Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Sdk2Dm6z03KwrwtbEuqT0J43F_U.roa
File: Sdk2Dm6z03KwrwtbEuqT0J43F_U.roa (raw, json)
Hash identifier: U3idiZCDE3LetRk2OAwvE51zhAy6sUsYBrkrt0UEO/M=
Subject key identifier: 49:D9:36:0E:6E:B3:D3:72:B0:AF:0B:5B:12:EA:93:D0:9E:37:17:F5
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01A0E90C53CB144EDCF1CB17BD924F1CFD9D
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Sdk2Dm6z03KwrwtbEuqT0J43F_U.roa
Signing time: Mon 28 Sep 2026 17:24:54 +0000
ROA not before: Mon 28 Sep 2026 17:24:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48716
IP address blocks: 46.247.40.0/23 maxlen: 24
77.240.38.0/23 maxlen: 24
77.243.80.0/23 maxlen: 24
78.40.108.0/23 maxlen: 24
82.115.40.0/22 maxlen: 24
85.202.194.0/23 maxlen: 24
89.219.32.0/22 maxlen: 24
91.147.92.0/22 maxlen: 22
91.147.92.0/24 maxlen: 24
91.147.93.0/24 maxlen: 24
91.147.94.0/24 maxlen: 24
91.147.95.0/24 maxlen: 24
91.147.104.0/22 maxlen: 24
91.201.214.0/23 maxlen: 24
91.215.136.0/22 maxlen: 24
91.215.136.0/24 maxlen: 24
91.215.137.0/24 maxlen: 32
91.215.139.0/24 maxlen: 32
94.247.128.0/21 maxlen: 24
109.233.108.0/22 maxlen: 32
185.4.180.0/22 maxlen: 24
185.22.64.0/22 maxlen: 24
185.35.222.0/23 maxlen: 24
185.102.72.0/22 maxlen: 24
185.146.0.0/22 maxlen: 24
194.32.140.0/22 maxlen: 24
194.39.64.0/22 maxlen: 24
194.39.64.0/23 maxlen: 24
194.39.66.0/24 maxlen: 24
194.39.67.0/24 maxlen: 24
194.110.54.0/23 maxlen: 24
194.110.54.0/24 maxlen: 24
194.110.55.0/24 maxlen: 24
194.238.40.0/23 maxlen: 23
194.238.40.0/24 maxlen: 24
194.238.41.0/24 maxlen: 24
195.49.208.0/21 maxlen: 21
195.49.209.0/24 maxlen: 24
195.49.210.0/23 maxlen: 23
195.49.210.0/24 maxlen: 24
195.49.211.0/24 maxlen: 24
195.49.212.0/22 maxlen: 22
195.49.212.0/24 maxlen: 24
195.49.213.0/24 maxlen: 24
195.49.214.0/24 maxlen: 24
195.49.215.0/24 maxlen: 24
195.93.152.0/23 maxlen: 24
195.93.152.0/24 maxlen: 24
195.93.153.0/24 maxlen: 24
195.210.46.0/23 maxlen: 24
195.210.46.0/24 maxlen: 24
195.210.47.0/24 maxlen: 24
212.116.232.0/23 maxlen: 23
212.116.232.0/24 maxlen: 24
212.116.233.0/24 maxlen: 24
213.155.20.0/23 maxlen: 23
213.155.20.0/24 maxlen: 24
213.155.21.0/24 maxlen: 24
2a00:5da0::/36 maxlen: 48
2a00:5da0:1000::/36 maxlen: 48
2a00:5da0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:0c:53:cb:14:4e:dc:f1:cb:17:bd:92:4f:1c:fd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Sep 28 17:24:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d9360e6eb3d372b0af0b5b12ea93d09e3717f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:39:10:e8:00:7c:a1:b8:79:07:38:be:9a:
