Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/JGlwLrgXOZygm-Zzcz6tqGha88s.roa
File: JGlwLrgXOZygm-Zzcz6tqGha88s.roa (raw, json)
Hash identifier: Sg+e76CH+EjgQx2ZOeRsReWXnQ16QNmHty0XTxMvNVQ=
Subject key identifier: 24:69:70:2E:B8:17:39:9C:A0:9B:E6:73:73:3E:AD:A8:68:5A:F3:CB
Certificate issuer: /CN=11e39c58202f5a435d326356c6eb05d9943c3817
Certificate serial: 019F236845DADF07E27ABCCFB73442F032CB
Authority key identifier: 11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/JGlwLrgXOZygm-Zzcz6tqGha88s.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203067
IP address blocks: 46.175.48.0/22 maxlen: 22
46.175.48.0/24 maxlen: 24
46.175.49.0/24 maxlen: 24
46.175.52.0/24 maxlen: 24
46.175.53.0/24 maxlen: 24
46.175.54.0/24 maxlen: 24
46.175.55.0/24 maxlen: 24
185.145.48.0/24 maxlen: 24
185.145.49.0/24 maxlen: 24
185.145.50.0/24 maxlen: 24
185.145.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:da:df:07:e2:7a:bc:cf:b7:34:42:f0:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e39c58202f5a435d326356c6eb05d9943c3817
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2469702eb817399ca09be673733eada8685af3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:06:0a:7a:4b:31:b2:15:73:75:2d:8d:91:
92:e1:99:81:5d:b1:48:73:cd:f8:86:9e:63:0c:78:
84:c6:c6:a2:83:2b:b7:c6:44:d0:72:8f:ae:08:91:
83:b0:75:45:2e:21:bd:80:1c:05:3f:65:22:0b:3e:
57:92:3f:de:bd:05:f9:10:ce:c5:f9:52:c8:9e:61:
a3:fb:47:1f:e8:b3:44:af:e4:8e:c8:21:2b:9e:33:
c4:8f:90:58:f4:84:ad:a7:2e:d5:60:58:62:f4:d2:
8a:d0:d3:bf:b8:76:6a:b4:9a:f6:00:3e:a4:f1:1d:
dd:57:39:7a:b1:ea:71:62:d2:81:3e:00:b6:31:c0:
b0:99:c8:04:9e:a3:a5:56:e1:bd:52:59:ce:6c:ca:
90:26:17:28:64:83:8f:33:b7:5b:bf:74:4c:eb:c5:
0a:7a:3a:2c:6c:2b:fd:85:86:8f:c5:53:8d:36:aa:
4f:27:b9:0c:9e:80:35:04:9c:de:97:ed:e2:4e:e2:
02:32:32:71:b0:55:3c:42:b5:d6:ce:f0:90:80:f7:
fd:62:24:a2:9f:42:54:eb:c0:fc:75:39:c3:03:26:
fd:56:24:fe:37:4f:d6:97:de:d8:9f:0e:cc:40:79:
40:0b:4f:d8:37:36:dc:f5:4c:8a:73:2b:77:45:f5:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:70:2E:B8:17:39:9C:A0:9B:E6:73:73:3E:AD:A8:68:5A:F3:CB
X509v3 Authority Key Identifier:
keyid:11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/JGlwLrgXOZygm-Zzcz6tqGha88s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.48.0/21
185.145.48.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b3:ab:9b:ad:1b:0d:21:9d:41:ad:d9:8f:41:a6:83:ac:ac:
0c:50:b8:2b:15:aa:31:4b:85:09:5a:51:58:4a:1d:df:26:98:
1d:b7:8e:e0:fb:2e:56:55:62:eb:a2:99:3e:95:b9:d8:cc:9a:
61:49:94:a6:06:29:e7:b2:59:08:e3:c0:2d:0e:48:0e:27:4b:
cf:92:20:d3:95:25:fa:e3:e9:4d:fa:b6:5d:2c:d5:e9:4a:7d:
91:7e:5c:0d:81:16:a8:6a:5a:65:a2:8d:72:4d:03:cc:e2:37:
95:ee:59:3d:6a:27:38:0f:94:c3:44:14:15:f6:04:11:07:74:
33:ec:1e:4d:e3:86:e3:3e:35:c1:e7:29:a6:33:bd:73:ce:50:
b4:a5:74:d7:af:4c:8d:a8:f6:75:b8:4c:c5:a8:da:16:ec:52:
e2:77:22:fc:83:6f:c1:82:e2:07:1b:a8:42:8f:18:dc:7a:66:
50:bd:36:f8:28:52:ab:35:d3:fb:d8:30:9b:6a:dc:66:00:d3:
17:25:18:ce:d4:f8:9a:4e:c9:d4:92:8c:74:3f:5f:18:0d:df:
3a:83:82:d0:2d:3d:bc:9b:36:2b:3f:31:15:d2:9e:2f:0e:47:
61:79:9c:06:92:f6:f3:6e:fc:4d:70:45:10:12:db:19:05:f6:
4c:62:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:04:58 2026 by rpki-client