
d5:e9:c8:77:79:3f:29:1e:c0:6d:42:91:d5:91:70:
00:8b:87:7f:6a:21:b8:51:df:d6:67:31:4a:9d:e4:
3c:e3:4d:bf:dd:54:61:28:12:80:0c:d1:3b:70:46:
94:d7:45:73:f4:a6:b5:95:59:50:2d:49:a2:b0:d8:
c5:dd:8d:f3:1f:79:31:f7:ee:fb:f3:bc:f2:22:69:
9a:1c:73:e7:6f:a8:c8:6a:3f:fa:71:76:01:69:65:
95:b4:6f:89:62:3c:b6:59:01:c6:d1:13:f1:2c:83:
63:bf:eb:7d:23:3e:cf:08:52:a4:69:a9:eb:39:73:
17:58:23:2a:29:5c:1e:b9:af:f7:75:a1:a3:64:98:
b1:cb:df:ed:f8:88:9e:66:6a:10:f3:bb:db:38:4c:
56:84:70:08:1f:4e:3a:d4:98:ef:63:ce:b3:94:1a:
d2:a4:19:f3:58:5b:55:24:2b:53:01:c3:c6:5f:37:
5f:d4:87:68:4b:01:e9:e3:84:c7:75:4a:ea:31:ce:
4d:50:9d:89:db:d7:28:44:f8:12:dd:82:c9:87:be:
0e:8e:de:ed:86:14:9e:cf:8b:4f:f2:f7:4c:67:4d:
a8:e4:52:86:cd:4b:83:26:f5:c1:1f:c0:eb:d5:87:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:14:42:C3:90:B5:13:7C:C7:E9:9A:CB:56:3C:75:1F:92:CD:33
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/p7kUQsOQtRN8x-may1Y8dR-SzTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.208.0/20
91.222.72.0/22
91.224.196.0/23
91.231.32.0/23
91.234.100.0/22
91.237.224.0-91.237.229.255
95.171.192.0/19
176.101.128.0/20
185.3.60.0/22
185.41.80.0/22
185.95.196.0/22
185.107.140.0/22
185.234.232.0/22
185.245.44.0/22
185.253.64.0/22
188.191.216.0/21
194.180.220.0/22
IPv6:
2a07:f080::/32
2a0c:3540::/32
2a0d:3100::/29
2a0d:4a80::/32
2a0d:9180::/32
Signature Algorithm: sha256WithRSAEncryption
a0:2d:33:43:92:f1:c1:1b:0b:d9:94:b7:13:19:13:d2:39:15:
73:a5:ae:f8:74:fe:dc:9b:bc:87:72:50:23:e2:c0:d1:f6:67:
dd:56:e3:ae:c9:97:a1:35:80:15:f9:54:f0:51:c0:f8:ca:d7:
2b:ba:d0:37:66:0f:ae:ef:35:ab:c3:b2:a7:8c:20:a8:5d:c8:
33:bd:20:65:1e:07:f2:b7:aa:23:af:ef:7d:2f:96:b9:20:aa:
93:18:2a:3c:66:27:99:c7:dd:d1:dc:eb:bf:b6:69:91:5f:49:
e9:75:b0:85:4f:79:50:52:92:16:48:ca:4e:e5:9f:af:0e:b5:
08:9d:bf:40:c0:71:0b:a1:a9:be:9b:bc:af:f3:94:83:52:f1:
0b:fc:f9:b7:58:ce:15:a8:d6:04:15:ad:5c:04:fa:c6:8c:e4:
b6:dd:99:87:8a:e1:a0:8a:aa:62:27:6f:68:eb:36:2a:b5:c9:
0e:26:d9:c1:9c:9d:a1:4c:03:89:1d:0f:01:8d:68:4c:aa:2f:
4b:6c:60:6a:d2:76:43:e6:fb:58:4a:86:74:31:83:66:2d:3a:
7a:ff:1d:a2:10:83:cc:16:08:0d:69:06:19:d5:cb:ab:c7:70:
e2:96:35:03:b6:6f:22:97:e9:b9:a2:e0:9c:8a:8a:33:c7:17:
80:80:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:58:13 2026 by rpki-client