Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kDNsliJDQ5DcqXFqiy0lZvbLBnE.roa
File: kDNsliJDQ5DcqXFqiy0lZvbLBnE.roa (raw, json)
Hash identifier: ysLeVRB7I4MIBfP12IET5vrxqZRN5U51AU1uQY/k4Ug=
Subject key identifier: 90:33:6C:96:22:43:43:90:DC:A9:71:6A:8B:2D:25:66:F6:CB:06:71
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A182440AF2F6DC1AC5F06D26ED13A4923F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kDNsliJDQ5DcqXFqiy0lZvbLBnE.roa
Signing time: Wed 28 Oct 2026 11:27:39 +0000
ROA not before: Wed 28 Oct 2026 11:27:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.29.24.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:44:0a:f2:f6:dc:1a:c5:f0:6d:26:ed:13:a4:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 28 11:27:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90336c9622434390dca9716a8b2d2566f6cb0671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:df:ca:f6:ea:fa:0a:d5:ba:d1:74:d5:bd:
ee:94:79:0e:f2:4e:c8:6c:da:96:cb:2d:8c:21:dd:
d0:9f:28:3a:25:ed:c0:44:63:4c:37:e2:dd:5a:de:
09:e6:4c:fe:67:4c:f3:16:ab:ed:90:b0:56:b5:94:
5c:49:3f:44:c4:16:6b:07:2d:35:04:16:ee:17:68:
08:19:5b:29:9d:8e:0b:b0:22:40:68:5b:e4:f9:80:
96:97:e9:c4:32:0b:38:d2:e0:24:ba:4e:4d:08:7c:
3b:db:4e:b1:09:a3:68:8e:d7:94:bb:f1:4d:21:52:
56:35:24:1c:e5:09:2a:3c:99:0b:8a:a7:c3:d0:3e:
30:d5:51:ca:5b:b2:07:a7:2a:b8:1e:bd:a5:bd:83:
29:fa:db:9c:e0:ab:dd:18:17:59:4b:96:59:e1:8b:
67:3e:43:d7:7c:b0:03:26:39:b2:0f:29:f8:86:f7:
cd:e4:1a:ba:bc:4d:c2:05:4a:73:79:ef:c3:34:40:
e3:98:7c:33:c8:cc:3d:65:0e:b0:70:02:87:1b:b3:
21:78:c8:df:d8:69:c0:c6:6b:93:35:cd:35:df:b3:
06:4d:8f:f9:60:44:f0:7f:b7:fc:b2:5a:8d:e7:d3:
c3:a2:0a:c5:64:28:d0:9a:8a:e1:ce:0b:ee:06:7a:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:6C:96:22:43:43:90:DC:A9:71:6A:8B:2D:25:66:F6:CB:06:71
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/kDNsliJDQ5DcqXFqiy0lZvbLBnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
185.85.188.0/24
185.85.237.0/24
185.86.12.0/24
185.98.61.0/24
185.119.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:92:3a:5e:af:da:50:5c:13:c1:9b:58:6f:40:82:c7:0a:72:
e9:4f:24:63:e7:5b:5c:4d:3b:bc:b8:b7:a0:ae:fc:93:f9:5d:
86:54:a5:16:c5:f0:fb:20:40:b0:cb:1a:aa:a7:30:20:a2:dd:
ad:56:cc:01:0c:aa:35:d9:d2:c8:b8:70:20:54:60:f7:8c:76:
4e:c1:a2:31:95:b5:42:24:6d:fd:be:71:be:b0:2b:42:7c:b4:
09:3b:20:29:14:38:8c:81:d7:a2:6d:1b:e5:e5:a1:a0:d1:a3:
b7:a2:8a:8b:ba:ab:49:8b:ef:94:69:ba:ca:02:47:74:9d:de:
d1:15:e9:d1:2d:72:eb:18:89:0a:46:b5:11:49:aa:2d:61:13:
42:11:ba:fc:8a:01:ab:e2:cd:8e:58:2c:b2:d2:ca:7e:62:2c:
95:19:c4:25:10:e8:59:10:25:44:fc:15:8d:5b:21:ab:7b:92:
74:28:29:e4:3f:e1:7f:12:0f:34:bb:c0:bb:22:2e:5d:a4:63:
23:ac:fc:39:05:e4:18:c6:7a:c7:ed:91:b5:23:0d:70:b0:fb:
fb:62:22:35:f9:e5:cd:fc:ed:f4:4a:e3:49:a8:81:63:05:7c:
c6:79:c1:14:a6:86:e9:fa:1d:e6:d7:06:0b:63:d3:e2:c2:df:
90:10:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:41:09 2026 by rpki-client