Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rWy6H0-U8RphpxR9KRWA2zpEkvw.roa
File: rWy6H0-U8RphpxR9KRWA2zpEkvw.roa (raw, json)
Hash identifier: CX4fSjsEWTRJMP5QZYtWQ3gXA8MguFf/k3u8ar8feAQ=
Subject key identifier: AD:6C:BA:1F:4F:94:F1:1A:61:A7:14:7D:29:15:80:DB:3A:44:92:FC
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23695374160EE9CCF67B0C13A789265D
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rWy6H0-U8RphpxR9KRWA2zpEkvw.roa
Signing time: Thu 02 Jul 2026 15:18:52 +0000
ROA not before: Thu 02 Jul 2026 15:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 46.151.32.0/24 maxlen: 24
46.151.33.0/24 maxlen: 24
46.151.34.0/24 maxlen: 24
46.151.35.0/24 maxlen: 24
77.36.2.0/23 maxlen: 24
77.36.54.0/24 maxlen: 24
77.36.55.0/24 maxlen: 24
91.232.20.0/24 maxlen: 24
93.120.36.0/24 maxlen: 24
93.120.37.0/24 maxlen: 24
93.120.38.0/24 maxlen: 24
176.110.107.0/24 maxlen: 24
176.110.112.0/24 maxlen: 24
176.110.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:53:74:16:0e:e9:cc:f6:7b:0c:13:a7:89:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad6cba1f4f94f11a61a7147d291580db3a4492fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:10:0a:de:9d:b5:5c:54:35:eb:70:14:71:
42:76:69:db:51:7f:f8:82:04:e5:f2:3d:d7:95:37:
82:26:f8:84:c3:cd:dc:89:56:d0:51:ab:1f:93:b0:
f7:a6:4c:98:8e:fd:77:1d:67:6d:60:cc:6a:ea:01:
24:c1:c9:d8:98:9f:d2:99:27:ea:58:b6:91:2c:8d:
88:5c:37:ac:6f:51:e8:58:fe:4b:68:06:ba:90:fa:
0c:82:96:c9:36:e1:8b:24:d1:55:93:8a:fb:74:33:
0b:07:50:8f:78:9b:fe:e0:4d:6e:22:ea:ed:16:ae:
ae:be:94:75:2d:32:76:e0:31:51:8b:0b:68:d0:95:
e9:54:f1:2a:9b:74:e7:65:49:80:5d:fc:e9:cc:57:
05:bc:d9:33:6d:23:45:4e:41:af:3d:76:f7:4d:37:
13:a8:7a:7d:da:17:58:a0:b2:44:8c:59:9d:1a:dc:
b7:bf:ba:c9:45:62:ce:7e:63:7d:d9:07:6a:bb:ed:
ed:9f:bf:68:6a:b4:18:a4:c0:a8:44:8a:6a:a1:23:
3c:e0:42:1c:cd:53:fa:c2:a6:bc:e0:fa:de:42:f0:
a6:93:36:d3:81:42:93:cf:03:1e:92:22:73:be:e5:
4c:83:44:9c:d5:fd:d3:4c:a8:d1:d8:05:67:1e:12:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:BA:1F:4F:94:F1:1A:61:A7:14:7D:29:15:80:DB:3A:44:92:FC
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/rWy6H0-U8RphpxR9KRWA2zpEkvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.32.0/22
77.36.2.0/23
77.36.54.0/23
91.232.20.0/24
93.120.36.0-93.120.38.255
176.110.107.0/24
176.110.112.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:67:5d:e1:9c:e2:4b:3e:f3:4d:1f:4a:2d:32:d3:81:10:2f:
23:86:3a:26:a9:73:d0:21:c5:4a:1d:7a:9a:0e:b0:3c:ef:4b:
0a:59:d1:fb:6e:cf:43:6c:a5:2e:a5:df:80:77:cb:e0:fa:95:
d4:10:68:50:2a:24:b4:b7:64:1a:eb:a5:f5:ea:e7:a8:9a:93:
2c:0a:29:84:f8:29:ce:4c:b1:6f:22:50:41:0a:1a:40:01:c3:
04:dc:47:a6:d9:f2:a4:d2:7c:06:2b:3e:46:62:5e:3f:53:68:
71:e1:54:50:5f:ff:95:54:ab:5b:f0:8d:0e:b0:68:68:82:8e:
c3:39:33:74:5f:e4:2b:3f:08:ee:0a:7c:d1:92:76:7a:46:4c:
25:16:38:f7:07:2e:19:3b:30:4f:1f:45:cc:21:33:30:ce:cf:
64:be:50:4a:a1:53:58:ad:ba:53:3c:c6:ed:44:77:bb:05:97:
0f:4d:b0:dc:39:96:9c:72:c1:ca:79:3d:ab:76:1a:7e:35:0e:
2f:1e:bf:36:8e:22:a0:37:fe:63:51:8b:ed:fe:21:3c:23:97:
81:fa:86:e7:41:3f:97:80:ed:22:5c:5e:8b:cd:6d:96:08:b5:
c1:8f:8c:26:03:8e:2b:92:82:47:49:aa:bd:5b:16:1f:07:8f:
63:1d:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:02 2026 by rpki-client