13:a9:39:84:1f:41:92:a6:6f:5a:37:dc:3e:44:81:
22:53:db:f0:4d:d5:20:4a:4b:68:6a:49:3f:89:8d:
b0:ec:56:0d:c1:bb:29:4b:17:f3:b7:84:00:61:a7:
92:51:e4:b6:82:38:7c:de:fd:ff:17:29:24:d2:b4:
8d:12:8b:9b:88:7d:fa:9a:c0:1d:74:0b:14:8e:a5:
75:f2:0f:24:98:06:47:02:83:d8:cb:74:da:09:91:
d7:11:3d:71:ea:fd:1e:fe:59:ba:8f:fb:27:c2:34:
d5:88:d6:5c:ed:0c:84:31:8a:28:f0:62:2a:06:a9:
32:36:c5:78:f0:c4:72:71:a4:4b:0a:6e:a1:d9:c0:
a2:b7:bc:eb:46:09:5e:e0:c8:61:84:3c:e4:71:d9:
00:fc:df:83:6f:8a:c2:01:b8:97:2e:ed:c4:84:92:
d7:e1:d0:a5:10:98:9d:00:0b:c4:5f:fa:31:10:09:
c6:10:1e:41:dc:33:7d:4d:a2:5b:06:a6:84:b2:ce:
a7:f0:91:53:0f:57:04:3a:04:d6:4a:12:72:31:8a:
04:b0:9a:cc:b2:92:8c:dd:f1:42:9c:96:58:b7:e4:
d1:f6:f4:ee:0b:40:b3:ae:3c:d4:52:60:cf:58:f1:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:36:0E:6E:B3:D3:72:B0:AF:0B:5B:12:EA:93:D0:9E:37:17:F5
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/Sdk2Dm6z03KwrwtbEuqT0J43F_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.40.0/23
77.240.38.0/23
77.243.80.0/23
78.40.108.0/23
82.115.40.0/22
85.202.194.0/23
89.219.32.0/22
91.147.92.0/22
91.147.104.0/22
91.201.214.0/23
91.215.136.0/22
94.247.128.0/21
109.233.108.0/22
185.4.180.0/22
185.22.64.0/22
185.35.222.0/23
185.102.72.0/22
185.146.0.0/22
194.32.140.0/22
194.39.64.0/22
194.110.54.0/23
194.238.40.0/23
195.49.208.0/21
195.93.152.0/23
195.210.46.0/23
212.116.232.0/23
213.155.20.0/23
IPv6:
2a00:5da0::/35
Signature Algorithm: sha256WithRSAEncryption
11:8a:f1:63:cd:7c:8e:12:24:79:ad:d4:05:da:f9:f4:ea:b4:
4f:fa:a5:e1:6e:75:9e:be:7e:51:bd:d4:a4:d7:6b:ff:2e:ff:
52:7a:3b:eb:83:df:ac:d7:c3:2f:e2:78:5e:93:27:de:b9:f2:
0e:a1:7e:6e:97:9a:e5:d6:c9:9f:6d:72:2d:8b:af:2e:79:b5:
ee:e4:56:82:96:3b:eb:8c:fd:57:d7:9c:9d:b0:7e:79:01:31:
32:55:04:89:b9:16:f2:b0:0f:29:f7:26:c8:a1:dd:e6:2e:88:
dc:4b:0c:89:6f:b7:f0:31:ea:4f:d5:76:cd:2b:79:80:21:26:
c1:19:72:1f:30:90:8e:5d:2c:8d:8f:18:b9:df:e4:f4:55:d0:
50:36:4f:db:83:ab:67:c1:6f:d9:03:d3:c2:bc:06:ac:30:93:
d0:10:cf:11:74:1f:89:0d:99:38:9c:55:1b:48:db:11:3f:06:
37:4c:b3:b2:26:5a:6b:a9:f6:6e:5f:4e:28:d8:85:1d:be:cb:
6d:00:7e:bb:70:48:1d:bd:3b:e6:e0:a7:4b:a1:cf:22:61:f8:
0f:b8:48:8c:72:18:ec:79:fd:f5:59:cf:21:d7:e0:f0:8a:3e:
28:69:db:01:14:97:91:31:9e:bd:1a:64:7f:00:7f:96:e1:59:
dc:57:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:28 2026 by rpki-client